07 php db konkekcije.unlocked

8/18/2019 07 Php Db Konkekcije.unlocked

1/68

PIAPIA

07 PHP

B Dć

1B Dć


2/68

Kć ć

B Dć 2


3/68

B Dć 3


4/68

B Dć 4


5/68

B Dć 5


6/68

B Dć 6


7/68

B Dć 7


8/68

N

B Dć 8


9/68

PHP PDO

PDO PHP D O.

K ADO AX D O

PDO PHP

ć č DB ć .

B Dć 9


10/68

PHP PDO

PDO č SUBP (DBMS)

M SQL S / S F / I

DB2 / INFORMIX (IBM)

MSQL OCI (O C I)

ODBC

PSQL SQL

B Dć 10


11/68

D S N DSN

D S N DSN

G

:

:=;=

:

:=;=

:////

:::

D ,

B Dć 11


12/68

MSQL

B Dć 12


13/68

Z

K NULL

B Dć 13


14/68

PDO

PDO

D, D DE.

K D , D.

K D SQL .

K DE .

B Dć 14


15/68

PDO

K D

$= D($, $, $) $= D($, $, $,$A)

A

$>A(PDO::ATTRERRMODE,

PDO::ERRMODEEXCEPTION); N đ ( SILENT

WARING)

B Dć 15


16/68

PDO

M () ć D . . SELECT :

$ = $>(...)

B ć ć $ >C();

D D ć . .

($ >FA() $) $ ' . '';

B Dć 16


17/68

PDO

Z UPDATE, DELETE INSERT

(). $>($);

PDO ć ć ć:

$>(); // č

$>(); // ć č,

$> (); // đ

$> (); //

B Dć 17


18/68

PDO

PDO D č

$'' $1

O ć

D::($) K

ć

, ć

B Dć 18


19/68

PDO

M

D::() D::($)

Vć ID ( SQL )

B Dć 19


20/68

N PP23

Kć PP23

U C:TP23

U ć .

K S

B Dć 20


21/68

B Dć 21

$ = "";$ = "";$ = D(':=;=', $, $);// * , ($>('ELEC , , ') $)

$'' . " "; $'' . " ";

$'' . ""; "";// ($>('ELEC * ') $)

$0 . " "; $1 . " ";

$2 . "";

// $ = ;

(DE $) "E!: " . $>() . "";

();


22/68

PP23

R

S , č č

B Dć 22


23/68

I !

I !

PDO ($) SQL .

O ć () ć

.

K . , .

B Dć 23


24/68

N PP24

Kć PP24

U C:TP24

U ć .

I ()

B Dć 24


25/68

B Dć 25

//

$ = $ = ""; ($EE"EEEHD" == "") (($"") && ($""))

$ = $"";$ = $"";/** ***** B ****** */$ = "";

$ = "";$ = D(':=;=', $, $);// A .// // ( ILE AIG)$>A(D:: D::;//

$ = "IE I (, )ALE ('$', '$')";

...

...


26/68

B Dć 26

...

...// () ..

$>($); "!";

(DE $) "E!: " . $>() . "";

(); //

H

I:

:


27/68

PP24

B Dć 27


28/68

PDO

XSS

PDO ()

XSS ( )

B Dć 28


29/68

P ()

P ( )

J

A ,

A (), ć SQL ,

ć .

I, ć() , SQL ć

B Dć 29


30/68

P ()

M PDO>($) ć D .

Z SQL () ()

$>P(':', $); P ()

$>V(':', $); P

PHP PDO ć ć() .

B Dć 30


31/68

N PP25

Kć PP25

U C:TP25

U ć .

I I ()

B Dć 31


32/68

Pč ...

B Dć 32

// $ = $ = ""; ($EE"EEEHD" == "")

(($"") && ($"")) $ = $"";$ = $"";

/* * ***** B ****** */

$ = "";$ = "";// ()$ = D(':=;=', $, $);$>A(D:: D::;

...

...


33/68

B Dć 33

...

...

$ = $>("IE I (,) ALE (:, :)");

$>(':', $);$>(':', $);$>(); "!";

(DE $) "E!: " . $>() . "";();

H

I:

:


34/68

R

B Dć 34


35/68

N

N

B Dć 35


36/68

MSQL

E ć MSQL

4.1. P MSQL PHP 4.3.1

2002

MSQL č

B Dć 36


37/68

MSQL

MSQL :

:$ = ($, $,$);

$ = ($, $,$);

ć MSQL!

B Dć 37


38/68

MSQL

O

N ć :

B Dć 38


39/68

MSQL

MSQL ()

Vć

R ( )

, :($ = $>())

$' . '';

B Dć 39


40/68

MSQL

$ ć č S

$> U č U D ,

$ ć $>

P , č

$>();

I :$>();

B Dć 40


41/68

N PP26

Kć PP26

U C:TP26

U ć .

B Dć 41


42/68

B Dć 42

$=""; $ = "";$ = ""; $ = "";

// $ ()$ = ($, $, $, $); ($>)

(": " . $>); " ";$ = "ELEC , , ";$ = $>($);

($> > 0)

($ = $>()) ": " . $"". " " . $"". " " . $"". "";

" ()";$>();


43/68

PP26

R

B Dć 43


44/68

N

N

B Dć 44


45/68

MSQL I č ć MSQL , č

()

O ć () ć (?) S, I,

D B (B L O)

$ = $>("EEC F EE = ?");

Z () ć $ = 'B';

$>('', $);

K S

B

B Dć 45


46/68

MSQL

P ,

č

$>();

I :

$>();

$>();

B Dć 46


47/68

MSQL

MSQL đ

A ,

$>();

T đ ć

$>();

I $>();

B Dć 47


48/68

N PP27

Kć PP27

U C:TP27

U ć .

B Dć 48


49/68

B Dć 49

$ = $ = ""; ($EE"EEEHD" == "")

(($"") && ($"")) $ = $"";$ = $"";$ = ""; $ = ""; $ = "";$ = "";// $ ()$ = ($, $, $, $); ($ = $>("E I (, ) ALE (?, ?)"))

$>("", $, $);$>();$>();

(DE $)

"E!: " . $>() . "";();

"!"

H

I:

:


50/68

R

B Dć 50


51/68

D: č PDO

D: č PDO

B Dć 51


52/68

MSQL

B Dć 52


53/68

SQL ()

B Dć 53


54/68

SQL ()

B Dć 54


55/68

O

B Dć 55


56/68

ODBC

B Dć 56


57/68

Z

K NULL

B Dć 57


58/68

P PDO

K đ

N č M , č

B Dć 58


59/68

PDO (INSERT)

B Dć 59


60/68

PDO (UPDATE)

B Dć 60


61/68

PDO (SELECT)

B Dć 61


62/68

E H (1)

B Dć 62


63/68

E H (2)

B Dć 63


64/68

E H (3)

B Dć 64


65/68

E H (4)

B Dć 65


66/68

P

B Dć 66


67/68

T

B Dć 67


68/68

G L I I

B Dć 68

07 php db konkekcije.unlocked

Documents