{"id":125,"date":"2013-11-19T00:00:00","date_gmt":"2013-11-18T15:00:00","guid":{"rendered":"http:\/\/taitan916.info\/blog\/?p=125"},"modified":"2014-05-19T23:20:57","modified_gmt":"2014-05-19T14:20:57","slug":"post-125","status":"publish","type":"post","link":"https:\/\/taitan916.info\/blog\/archives\/125","title":{"rendered":"$_SERVER['PHP_SELF']\u306b\u8106\u5f31\u6027\u3042\u308a"},"content":{"rendered":"

form\u306eaction\u5c5e\u6027\u3068\u304b\u30da\u30fc\u30b8\u30f3\u30b0\u306e\u30ea\u30f3\u30af\u3068\u304b\u3067\u3001<\/p>\n

<form action=\"<?=$_SERVER['PHP<\/a>_SELF'];?>\">
\n<a href=\"<?=$_SERVER['PHP<\/a>_SELF'];?>?page=<?=$page;?>\">link<\/a><\/p>\n

\u3068\u4f7f\u3063\u305f\u308a\u3059\u308b\u3051\u3069\u8106\u5f31\u6027\u304c\u3042\u308b\u3089\u3057\u3044\u3002<\/p>\n

\u25a0\u30bd\u30fc\u30b9<\/span>
\n<html>
\n<head>
\n<\/head>
\n<body>
\n<form action='<?=$_SERVER[\"PHP<\/a>_SELF\"];?>' method=\"post\">
\n<input type=\"button\" value=\"button\">
\n<\/form>
\n<\/body>
\n<\/html><\/p>\n

http:\/\/aaa.com\/index.php<\/a>\u306b\u4e0a\u8a18\u3092\u8a18\u8ff0\u3057\u305f\u3068\u3057\u3066\u3001
\n\u300chttp:\/\/aaa.com\/index.php\/'><script>alert(1);<\/script>'<\/a>\u300d
\n\u3068\u3044\u3046URL\u3092\u53e9\u304f\u3068\u30d6\u30e9\u30a6\u30b6\u306b\u3088\u3063\u3066\u306f\u30a2\u30e9\u30fc\u30c8\u304c\u51fa\u3066\u3057\u307e\u3046\u3002<\/p>\n

\u3069\u3046\u3082$_SERVER[\"PHP<\/a>_SELF\"]\u306f\u30af\u30a8\u30ea\u3082\u53d6\u5f97\u3055\u308c\u3066\u3057\u307e\u3046\u3063\u307d\u3044\u3002<\/p>\n

__FILE__\u304b$_SERVER[\"SCRIPT_NAME\"]\u3067\u4f7f\u3046\u3088\u3046\u306b\u3059\u308b\u3002<\/p>\n

\u25a0\u53c2\u8003\u30b5\u30a4\u30c8<\/span>
\nhttp:\/\/d.hatena.ne.jp\/geek-it\/20120229\/p1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

form\u306eaction\u5c5e\u6027\u3068\u304b\u30da\u30fc\u30b8\u30f3\u30b0\u306e\u30ea\u30f3\u30af\u3068\u304b\u3067\u3001 <form ac ... <\/p>\n","protected":false},"author":1,"featured_media":1085,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-125","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-php"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/posts\/125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/comments?post=125"}],"version-history":[{"count":0,"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/posts\/125\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/media\/1085"}],"wp:attachment":[{"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/media?parent=125"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/categories?post=125"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/taitan916.info\/blog\/wp-json\/wp\/v2\/tags?post=125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}