214, 4/11 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   pr0sp3r
   http://koreasecurity.org
   [re] [Web]php¼Ò½º Çؼ®Á¡ ºÎŹµå¸±°Ô¿ä..

http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_Web&no=37 [º¹»ç]


<?php
/**
*   ¼öÁ¤ by ¹Ì´Ï¾î½º at 2011-03-15
**/
$msg = ''; //¹®ÀÚ¿­ ÃʱâÈ­
$table = 'member'; // ºñ±³/»ý¼ºÇÒ Å×À̺í¸í
$dbname = 'apm_db_01';
$connect =mysql_connect('localhost','root','1234'); //DB ¿¬°á

if(mysql_select_db($dbname,$connect)) { // ½ÇÆÐ:FALSE, ¼º°ø:TRUE
  $tb_name=mysql_list_tables($dbname);
  $tb_count=mysql_num_rows($tb_name);
  // var_dump($tb_count);exit; // DB¾ÈÀÇ Å×À̺í¼ö ¹Ýȯ //ex:3
  
  //Å×À̺í¼ö ¸¸Å­ µ¹°³µÊ 0,1,2 <- 3º¸´Ù ¾Æ·¡(3¹ø)
  for($a=0; $a<$tb_count; $a++) // if(){}ÀÚü°¡ Çϳª¹®ÀåÀ¸·Î {}»ý·«°¡´É
    // Å×ÀÌºí ¼ö ¸¸Å­ ¹Ýº¹Çϸç Å×À̺í¸íÀÌ memberÀÎÁö È®ÀÎ
    // mysql_tablename($tb_name,0) -> 1¹ø°Å×À̺íÀÇ À̸§À» ¹Ýȯ //ex: test
    // mysql_tablename($tb_name,1) -> 2¹ø°Å×À̺íÀÇ À̸§À» ¹Ýȯ // ex: member
    if(mysql_tablename($tb_name,$a) == $table) { // $a´Â for¹®À¸·Î ÀÎÇÑ Áõ°¡º¯¼ö
      //½ºÆ®¸µÀ» ½Ì±ÛÄõÅÍ·Î °¨½Î´Â°æ¿ì php°¡ ÆĽÌÀ» ÇÏÁö ¾ÊÀ¸¸ç, ´õºíÄõÅÍÀΰæ¿ì ¹®ÀåÀ»ÆĽÌÇÔ
      $msg = "<h3><br><br><br><br><br><center>¢Ã $table Å×À̺íÀº ÀÌ¹Ì Á¸ÀçÇÕ´Ï´Ù. ";
      $msg .= '<br><hr><br><a href=ex9-5.php>ÁÖ¼Ò ÀÔ·Â È­¸é</a>À¸·Î À̵¿Çϼ¼¿ä.</center></h3>';
      break;
    }

}else{ // DBº¯°æ ½ÇÆÐÀΰæ¿ì
  $msg = "<h3><br><br><br><br><br><center>¢Ã $dbname DB·Î º¯°æÇÏÁö ¸øÇß½À´Ï´Ù. ";
  $msg .= '<br><hr><br><a href=ex9-5.php>ÁÖ¼Ò ÀÔ·Â È­¸é</a>À¸·Î À̵¿Çϼ¼¿ä.</center></h3>';
  die($msg); // die()ÇÔ¼ö exit()ÇÔ¼öÀÇ º°ÄªÀ¸·Î ½ÇÇà ÈÄ ¹«Á¶°Ç ÁߴܵÊ.
}

if(!$msg){
        $sql ="create table $table (
        sno int not null,
        name varchar(10),
        addr varchar(80),
        primary key(sno))";

        //½ÇÆÐ:False ¼º°ø:¸®¼Ò½º ¶Ç´Â TRUE ¹Ýȯ
        $result = mysql_query($sql,$connect) or die("$table »ý¼ººÒ°¡");

        if($result) {
          $msg = "<h3><br><center><br><br><br><br>¢Ã $table Å×À̺íÀ» ¼º°øÀûÀ¸·Î ¸¸µé¾ú½À´Ï´Ù.....<br><hr><br>";
          $msg .=  '<a href=11.php.bak.bak>ÁÖ¼Ò ÀÔ·Â È­¸é</a>À¸·Î À̵¿Çϼ¼¿ä.</center></h3>';
          echo $msg; //result°¡ Àִٴ°ÍÀº »ý¼ºÄõ¸®°¡ Á¤»ó½ÇÇàÇÏ¿´À¸¹Ç·Î À§ÀÇ ¼º°ø¸Þ½ÃÁöÃâ·Â
        }
}else // Çѹ®ÀÚ Çؼ®ÀÎ °æ¿ì {} »ý·«°¡´É
  echo $msg; // msg°¡ Àִٴ°ÍÀº memberÅ×À̺íÀÌ ÀÖÀ¸¹Ç·Î Ãâ·ÂÇÔ.

mysql_close($connect); //DB ¿¬°áÇØÁ¦
?>




===============================================================================

>¾È³çÇϼ¼¿ä..
>php¼Ò½º°¡ ÀÌÇØ°¡ À߾ȵǼ­ Çؼ®Á¡ ºÎŹµå¸®°Ú½À´Ï´Ù.
><?php
>$connect =mysql_connect('localhost','root','12345');
>mysql_select_db('apm_db_01',$connect);
>if($result==1)
>{
>        $tb_name=mysql_list_tables("apm_db_01");
>        $tb_count=mysql_num_rows($tb_name);
>        for($a=0; $a<$tb_count; $a++)
>                if(mysql_tablename($tb_name,$a) == "member") {
>                $flag="ok";
>                break;
>        }
>}
>if($flag !="ok"){
>        $sql ="create table member(
>        sno int not null,
>        name varchar(10),
>        addr varchar(80),
>        primary key(sno))";
>        $result = mysql_query($sql,$connect)
>                or die("<h3><br><br><br><br><br><center>
>        ¢Ã member Å×À̺íÀº ÀÌ¹Ì Á¸ÀçÇÕ´Ï´Ù. <br><hr><br>
>        <a href=ex9-5.php>ÁÖ¼Ò ÀÔ·Â È­¸é</a>À¸·Î À̵¿Çϼ¼¿ä.<center></h3>");
>}
>echo "<h3><br><center><br><br><br><br>¢Ã member Å×À̺íÀ» ¼º°øÀûÀ¸·Î ¸¸µé¾ú½À´Ï´Ù.....<br><hr><br>";
>echo "<a href=11.php.bak.bak>ÁÖ¼Ò ÀÔ·Â È­¸é</a>À¸·Î À̵¿Çϼ¼¿ä.</center></h3>";
>mysql_close($connect);
>?>
>
>for¹®À̶û ifÀÖ´ÂÂÊÀÌ »ì¦ ÀÌÇØ°¡¾È°¡³×¿ä ƯÈ÷ if(mysql_tablename($tb_name,$a) == "member") {
>À̺κпä..
>ºÎŹµå¸®°Ú½À´Ï´Ù.
===============================================================================

  Hit : 4100     Date : 2011/03/15 04:38



    
BkeMan °¨»çÇÕ´Ï´ç~ ¤¾ 2011/03/20  
154   ÄíÅ°¹®ÀÇ[3]     sm8303
04/21 2827
153   Å©·¡Å· ÇØÁֽǺР±¸ÇØ¿ä (ºÒ¹ýx) »ç·Êµå¸³´Ï´Ù.     mss0812
06/22 3206
152   Å©·Î½º »çÀÌÆ® ½ºÅ©¸³Æà    ralehgus123
05/30 4136
151   [Web]php¼Ò½º Çؼ®Á¡ ºÎŹµå¸±°Ô¿ä..[2]     BkeMan
03/06 4118
150     [re] Æ÷Æ®½ºÄµÀÌ ºÒ¹ýÀ̾ú³×¿ä;;     4irjuno
07/31 3437
    [re] [Web]php¼Ò½º Çؼ®Á¡ ºÎŹµå¸±°Ô¿ä..[1]     pr0sp3r
03/15 4099
148     [re] Á¦°¡ À¥ÇØÅ·À» ¹è¿ì·ÁÇϴµ¥¿ä.[2]     cjy559510
12/02 4623
147     [re] ÀÌ °ø°Ý±¸¹®¿¡ ´ëÇÑ ¼³¸í ºÎŹµå¸³´Ï´Ù.     cosine
06/28 2659
146   [À¥Áú¹®] »çÀÌÆ® ¼Ò½º¸¦ Åë°·Î °®°í¿À´Â ÅøÀÌ ÀÖ³ª¿ä?[2]     helpwizet
03/08 5231
145   [À¥(mysql)Áú¹®ÀÌ ÀÖ½À´Ï´Ù.][3]     BkeMan
01/27 3740
144   xss ¿ìȸÇÒ ¹æ¹ý ¾øÀ»±î¿ä??[3]     ezkiller
10/22 7040
143   XSS ÇØÅ· Áú¹®[3]     test11
03/07 4733
142   xss Áú¹®ÀÔ´Ï´Ù[1]     usj1004s
12/06 3078
141   XSS <> ġȯ ¿ìȸ°¡ °¡´ÉÇÑ°¡¿ä?[2]     drrobot333
11/19 3608
140   wpe°°Àº ÇÁ·Î±×·¥ÀÇ ¿ø¸®¸¦ ÀÌÇØÇÏ·Á¸é..[1]     attainer
11/01 4339
139   WPA2/PSK °ü·Ã Áú¹®ÀÌ ÀÖ½À´Ï´Ù.     roccafort
04/30 2832
138   Webhacking.kr ¹®Á¦¸¦ Ç®´Ù°¡..     alstnsms67
08/02 2698
137   webhacking.kr °¡ÀÔ¹®Á¦ ¹Ù²¸¼­ Àß ¸ð¸£°Ú½À´Ï´Ù[1]     ¤»z¤Ól¤²q¤Çh¤§e¤Ñm
01/18 5831
136   webhacking.kr °¡ÀÔ¹®Á¦ Áú¹®µå¸³´Ï´Ù[3]     kangms0801
03/29 5471
135   webhacking.kr 33-4¹ø¹®Á¦ Áú¹®ÀÔ´Ï´Ù.[3]     hygasyde
03/26 4452
[1][2][3] 4 [5][6][7][8][9][10]..[11]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org