Sideen u awoodsiin karaa hawlaha PHP shell_exec, passthru, system, iyo exec ee HestiaCP?

Isticmaal ahaanHestiaCPMarkaad maamulayso server-kaaga, mararka qaarkood waxaa laga yaabaa inaad u baahato inaad karti u siiso qaar ka mid ah hawlaha PHP ee naafo ah, sida shell_exec, passthru, system, iyo exec.

Hawlahani waa kuwo aad u awood badan, laakiin sidoo kale waxay soo bandhigaan khataro amni oo gaar ah, markaa ka hor intaanad awood u siin, hubi in deegaanka server-kaagu yahay mid ammaan ah oo kaliya u oggolaanaya marin u helka isticmaalayaasha la aamini karo.

Maxaan ugu baahanahay inaan awood u yeesho hawlahan PHP?

Hawlahani aad bay faa'iido ugu leeyihiin xaaladaha qaarkood.

Tusaale ahaan, markaad awood u siiso qaarplugin WordPress ahHawlahani waa lama huraan marka shuruudaha qaarkood ay u baahan yihiin, ama markaad u baahan tahay inaad ku fuliso qaar ka mid ah amarrada nidaamka ee server-ka.

Si kastaba ha ahaatee, hawlahani waxay sidoo kale keenaan khataro amni oo suurtagal ah.

Isticmaalka khaldan wuxuu u horseedi karaa weerarrada server-ka, markaa fadlan si taxaddar leh u wad.

Tafatir faylka php.ini

Si aad awood ugu yeelatid hawlahan, marka hore waxaad u baahan tahay inaad wax ka beddesho faylka php.ini.

Kani waa faylka qaabeynta PHP, kaas oo maamusha goobo kala duwan oo PHP ah.

Tallaabada 1: Soo hel faylka php.ini

Gudaha HestiaCP, waxaad ka heli kartaa oo aad wax ka beddeli kartaa faylka php.ini adigoo u maraya jidka soo socda:

1. Geli guddiga kantaroolka ee HestiaCP.
2. U gudub goobaha server-ka
3. Guji Edit Adeegga PHP (astaanta qalinku waxay soo baxaysaa marka aad dul boodayso magaca adeegga).
4. Dooro doorashooyin horumarsan

Halkan, waxaad wax ka beddeli kartaa faylka php.ini.

Talaabada 2: Wax ka beddel disable_functions settings

Faylka php.ini, waxaa ku jira meel la yiraahdo disable_functions.

Goobtan ayaa qeexaysa shaqooyinka PHP ee naafada ah.

Si aad u hawlgeliso shell_exec, passthru, system, iyo exec, waxaad u baahan tahay inaad ka saarto liiska disable_functions.

Disable_functions settings ka hor wax ka beddelka:

disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen

Qaabeyntan, shell_exec, passthru, system, iyo exec waa la curyaamiyay.

Habaynta disable_functions ee wax laga beddelay:

disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,proc_open,popen

Qaabeyntan, shell_exec, passthru, system, iyo exec waa laga saaray, sidaas darteedna waxay awood u siineysaa shaqooyinkan.

Tallaabada 3: Keydi isbeddellada

Kadib markaad dhamaystirto wax ka beddelka, kaydi faylka php.ini.

Hubi in dhammaan isbeddellada si sax ah loo keydiyay si qaabeynta cusub loo dabaqo.

Dib u bilow adeegga PHP

Ka dib markaad wax ka beddesho oo kaydiso faylka php.ini, waxaad u baahan tahay inaad dib u bilowdo adeegga PHP si isbeddeladu u dhaqan galaan.

Waxaad dib u bilaabi kartaa adeegga PHP adiga oo raacaya tillaabooyinkan:

1. Ku soo noqo guddiga kantaroolka ee HestiaCP.
2. U gudub goobaha server-ka
3. Dooro adeegga PHP oo guji Dib u bilow.

Xaqiiji qaabeynta

Ka dib markaad dib u bilowdo adeegga PHP, waxaad xaqiijin kartaa in hawlahan ay karti u leeyihiin adiga oo socodsiinaya qoraal PHP oo fudud.

Tusaale ahaan, waxaad abuuri kartaa fayl PHP ah oo leh waxyaabaha soo socda:

<?php
echo shell_exec('echo Hello World');

Kadib, gal faylka iyada oo loo marayo browserka Haddii wax soo saarku yahay "Hello World", waxay la macno tahay in shaqada shell_exec la furay.

Talo amni

In kasta oo hawlahan ay awood yihiin, hubi inaad isticmaasho taxaddar.

Hubi in server-kaagu yahay mid sugan oo isticmaalayaasha la aamini karo oo keliya ay galaangal u leeyihiin sifooyinkan.

Si joogto ah u cusboonaysii serverka软件, oo isticmaal furaha sirta ah iyo tallaabooyinka kale ee ammaanka si aad u ilaaliso serverkaaga.

isku soo koobid

Maqaalkani wuxuu sharxayaa sida loo awoodsiiyo hawlaha PHP shell_exec, passthru, system, iyo exec ee HestiaCP.

Iyadoo hawlahani ay yihiin kuwo aad u xoog badan, waxay sidoo kale keenaan khataro amni.

Sidaa darteed, marka aad awood u siinayso hawlahan, hubi inaad hubiso in server-kaagu yahay mid ammaan ah oo u oggolaanaya kaliya helitaanka isticmaalayaasha la aamini karo.

Waxaan rajeynayaa in maqaalkani uu ku caawin karo, haddii aad wax su'aalo ah qabtid, fadlan xor u noqo inaad ila soo xiriirto!