Tweet
Moderator
<?php echo serialize(array('foo' => 'bar')); ?>
<?php
if ($fp = fsockopen('localhost', 80)) {
fputs($fp, "GET /path/to/sender.php HTTP/1.0\r\n\r\n");
$buffer = '';
while (!feof($fp)) $buffer .= fgets($fp, 128);
fclose($fp);
$a = unserialize($buffer);
}
?>
<?php
$a = unserialize(
file_get_contents('http://localhost/path/to/sender.php')
);
?>
Warning: unserialize() expects parameter 1 to be string, array given in...
$data = unserialize($_POST); // Server 2
$data = unserialize(stripslashes($_POST));
data=SERIALIZED_VALUE
<?php
// Dises ist die client.php
error_reporting(E_ALL);
ini_set('display_errors', TRUE);
$server = 'http://';
$server .= $_SERVER["HTTP_HOST"];
$server .= dirname($_SERVER["SCRIPT_NAME"]);
$server .= '/server.php';
$testarray[] = 'bli';
$testarray[] = 'bla';
$testarray[] = 'blub';
$post_data = 'test='.serialize($testarray);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $server);
curl_setopt($ch, CURLOPT_POST, 1 );
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
if (curl_errno($ch)) print curl_error($ch);
curl_close($ch);
var_export(unserialize($postResult));
phpinfo();
?>
<?php
// Dises ist die server.php
error_reporting(E_ALL);
ini_set('display_errors', TRUE);
if(empty($_POST['test']))
die('Sorry, bitte nicht direkt aufrufen');
$test = $_POST['test'];
if(function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc())
$test = stripslashes($test);
$testarray = array_map('ucfirst',unserialize($test));
print serialize($testarray);
?>
$var2 = serialize($_POST);
print_r($var2);
$request = PostToHost($var2, "eintragen.php", "", "");
// ...
print_r($_POST);
$data = unserialize(stripslashes($_POST));
print_r($data);
$var2 = 'q='.serialize($_POST);
$var2 = urlencode($var2);
// auf server2
$var = urldecode($_POST['q']);
$data = unserialize($var);
Kommentar