Programming VIP

If you have understood the principle of oauth2.0, you can also install the rear laravel passport. Now look at the relevant logic flow from the source code and how to go.Before that, let's take a look at how laravel determines whether the http client request is a normal request or a json request, because the passport is requested by api json by ...

home pagespecial columnphpArticle details0oauth2 mechanism of laravel passport (I) -- installation and configurationI don't think so Published 2 minutes ago1, Oauth21. Definition:OAuth 2.0 is an authorization mechanism, which is mainly used to issue token s.2. Members:ClientService (authentication server)3. Process:application(client) requests ...

Recently, I transferred this little station that no one visited from Typecho back to Wordpress. There is no special reason. I just changed the host and wanted to toss. Typecho is excellent, but it has not been updated, giving the impression that no one is maintaining it (it seems that a new version will be released soon). What I have learned a ...

preface It was also a Web topic in WMCTF2021 a long time ago. There was no clue at that time, and then it did not reappear. I learned a lot from president Zhao's blog this evening. This article just followed Zhao's blog for a wave of reproduction and recorded it, that's all. Topic environment The topic itself is given to the shell, but there ...

Yesterday, I helped play a game. There was also a problem of deserialization in the web topic. I also used the call of magic methods to construct the pop chain and obtain the flag, but the problem was so good that I couldn't write it. Then there were questions about json. I found that I didn't learn a lot. It's easy to beat my people out of a g ...

HCTF 2018 web file contains Right click to find source.php in the element. You can also find this PHP by directory scanning to get the source code: <?php highlight_file(__FILE__); class emmm { public static function checkFile(&$page) { $whitelist = ["source"=>"source.php","hint"=>"hint.php" ...

Test site Boolean blind injection, SSRF Tried the general login method and did not respond. Check the source code and find that the utilization point of sql injection is in the picture Blind injection script import string from requests import * allstr = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!"#$%&\'()* ...

Web29 Title: strict filtering is required for command execution Source code: <?php /* # -*- coding: utf-8 -*- # @Author: h1xa # @Date: 2020-09-04 00:12:34 # @Last Modified by: h1xa # @Last Modified time: 2020-09-04 00:26:48 # @email: h1xa@ctfer.com # @link: https://ctfer.com */ error_reporting(0); if(isset($_GET['c'])){ $c = $_ ...

1.PHP: php installation:     Install - double click exe  —— Find the installed folder - double click the executable exe - click start 1. Double click exe:   2. After installation, execute exe and click Start: 3. When the status is green, the installation is successful:     php application: How to acces ...

DI DI is often referred to as dependency injection, so what is dependency injection? For example, a computer (not a laptop) needs a keyboard and mouse for us to operate. This' need 'in other words, it depends on the keyboard and mouse. Accordingly, a class needs another class to perform a job, which is called dependency. Look at a piece of ...