代码审计-ereg正则%00截断

<?php $flag = "xxx"; if (isset ($_GET['password'])) { if (ereg ("^[a-zA-Z0-9]+$", $_GET['password']) === FALSE) { echo 'You password must be alphanumeric '; } else if (strlen($_GET['password']) < 8 &&

>>阅读原文<<