yxwzaxns
V2EX  ›  问与答

PHP 问题求解

  •  
  •   yxwzaxns · Mar 12, 2016 · 2973 views
    This topic created in 3804 days ago, the information mentioned may be changed or developed.

    代码如下,求传递合适的参数使之 echo 出 flag 的值:

    <?php
    include('config.php');
    session_start();

    if($_SESSION['time'] && time() - $_SESSION['time'] > 60) {
    session_destroy();
    die('timeout');
    } else {
    $_SESSION['time'] = time();
    }

    echo rand();
    if (isset($GET['go'])) {
    $_SESSION['rand'] = array();
    $i = 5;
    $d = '';
    while($i--){
    $r = (string)rand();
    $_SESSION['rand'][] = $r;
    $d .= $r;
    }
    echo md5($d);
    } else if (isset($_GET['check'])) {
    if ($_GET['check'] === $_SESSION['rand']) {
    echo $flag;
    } else {
    echo 'die';
    session_destroy();
    }
    } else {
    show_source(
    FILE_);
    }
    ?>

    Supplement 1  ·  Mar 13, 2016
    给个关键词也行了,我现在不知道怎么搜索这个问题
    virusdefender
        1
    virusdefender  
       Mar 12, 2016
    0ctf 啊 很简单的,自己想想
    yxwzaxns
        2
    yxwzaxns  
    OP
       Mar 12, 2016 via Android
    @virusdefender 能给个关键词么,我去查
    yxwzaxns
        3
    yxwzaxns  
    OP
       Mar 13, 2016 via Android
    自己顶一下
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   5298 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 26ms · UTC 09:00 · PVG 17:00 · LAX 02:00 · JFK 05:00
    ♥ Do have faith in what you're doing.