{"id":215400,"date":"2021-04-10T09:00:22","date_gmt":"2021-04-10T01:00:22","guid":{"rendered":"https:\/\/lrxjmw.cn\/?p=215400"},"modified":"2021-03-30T16:36:34","modified_gmt":"2021-03-30T08:36:34","slug":"php-source-backdoor","status":"publish","type":"post","link":"https:\/\/lrxjmw.cn\/php-source-backdoor.html","title":{"rendered":"PHP\u6e90\u7801\u88ab\u52a0\u5165\u540e\u95e8\uff0c\u7591git\u670d\u52a1\u5668\u88ab\u9ed1"},"content":{"rendered":"<table>\n<tbody>\n<tr>\n<td style=\"padding: 5px 12px; width: 25px; font-size: 22px; text-align: center; background: #E8E8E8; line-height: 30px; color: #999;\">\u5bfc\u8bfb<\/td>\n<td style=\"padding: 10px 10px 12px; line-height: 20px;\"><strong>\u4e0a\u670828\u65e5\uff0cPHP\u906d\u9047\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u653b\u51fb\u30022\u4e2a\u6076\u610fcommit\u88ab\u63a8\u9001\u5230\u4e86\u4f4d\u4e8egit.php.net\u670d\u52a1\u5668\u7684\u7531PHP \u56e2\u961f\u7ef4\u62a4\u7684php-src Git \u4ed3\u5e93\u3002<br \/>\n<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>PHP\u76ee\u524d\u6700\u6d41\u884c\u7684\u670d\u52a1\u5668\u7aef\u7f16\u7a0b\u8bed\u8a00\uff0c\u4e92\u8054\u7f51\u4e0a\u8d85\u8fc779%\u7684\u7f51\u7ad9\u90fd\u4f7f\u7528PHP\u8bed\u8a00\u3002\u4e0a\u670828\u65e5\uff0cPHP\u906d\u9047\u8f6f\u4ef6\u4f9b\u5e94\u94fe\u653b\u51fb\u30022\u4e2a\u6076\u610fcommit\u88ab\u63a8\u9001\u5230\u4e86\u4f4d\u4e8egit.php.net\u670d\u52a1\u5668\u7684\u7531PHP \u56e2\u961f\u7ef4\u62a4\u7684php-src Git \u4ed3\u5e93\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/20210330163340.png\" alt=\"\" width=\"592\" height=\"289\" class=\"aligncenter size-full wp-image-215401\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/20210330163340.png 592w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/20210330163340-300x146.png 300w\" sizes=\"auto, (max-width: 592px) 100vw, 592px\" \/><\/p>\n<p>\u8fd92\u4e2a\u6076\u610fcommit\u662f\u7ecf\u8fc7\u7b7e\u540d\u7684\uff0c\u901a\u8fc7\u7b7e\u540d\u53ef\u4ee5\u53d1\u73b0\u662f\u7531\u4e8ePHP \u5f00\u53d1\u548c\u7ef4\u62a4\u4eba\u5458Rasmus Lerdorf\u548cNikita Popov\u64cd\u4f5c\u7684\u3002<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>PHP Git \u670d\u52a1\u5668\u88ab\u690d\u5165RCE\u540e\u95e8<\/strong><\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/97ae37b73bbcbcd65ed879a5f84cb9ce.jpg-wh_600x-s_2178107691.jpg\" alt=\"\" width=\"600\" height=\"341\" class=\"aligncenter size-full wp-image-215402\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/97ae37b73bbcbcd65ed879a5f84cb9ce.jpg-wh_600x-s_2178107691.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/97ae37b73bbcbcd65ed879a5f84cb9ce.jpg-wh_600x-s_2178107691-300x171.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u4ece\u56fe\u4e2d\u53ef\u4ee5\u770b\u51fa\uff0c\u5728\u7b2c370\u884c\uff0c\u8c03\u7528\u4e86zend_eval_string\u51fd\u6570\uff0c\u5b9e\u9645\u4e0a\u8fd9\u6bb5\u4ee3\u7801\u6ce8\u5165\u4e86\u540e\u95e8\u6765\u5728\u8fd0\u884c\u88ab\u52ab\u6301\u7684PHP\u7248\u672c\u7684\u7f51\u7ad9\u4e0a\u5b9e\u73b0\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u3002<\/p>\n<p>PHP\u5f00\u53d1\u4eba\u5458Jake Birchall\u6700\u65e9\u53d1\u73b0\u5f02\u5e38\uff0c\u79f0\u5982\u679c\u5b57\u7b26\u4e32\u662f\u4ee5zerodium\u5f00\u5934\u7684\uff0c\u90a3\u4e48\u8fd9\u884c\u4ee3\u7801\u4f1a\u5728useragent HTTP header\u6267\u884cPHP\u4ee3\u7801\u3002<\/p>\n<p>\u8be5\u6076\u610fcommit\u662f\u4ee5PHP\u5f00\u53d1\u4eba\u5458Rasmus Lerdorf\u7684\u540d\u4e49\u63d0\u4ea4\u7684\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/e2debaa898d5f56092bb67b715733ec3.jpg-wh_600x-s_2127721179.jpg\" alt=\"\" width=\"600\" height=\"279\" class=\"aligncenter size-full wp-image-215403\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/e2debaa898d5f56092bb67b715733ec3.jpg-wh_600x-s_2127721179.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2021\/03\/e2debaa898d5f56092bb67b715733ec3.jpg-wh_600x-s_2127721179-300x140.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>PHP\u7ed9\u51fa\u7684\u5b89\u5168\u516c\u544a\u79f0\uff0c\u76ee\u524d\u88ab\u9ed1\u7684\u5177\u4f53\u7ec6\u8282\u4ecd\u5728\u8c03\u67e5\u4e2d\u3002\u4f46\u662f\u6307\u5411\u4e86git.php.net\u670d\u52a1\u5668\u88ab\u9ed1\uff0c\u800c\u4e0d\u662f\u4e2a\u4eba\u7684git\u8d26\u53f7\u3002<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>PHP \u5b98\u65b9\u4ee3\u7801\u5e93\u8fc1\u79fb\u5230GitHub<\/strong><\/div>\n<p>\u7531\u4e8e\u672c\u6b21\u4e8b\u4ef6\uff0cPHP\u7ef4\u62a4\u4eba\u5458\u51b3\u5b9a\u5c06\u5b98\u65b9PHP \u4ee3\u7801\u5e93\u8fc1\u79fb\u5230GitHub\u5e73\u53f0\u3002\u4e4b\u540e\uff0c\u6240\u6709\u7684\u4ee3\u7801\u4fee\u6539\u90fd\u4f1a\u76f4\u63a5\u63a8\u9001\u5230GitHub\u4e0a\u3002<\/p>\n<p>PHP\u56e2\u961f\u5411BleepingComputer\u786e\u8ba4\uff0c\u5176\u8ba1\u5212\u6700\u7ec8\u505c\u7528Git\u670d\u52a1\u5668\uff0c\u5e76\u6c38\u4e45\u548c\u5b8c\u5168\u5730\u8fc1\u79fb\u5230GitHub\u3002<\/p>\n<ol>\n<li>\u6076\u610fcommit 1\uff1ahttps:\/\/github.com\/php\/php-src\/commit\/2b0f239b211c7544ebc7a4cd2c977a5b7a11ed8a?branch=2b0f239b211c7544ebc7a4cd2c977a5b7a11ed8a&diff=unified#diff-a35f2ee9e1d2d3983a3270ee10ec70bf86349c53febdeabdf104f88cb2167961R368-R370<\/li>\n<li>\u6076\u610fcommit 2\uff1ahttps:\/\/github.com\/php\/php-src\/commit\/c730aa26bd52829a49f2ad284b181b7e82a68d7d#diff-a35f2ee9e1d2d3983a3270ee10ec70bf86349c53febdeabdf104f88cb2167961R370<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>PHP\u76ee\u524d\u6700\u6d41\u884c\u7684\u670d\u52a1\u5668\u7aef\u7f16\u7a0b\u8bed\u8a00\uff0c\u4e92\u8054\u7f51\u4e0a\u8d85\u8fc779%\u7684\u7f51\u7ad9\u90fd\u4f7f\u7528PHP\u8bed\u8a00\u3002\u4e0a\u670828\u65e5\uff0cPHP\u906d\u9047\u8f6f\u4ef6\u4f9b\u5e94\u94fe [&hellip;]<\/p>\n","protected":false},"author":317,"featured_media":78440,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-215400","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/215400","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/users\/317"}],"replies":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/comments?post=215400"}],"version-history":[{"count":3,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/215400\/revisions"}],"predecessor-version":[{"id":215407,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/215400\/revisions\/215407"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media\/78440"}],"wp:attachment":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media?parent=215400"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/categories?post=215400"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/tags?post=215400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}