是否可以从 HTML 输出中提取服务器端文件?
似乎是一个明显的“不”,但我想我还是要继续问一下,看看是否有什么东西:
在脚本执行后是否可以接收文件的服务器端脚本? EG 对服务器已经处理的 PHP 文件进行某种回归?
我想有点题外话,但我很想听到一个好的答案:)
Seems like kind of an obvious 'No', but thought I'd go ahead and ask anyhow, to see if there's something there:
Is it possible to receive the server side script of a file after the script has been executed?
E.G. do some sort of regression on PHP file that the server already took care of?
Kind of off-topic I guess, but I'd love to hear a good answer:)
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
这将是一个巨大的潜在安全漏洞。您可以通过这种方式获取数据库参数(用户/密码),然后就告别网站了。您唯一的希望是网站上是否已安装安全漏洞或文件浏览器应用程序。
That would be a massive potential security hole. you could get database parameters (user/pass) that way and then it's bye bye web site. Your only hope is if there is a security hole or a file browser application installed on the site already.
是的,这就是所谓的黑客攻击服务器。如果您没有对服务器脚本的合法访问权限,则需要安全漏洞来下载源文件。
否则,除非服务器所有者允许,否则这是不可能的。
html页面是计算的结果
这就像问如何知道导致结果数字 15 的操作,或者如何将汉堡变回牛。
yes , it is called hacking a server. you need a security hole to download source files if you do not have a legal access to the server scripts.
otherwise it is not possible unless the server owner allows in it.
the html page is the result of a computation
it would be like asking how to know the operation that led to the result number 15. or how to transform a burger back to a cow.