問題描述

<?php

highlight_file(__FILE__);

error_reporting(0);

class Game{

public $username;

public $password;

public $choice;

public $register;

public $file;

public $filename;

public $content;

public function __construct()

{

$this->username='user';

$this->password='user';

}

public function __wakeup(){

if(($this->register)==="admin"){

$this->choice=new login($this->file,$this->filename,$this->content);

}else{

$this->choice = new register();

}

}

public function __destruct() {

$this->choice->checking($this->username,$this->password);

}

}

class login{

public $file;

public $filename;

public $content;

public function __construct($file,$filename,$content)

{

$this->file=$file;

$this->filename=$filename;

$this->content=$content;

}

public function checking($username,$password)

{

if($username==='admin'&&$password==='admin'){

$this->file->open($this->filename,$this->content);

die('login success you can to open shell file!');

}

}

}

class register{

public function checking($username,$password)

{

if($username==='admin'&&$password==='admin'){

die('success register admin');

}else{

die('please register admin ');

}

}

}

class Open{

function open($filename, $content){

echo file_get_contents($filename);

}

}

@unserialize(base64_decode($_POST['unser']));

}

這是老師發的一個題目，因為PHP學習還沒有那么深入，所以希望能有一個解題思路

問題解答

問題不夠詳情。

file_get_contents() 函數把整個文件讀入一個字符串中。

這個可以抓取數據，不過現在curl的功能更好。