{"id":148,"date":"2016-10-26T15:32:29","date_gmt":"2016-10-26T06:32:29","guid":{"rendered":"http:\/\/jook.pe.kr\/?p=148"},"modified":"2016-10-26T15:32:29","modified_gmt":"2016-10-26T06:32:29","slug":"register_globals-%ec%98%b5%ec%85%98%ec%97%90-%eb%94%b0%eb%a5%b8-%eb%b3%80%ec%88%98-%ec%a0%84%eb%8b%ac","status":"publish","type":"post","link":"http:\/\/jook.pe.kr\/?p=148","title":{"rendered":"register_globals \uc635\uc158\uc5d0 \ub530\ub978 \ubcc0\uc218 \uc804\ub2ec"},"content":{"rendered":"

\ubcf4\uc548\uc0c1\uc758 \uc774\uc720\ub85c php.ini \ud30c\uc77c\uc758 register_globals \uc635\uc158\uc744 off\ub85c \uc124\uc815\ud574 \ub193\uc740 \uc6f9\uc11c\ubc84\ub4e4\uc774 \ub9ce\uc774 \uc788\uc73c\uba70,\u00a0 \uc774\ub7f0 \uacbd\uc6b0\ub294 form \uc744 \ud1b5\ud574\uc11c \ubcc0\uc218\ub97c \uc804\ub2ec \ud560 \ub54c \uc544\ub798\uc640 \uac19\uc774 \uc81c\uc57d\uc744 \ubc1b\uac8c \ub41c\ub2e4.<\/p>\n

ex><\/p>\n

\uc785\ub825 \ud3fc
\n=============================================
\n<form method=”post” action=”result.php”>
\n<input type=”text” name=”subject” size=”20″ maxlength=”10″>
\n<input type=”submit” value=”\ud655\uc778”>
\n<\/form>
\n=============================================<\/p>\n

register_globals = on \uc77c\ub54c<\/strong><\/p>\n

form\uc73c\ub85c\ubd80\ud130 \uc804\ub2ec \ubc1b\uc740 \ubcc0\uc218\ub97c $_POST[subject], $subject \ub4f1\uacfc \uac19\uc774 \uc0ac\uc6a9 \ud560 \uc218 \uc788\ub2e4.<\/p>\n

result.php
\n===================================
\n<?
\necho(“$subject”);\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <— \uc0ac\uc6a9\uac00\ub2a5
\necho(“$_POST[subject]”);\u00a0 <— \uc0ac\uc6a9\uac00\ub2a5
\n?>
\n===================================<\/p>\n

register_globals = off \uc77c\ub54c
\n<\/strong>
\nform\uc73c\ub85c\ubd80\ud130 \uc804\ub2ec \ubc1b\uc740 \ubcc0\uc218\ub97c $subject \uc640 \uac19\uc740 \ud615\uc2dd\uc73c\ub85c\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc73c\uba70, $_POST[subject]\uc758 \ud615\uc2dd\uc73c\ub85c \uc0ac\uc6a9\uc774 \uac00\ub2a5\ud558\ub2e4.<\/p>\n

result.php
\n===================================
\n<?
\necho(“$subject”);\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <— \uc0ac\uc6a9 \ubd88\uac00\ub2a5
\necho(“$_POST[subject]”);\u00a0 <— \uc0ac\uc6a9 \uac00\ub2a5
\n?>
\n===================================<\/p>\n

\ub2e8, \uc544\ub798\uc640 \uac19\uc774 result.php\uc0c1\ub2e8\uc5d0 \uc544\ub798\uc640 \uac19\uc740 \ud615\uc2dd\uc73c\ub85c extract \uc120\uc5b8\uc744 \ud558\uac70\ub098, header \ud30c\uc77c\uc5d0 \uc120\uc5b8\ud558\uc5ec include \ud55c \ud6c4\uc5d0\ub294 $subject \uc640 \uac19\uc740 \ud615\uc2dd\uc73c\ub85c \ubcc0\uc218 \uc0ac\uc6a9\uc774 \uac00\ub2a5\ud558\ub2e4.<\/p>\n

result.php
\n===================================
\n<?
\n@extract($_GET);
\n@extract($_POST);
\n@extract($_SERVER);<\/p>\n

echo(“$subject”);\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <— \uc0ac\uc6a9\uac00\ub2a5
\necho(“$_POST[subject]”);\u00a0 <— \uc0ac\uc6a9\uac00\ub2a5
\n?>
\n===================================<\/p>\n

-tip
\n\uc11c\ubc84\uc758 \uc815\ucc45\uc774 register_globals=off \uc77c\ub54c, \ud2b9\uc815 \uac00\uc0c1\ud638\uc2a4\ud2b8\ub098, \ud2b9\uc815 \ub514\ub809\ud1a0\ub9ac \ud558\uc704\uc5d0\uc11c register_globals=on \uc73c\ub85c \uc0ac\uc6a9 \uac00\ub2a5\ud558\ub2e4.
\n\uac00\uc0c1\ud638\uc2a4\ud2b8 \uc124\uc815 \ubd80\ubd84\uc5d0 \uc544\ub798\uc640 \uac19\uc774 php_flag \uc635\uc158\uc73c\ub85c \ucd94\uac00\ub97c \ud558\uac70\ub098, \ud2b9\uc815 \ub514\ub809\ud1a0\ub9ac \ub0b4\uc5d0 .htaccess \ud30c\uc77c\uc744 \uc0dd\uc131\ud574\uc11c php_flag register_globals on \uc744 \ucd94\uac00\ud558\uace0 \uc0ac\uc6a9\ud558\uba74 \ub41c\ub2e4.<\/p>\n

<VirtualHost xxx.xxx.xxx.xxx>
\n…
\nphp_flag register_globals on
\n…
\n<\/VirtualHost><\/p>\n","protected":false},"excerpt":{"rendered":"

\ubcf4\uc548\uc0c1\uc758 \uc774\uc720\ub85c php.ini \ud30c\uc77c\uc758 register_globals \uc635\uc158\uc744 off\ub85c \uc124\uc815\ud574 \ub193\uc740 \uc6f9\uc11c\ubc84\ub4e4\uc774 \ub9ce\uc774 \uc788\uc73c\uba70,\u00a0 \uc774\ub7f0 \uacbd\uc6b0\ub294 form \uc744 \ud1b5\ud574\uc11c \ubcc0\uc218\ub97c \uc804\ub2ec \ud560<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,5],"tags":[],"_links":{"self":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts\/148"}],"collection":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=148"}],"version-history":[{"count":0,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts\/148\/revisions"}],"wp:attachment":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=148"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}