PHP中的null字符问题

由于 PHP 的文件系统操作是基于 C 语言的函数的，所以它可能会以您意想不到的方式处理 Null 字符。 Null字符在 C 语言中用于标识字符串结束，一个完整的字符串是从其开头到遇见 Null 字符为止。
借用官方手册中的一个例子：

$file = $_GET['file']; // "../../etc/passwd\0"
if (file_exists('/home/wwwrun/'.$file.'.php')) {
    // file_exists will return true as the file /home/wwwrun/../../etc/passwd exists
    include '/home/wwwrun/'.$file.'.php';
    // the file /etc/passwd will be included
}

以上代码在PHP5.3以前版本中，文件/etc/passwd将会被加载。对以后的版本没有影响。
虽然这个遇到\0会把字符截断的问题已经被修复了，但是在PHP中文件系统相关函数中还是有一点影响的，比如file_exists(),is_file()等。
如下代码：

$filename = "/etc/passwd\0"; 
$res = file_exists($filename); 
var_dump($res);

以上代码的执行结果如下：
Warning: file_exists() expects parameter 1 to be a valid path, string given in /usr/local/var/www/a.php on line 3
/usr/local/var/www/a.php:4:null

解决办法

对null字符进行替换

$input = str_replace(chr(0), '', $input);

6,469 Responses

  4. Just desire to say your article is as astounding. The clearness in your put up is simply spectacular and i can suppose you’re an expert on this
    subject. Well with your permission let me to grasp your RSS feed to stay updated with drawing close post.

    Thanks 1,000,000 and please continue the rewarding work.

    回复

  5. whoah this blog is fantastic i really like reading your posts.
    Stay up the good work! You recognize, a lot of people are looking round for this information, you could help them greatly.

    回复

  6. hello there and thank you for your information – I’ve definitely picked up anything
    new from right here. I did however expertise a few technical issues using this website,
    since I experienced to reload the site many times
    previous to I could get it to load correctly.
    I had been wondering if your hosting is OK? Not that I am complaining, but slow
    loading instances times will often affect your
    placement in google and could damage your high quality score
    if advertising and marketing with Adwords. Well I am adding
    this RSS to my email and could look out for much more of
    your respective fascinating content. Ensure that you update this again very soon.

    回复

  7. you’re really a excellent webmaster. The web site loading velocity is amazing.
    It seems that you’re doing any distinctive trick. Moreover, The contents
    are masterwork. you have done a wonderful process on this subject!

    回复

  8. Hi there, I found your web site by way of Google at the same time as looking for a comparable subject, your website
    got here up, it looks good. I have bookmarked it in my google bookmarks.

    Hello there, just become aware of your blog thru Google, and found that it’s truly informative.

    I am gonna watch out for brussels. I’ll be grateful in the event you proceed
    this in future. A lot of other folks will likely
    be benefited out of your writing. Cheers!

    回复

  10. Terrific article! That is the type of info that are meant to
    be shared across the net. Disgrace on Google for
    no longer positioning this put up upper! Come on over and seek advice
    from my web site . Thank you =)

    回复

  11. Someone necessarily help to make seriously articles I’d state.

    That is the very first time I frequented your web
    page and up to now? I surprised with the research you made to create this actual post extraordinary.

    Wonderful job!

    回复

  13. Heya i’m for the first time here. I found this board and I find It really useful & it helped me out
    a lot. I hope to give something back and aid others like you helped me.

    回复

  14. Hello there! Would you mind if I share your blog with my twitter group?
    There’s a lot of folks that I think would really enjoy your content.
    Please let me know. Many thanks

    回复

  16. Good day! I know this is kinda off topic but I’d figured I’d ask.
    Would you be interested in exchanging links or maybe guest authoring a blog article or vice-versa?
    My website covers a lot of the same subjects as yours and I feel we could greatly benefit from each other.
    If you’re interested feel free to send me an e-mail. I look forward to hearing from you!
    Excellent blog by the way!

    回复

  17. Hello there! This is my first visit to your blog!
    We are a collection of volunteers and starting a new project in a
    community in the same niche. Your blog provided us useful information to work on. You have done a marvellous job!

    回复

  21. Hello there! Do you know if they make any plugins to help with SEO?
    I’m trying to get my blog to rank for some targeted
    keywords but I’m not seeing very good gains. If you know of any
    please share. Many thanks!

    回复

  22. Great article! That is the type of information that are supposed to
    be shared across the net. Disgrace on the seek engines for no longer positioning this
    submit higher! Come on over and visit my website .
    Thanks =)

    回复

  23. Hey there I am so excited I found your web site,
    I really found you by error, while I was researching on Aol for
    something else, Regardless I am here now and would just like to say
    cheers for a tremendous post and a all round enjoyable blog (I also love the theme/design), I don’t have time to go through it
    all at the moment but I have bookmarked it and also added in your RSS feeds, so
    when I have time I will be back to read a lot more, Please do keep up the superb
    work.

    回复

  24. Do you mind if I quote a couple of your posts as long as I provide credit and sources back to your blog?
    My website is in the exact same niche as yours and
    my visitors would certainly benefit from a lot of the information you present here.
    Please let me know if this alright with you. Thanks!

    回复

  25. It’s in point of fact a nice and helpful piece of info.
    I am glad that you simply shared this helpful info with us.
    Please keep us informed like this. Thank you for sharing.

    回复

  26. You really make it appear so easy with your presentation but I find this topic to be actually something which I think I
    would by no means understand. It seems too complicated and very broad for me.

    I am looking forward to your next submit, I’ll try to get the hang of it!

    回复

  29. Hey there! I’ve been following your web site for a long time now and finally got the courage to go ahead and give you a shout out from Lubbock Texas!
    Just wanted to mention keep up the excellent job!

    回复

  32. Wonderful blog! I found it while browsing on Yahoo News.
    Do you have any tips on how to get listed in Yahoo News?
    I’ve been trying for a while but I never seem to get there!
    Thanks

    回复

  34. I like the helpful info you provide to your articles.

    I’ll bookmark your weblog and test again right here regularly.
    I’m moderately certain I will be told many new stuff proper right here!
    Good luck for the following!

    回复

  36. Excellent post. I used to be checking continuously this weblog
    and I’m inspired! Extremely helpful information specifically the remaining section 🙂 I maintain such info a lot.
    I was seeking this certain info for a very lengthy time.
    Thank you and good luck.

    回复

  38. Sweet blog! I found it while surfing around on Yahoo News.
    Do you have any tips on how to get listed in Yahoo News?
    I’ve been trying for a while but I never seem to get there!
    Thanks

    回复

  40. Hello very cool site!! Man .. Beautiful ..

    Wonderful .. I will bookmark your website and take the feeds also?
    I am happy to search out so many helpful info here in the
    put up, we’d like work out extra techniques on this regard, thanks for sharing.
    . . . . .

    回复

  41. Hi there! This post couldn’t be written much better!
    Looking through this article reminds me of my previous roommate!
    He constantly kept preaching about this. I’ll forward this post to him.
    Fairly certain he’ll have a very good read. Many thanks for sharing!

    回复

  43. I think this is among the most important information for
    me. And i am glad reading your article. But wanna remark on some general
    things, The web site style is wonderful, the articles is really excellent : D.
    Good job, cheers

    回复

  44. An impressive share! I have just forwarded this onto a colleague who has been conducting a little research on this.
    And he actually bought me lunch simply because I stumbled upon it for him…
    lol. So let me reword this…. Thank YOU for the meal!!
    But yeah, thanx for spending some time to talk about
    this issue here on your web page.

    回复

  47. Hello there, I discovered your blog via Google whilst searching for a similar matter, your site came up, it seems to be good.
    I’ve bookmarked it in my google bookmarks.
    Hi there, simply became alert to your weblog through Google, and located that it is really informative.
    I am going to be careful for brussels. I will appreciate for those who proceed this in future.
    A lot of folks will likely be benefited from your writing.

    Cheers!

    回复

  48. hello there and thank you for your information – I have certainly picked up anything new
    from right here. I did however expertise some
    technical points using this website, as I experienced to reload
    the website a lot of times previous to I could get it to load
    properly. I had been wondering if your web host is OK?
    Not that I am complaining, but sluggish
    loading instances times will very frequently affect your placement in google and could damage your high-quality score
    if advertising and marketing with Adwords. Anyway I am adding this RSS to my email and could look out for
    much more of your respective fascinating content. Make sure
    you update this again soon.

    回复

  53. Its like you learn my mind! You seem to grasp a lot approximately
    this, like you wrote the e-book in it or something.
    I think that you just can do with some % to drive the message home a
    little bit, but instead of that, that is wonderful blog.

    An excellent read. I will certainly be back.

    回复

  55. I truly love your website.. Great colors & theme.

    Did you develop this website yourself? Please reply back as I’m trying to create my own personal website and want
    to learn where you got this from or just what the theme is named.

    Cheers!

    回复

  56. Hi there! I could have sworn I’ve been to your blog before but after looking at a few of the posts I realized it’s new to me.
    Regardless, I’m certainly pleased I came across it and
    I’ll be bookmarking it and checking back often!

    回复

  61. Today, I went to the beach with my kids. I found a sea shell
    and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She put the shell
    to her ear and screamed. There was a hermit crab inside and it pinched her ear.
    She never wants to go back! LoL I know this is completely off topic but I had to tell someone!

    回复

  64. I know this if off topic but I’m looking into starting my own weblog and was wondering what all is needed to get set up?
    I’m assuming having a blog like yours would cost a pretty penny?
    I’m not very internet savvy so I’m not 100% sure.
    Any tips or advice would be greatly appreciated.
    Kudos

    回复

  70. Hey! I know this is kinda off topic however , I’d figured I’d ask.
    Would you be interested in trading links or maybe guest writing a
    blog post or vice-versa? My site addresses a lot of the same subjects as yours and I feel we could greatly benefit from each other.
    If you are interested feel free to shoot me an e-mail.
    I look forward to hearing from you! Great blog by the way!

    回复

  72. Wow, wonderful blog layout! How long have you been blogging for?
    you make blogging look easy. The overall look of your site is wonderful, let alone
    the content! natalielise pof

    回复

  74. I think this is one of the most vital information for me.
    And i am glad reading your article. But should remark on few general things,
    The web site style is perfect, the articles is really
    nice : D. Good job, cheers

    回复

  77. Hello, Neat post. There’s a problem along with your website in web explorer, could test this?
    IE nonetheless is the marketplace leader and a good part of people
    will miss your great writing because of this problem.

    回复

  79. When I initially commented I clicked the “Notify me when new comments are added” checkbox and now each time a comment
    is added I get several e-mails with the same comment.
    Is there any way you can remove people from that service? Cheers!

    回复

  82. Thanks for any other informative site. Where else may just I am getting that
    type of information written in such an ideal approach?
    I’ve a challenge that I’m just now working on, and I’ve been on the look out for such info.

    回复

  84. I feel that is among the so much significant information for me.
    And i am satisfied studying your article. However should observation on some common things, The site style is great, the articles is truly nice
    : D. Excellent task, cheers

    回复

  89. Definitely believe that which you said. Your favorite justification appeared to be on the net the simplest thing
    to be aware of. I say to you, I definitely get
    irked while people consider worries that they plainly do
    not know about. You managed to hit the nail upon the top and also defined
    out the whole thing without having side effect , people can take a
    signal. Will probably be back to get more. Thanks

    回复

  95. Terrific article! This is the type of information that are supposed to be shared around the net.
    Shame on Google for no longer positioning this publish
    upper! Come on over and consult with my web site .

    Thank you =)

    回复

  97. Attractive component of content. I just stumbled upon your site and in accession capital to assert that I get in fact loved account your weblog posts.

    Anyway I will be subscribing for your augment and even I fulfillment you access constantly quickly.

    回复

  98. Hello There. I found your weblog using msn. That is an extremely neatly
    written article. I’ll be sure to bookmark it and return to read more of your helpful information. Thank you for
    the post. I will definitely comeback.

    回复

  100. Howdy just wanted to give you a quick heads up. The words in your content seem to be
    running off the screen in Internet explorer. I’m not sure if this is a format issue or something to do
    with web browser compatibility but I figured I’d post to let you know.
    The style and design look great though! Hope you get
    the issue resolved soon. Kudos

    回复

  101. I’m impressed, I must say. Rarely do I come across a blog
    that’s equally educative and entertaining, and let me tell you, you
    have hit the nail on the head. The problem is something
    which not enough men and women are speaking intelligently about.
    I am very happy I found this during my search for something relating to this.

    回复

  102. When someone writes an paragraph he/she keeps the thought of a user in his/her brain that how a user can be aware of it.

    So that’s why this post is perfect. Thanks!

    回复

  105. Hey, I think your site might be having browser compatibility issues.
    When I look at your blog in Ie, it looks fine but when opening
    in Internet Explorer, it has some overlapping. I just wanted to give you a
    quick heads up! Other then that, wonderful blog!

    回复

  117. Hi are using WordPress for your blog platform?
    I’m new to the blog world but I’m trying to get started
    and create my own. Do you need any html coding knowledge
    to make your own blog? Any help would be greatly appreciated!

    回复

  123. Aw, this was a really nice post. Taking the time and actual effort to make a superb article… but
    what can I say… I procrastinate a lot and don’t seem to get anything done.

    回复

  130. I’m not sure where you’re getting your information, but good topic.
    I needs to spend some time learning more or understanding more.

    Thanks for magnificent info I was looking for this info for
    my mission.

    回复

  135. Great weblog right here! Additionally your web site rather a lot up very fast!
    What web host are you the use of? Can I get your affiliate hyperlink for your host?
    I want my site loaded up as fast as yours lol

    回复

  244. Fantastic goods from you, man. I’ve understand your stuff previous to and you are just too fantastic.

    I really like what you’ve acquired here, certainly like what you’re saying and the
    way in which you say it. You make it entertaining and you
    still care for to keep it smart. I cant wait to read much more from
    you. This is actually a great site.

    回复

  392. I’m curious to find out what blog system you’re utilizing?
    I’m experiencing some minor security problems with my latest
    blog and I would like to find something
    more safe. Do you have any suggestions?

    回复

  404. Link exchange is nothing else however it is just placing the other person’s
    website link on your page at proper place
    and other person will also do similar in favor of you.

    回复

  571. Do you have a spam problem on this website; I also am a blogger, and I was curious about your situation; we have created some
    nice practices and we are looking to swap methods with others, please
    shoot me an e-mail if interested.

    回复

  577. This is very fascinating, You’re an excessively skilled blogger.
    I’ve joined your rss feed and stay up for seeking more of your
    fantastic post. Also, I have shared your website in my social networks

    回复

  607. Hi! This is kind of off topic but I need some guidance from an established blog.
    Is it very hard to set up your own blog? I’m not very techincal but I can figure things out pretty quick.

    I’m thinking about making my own but I’m not sure where
    to start. Do you have any points or suggestions?

    Cheers

    回复

  665. Hmm it appears like your website ate my first comment (it was super long) so
    I guess I’ll just sum it up what I had written and say, I’m thoroughly enjoying your blog.
    I as well am an aspiring blog blogger but I’m still new to everything.
    Do you have any helpful hints for newbie blog writers? I’d really
    appreciate it.

    回复

  667. Howdy! This is my 1st comment here so I just wanted to give a quick shout out and tell you I really enjoy reading through your blog posts. Can you suggest any other blogs/websites/forums that cover the same subjects? Appreciate it!

    回复

  689. Undeniably imagine that that you said. Your favourite reason seemed to be on the web the easiest thing to take into account of.

    I say to you, I certainly get irked at the same time as people consider issues that they plainly
    don’t recognize about. You controlled to hit the nail upon the top as neatly as defined out
    the entire thing without having side effect , other people could take a signal.
    Will likely be again to get more. Thank you

    回复

  752. Have you ever thought about including a little bit more than just your articles?
    I mean, what you say is fundamental and all. Nevertheless imagine
    if you added some great visuals or videos to give your
    posts more, “pop”! Your content is excellent but with images and videos, this website could definitely be one of the most beneficial in its niche.
    Fantastic blog!

    回复