http://www.hnfnc.edu.cn/ http://www.hnfnc.edu.cn/

另附:

PHP Version 4.3.9

System Windows NT PROXY2 5.2 build 3790 Build Date Sep 21 2004 14:03:10 Server API ISAPI Virtual Directory Support enabled Configuration File (php.ini) Path C:\WINDOWS\php.ini PHP API 20020918 PHP Extension 20020429 Zend Extension 20021010 Debug Build no Thread Safety enabled Registered PHP Streams php, http, ftp, compress.zlib

This program makes use of the Zend Scripting Language Engine: Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies with Zend Extension Manager v1.0.1, Copyright (c) 2003, by Zend Technologies with Zend Optimizer v2.5.1, Copyright (c) 1998-2004, by Zend Technologies

--------------------------------------------------------------------------------

PHP Credits

--------------------------------------------------------------------------------

Configuration PHP Core Directive Local Value Master Value allow_call_time_pass_reference On On allow_url_fopen On On always_populate_raw_post_data Off Off arg_separator.input & & arg_separator.output & & asp_tags Off Off auto_append_file no value no value auto_prepend_file no value no value browscap no value no value default_charset no value no value default_mimetype text/html text/html define_syslog_variables Off Off disable_classes no value no value disable_functions no value no value display_errors On On display_startup_errors Off Off doc_root no value no value docref_ext no value no value docref_root no value no value enable_dl On On error_append_string no value no value error_log no value no value error_prepend_string no value no value error_reporting 2039 2039 expose_php On On extension_dir D:\usr\local\php\extensions\ D:\usr\local\php\extensions\ file_uploads On On gpc_order GPC GPC highlight.bg #FFFFFF #FFFFFF highlight.comment #FF8000 #FF8000 highlight.default #0000BB #0000BB highlight.html #000000 #000000 highlight.keyword #007700 #007700 highlight.string #DD0000 #DD0000 html_errors On On ignore_repeated_errors Off Off ignore_repeated_source Off Off ignore_user_abort Off Off implicit_flush Off Off include_path .;c:\php4\pear .;c:\php4\pear log_errors Off Off log_errors_max_len 1024 1024 magic_quotes_gpc On On magic_quotes_runtime Off Off magic_quotes_sybase Off Off max_execution_time 30 30 max_input_time 60 60 open_basedir no value no value output_buffering no value no value output_handler no value no value post_max_size 8M 8M precision 12 12 register_argc_argv On On register_globals On On report_memleaks On On safe_mode Off Off safe_mode_exec_dir no value no value safe_mode_gid Off Off safe_mode_include_dir no value no value sendmail_from no value no value sendmail_path no value no value serialize_precision 100 100 short_open_tag On On SMTP localhost localhost smtp_port 25 25 sql.safe_mode Off Off track_errors Off Off unserialize_callback_func no value no value upload_max_filesize 20M 20M upload_tmp_dir no value no value user_dir no value no value variables_order EGPCS EGPCS xmlrpc_error_number 0 0 xmlrpc_errors Off Off y2k_compliance On On

ISAPI Server Variable Value CONTENT_LENGTH 0 PATH_TRANSLATED QUERY_STRING m=phpinfo REMOTE_ADDR 59.33.252.2 REMOTE_HOST 59.33.252.2 REQUEST_METHOD GET SERVER_NAME www.hnfnc.edu.cn SERVER_PORT 80 SERVER_PROTOCOL HTTP/1.1 SERVER_SOFTWARE Microsoft-IIS/6.0 APPL_MD_PATH /LM/W3SVC/512252197/Root APPL_PHYSICAL_PATH D:\dysf_cms\ INSTANCE_ID 512252197 INSTANCE_META_PATH /LM/W3SVC/512252197 URL ALL_HTTP HTTP_CONNECTION:Keep-Alive HTTP_ACCEPT:image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* HTTP_ACCEPT_ENCODING:gzip, deflate HTTP_ACCEPT_LANGUAGE:zh-cn HTTP_COOKIE:boom_baby=409fdb9a2ae22771f9926c98fc54ee18 HTTP_HOST:www.hnfnc.edu.cn m=help HTTP_USER_AGENT:Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; TencentTraveler ) HTTPS off SCRIPT_NAME SERVER_PORT_SECURE 0

Zend Optimizer Optimization Pass 1 enabled Optimization Pass 2 enabled Optimization Pass 3 enabled Optimization Pass 4 enabled Optimization Pass 5 disabled Optimization Pass 9 disabled Optimization Pass 10 disabled Zend Loader enabled License Path no value

bcmath BCMath support enabled

calendar Calendar support enabled

com Directive Local Value Master Value com.allow_dcom Off Off com.autoregister_casesensitive On On com.autoregister_typelib Off Off com.autoregister_verbose Off Off com.typelib_file no value no value

ctype ctype functions enabled

ftp FTP support enabled

gd GD Support enabled GD Version bundled (2.0.28 compatible) FreeType Support enabled FreeType Linkage with freetype GIF Read Support enabled GIF Create Support enabled JPG Support enabled PNG Support enabled WBMP Support enabled XBM Support enabled

mysql MySQL Support enabled Active Persistent Links 0 Active Links 0 Client API version 3.23.49

Directive Local Value Master Value mysql.allow_persistent On On mysql.connect_timeout 60 60 mysql.default_host no value no value mysql.default_password no value no value mysql.default_port no value no value mysql.default_socket no value no value mysql.default_user no value no value mysql.max_links Unlimited Unlimited mysql.max_persistent Unlimited Unlimited mysql.trace_mode Off Off

odbc ODBC Support enabled Active Persistent Links 0 Active Links 0 ODBC library Win32

Directive Local Value Master Value odbc.allow_persistent On On odbc.check_persistent On On odbc.default_db no value no value odbc.default_pw no value no value odbc.default_user no value no value odbc.defaultbinmode return as is return as is odbc.defaultlrl return up to 4096 bytes return up to 4096 bytes odbc.max_links Unlimited Unlimited odbc.max_persistent Unlimited Unlimited

overload User-Space Object Overloading Support enabled

pcre PCRE (Perl Compatible Regular Expressions) Support enabled PCRE Library Version 4.5 01-December-2003

session Session Support enabled Registered save handlers files user

Directive Local Value Master Value session.auto_start Off Off session.bug_compat_42 On On session.bug_compat_warn On On session.cache_expire 180 180 session.cache_limiter nocache nocache session.cookie_domain no value no value session.cookie_lifetime 0 0 session.cookie_path / / session.cookie_secure Off Off session.entropy_file no value no value session.entropy_length 0 0 session.gc_divisor 100 100 session.gc_maxlifetime 1440 1440 session.gc_probability 1 1 session.name PHPSESSID PHPSESSID session.referer_check no value no value session.save_handler files files session.save_path D:\usr\local\php\sessiondata D:\usr\local\php\sessiondata session.serialize_handler php php session.use_cookies On On session.use_only_cookies Off Off session.use_trans_sid Off Off

standard Regex Library Bundled library enabled Dynamic Library Support enabled Internal Sendmail Support for Windows enabled

Directive Local Value Master Value assert.active 1 1 assert.bail 0 0 assert.callback no value no value assert.quiet_eval 0 0 assert.warning 1 1 auto_detect_line_endings 0 0 default_socket_timeout 60 60 safe_mode_allowed_env_vars PHP_ PHP_ safe_mode_protected_env_vars LD_LIBRARY_PATH LD_LIBRARY_PATH url_rewriter.tags a=href,area=href,frame=src,input=src,form=,fieldset= a=href,area=href,frame=src,input=src,form=,fieldset= user_agent no value no value

tokenizer Tokenizer Support enabled

wddx WDDX Support enabled WDDX Session Serializer enabled

xml XML Support active XML Namespace Support active EXPAT Version 1.95.6

zlib ZLib Support enabled Compiled Version 1.1.4 Linked Version 1.1.4

Directive Local Value Master Value zlib.output_compression Off Off zlib.output_compression_level -1 -1 zlib.output_handler no value no value

Additional Modules Module Name

Environment Variable Value ALLUSERSPROFILE C:\Documents and Settings\All Users ClusterLog C:\WINDOWS\Cluster\cluster.log CommonProgramFiles C:\Program Files\Common Files COMPUTERNAME PROXY2 ComSpec C:\WINDOWS\system32\cmd.exe NUMBER_OF_PROCESSORS 1 OS Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE x86 PROCESSOR_IDENTIFIER x86 Family 6 Model 8 Stepping 6, GenuineIntel PROCESSOR_LEVEL 6 PROCESSOR_REVISION 0806 ProgramFiles C:\Program Files SystemDrive C: SystemRoot C:\WINDOWS TEMP C:\WINDOWS\TEMP TMP C:\WINDOWS\TEMP USERPROFILE C:\Documents and Settings\LocalService windir C:\WINDOWS

PHP Variables Variable Value PHP_SELF /// _REQUEST["m"] phpinfo _REQUEST["boom_baby"] 409fdb9a2ae22771f9926c98fc54ee18 _GET["m"] phpinfo _COOKIE["boom_baby"] 409fdb9a2ae22771f9926c98fc54ee18 _SERVER["ALL_HTTP"] HTTP_CONNECTION:Keep-Alive HTTP_ACCEPT:image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* HTTP_ACCEPT_ENCODING:gzip, deflate HTTP_ACCEPT_LANGUAGE:zh-cn HTTP_COOKIE:boom_baby=409fdb9a2ae22771f9926c98fc54ee18 HTTP_HOST:www.hnfnc.edu.cn HTTP_REFERER:http://www.hnfnc.edu.cn/?m=help HTTP_USER_AGENT:Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; TencentTraveler ) _SERVER["HTTPS"] off _SERVER["SCRIPT_NAME"] /// _SERVER["HTTP_COOKIE"] boom_baby=409fdb9a2ae22771f9926c98fc54ee18 _SERVER["AUTH_PASSWORD"] no value _SERVER["AUTH_TYPE"] no value _SERVER["AUTH_USER"] no value _SERVER["CONTENT_LENGTH"] 0 _SERVER["CONTENT_TYPE"] no value _SERVER["PATH_TRANSLATED"] _SERVER["QUERY_STRING"] m=phpinfo _SERVER["REMOTE_ADDR"] 59.33.252.2 _SERVER["REMOTE_HOST"] 59.33.252.2 _SERVER["REMOTE_USER"] no value _SERVER["REQUEST_METHOD"] GET _SERVER["SERVER_NAME"] www.hnfnc.edu.cn _SERVER["SERVER_PORT"] 80 _SERVER["SERVER_PROTOCOL"] HTTP/1.1 _SERVER["SERVER_SOFTWARE"] Microsoft-IIS/6.0 _SERVER["APPL_MD_PATH"] /LM/W3SVC/512252197/Root _SERVER["APPL_PHYSICAL_PATH"] D:\\dysf_cms\\ _SERVER["INSTANCE_ID"] 512252197 _SERVER["INSTANCE_META_PATH"] /LM/W3SVC/512252197 _SERVER["LOGON_USER"] no value _SERVER["REQUEST_URI"] no value _SERVER["URL"] /// _SERVER["PHP_SELF"] /// _SERVER["HTTP_CONNECTION"] Keep-Alive _SERVER["HTTP_ACCEPT"] image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* _SERVER["HTTP_ACCEPT_ENCODING"] gzip, deflate _SERVER["HTTP_ACCEPT_LANGUAGE"] zh-cn _SERVER["HTTP_HOST"] www.hnfnc.edu.cn _SERVER["HTTP_REFERER"] http://www.hnfnc.edu.cn/?m=help _SERVER["HTTP_USER_AGENT"] Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; TencentTraveler ) _SERVER["DOCUMENT_ROOT"] D:\\dysf_cms _SERVER["argv"] Array ( [0] => m=phpinfo )

_SERVER["argc"] 1 _ENV["ALLUSERSPROFILE"] C:\\Documents and Settings\\All Users _ENV["ClusterLog"] C:\\WINDOWS\\Cluster\\cluster.log _ENV["CommonProgramFiles"] C:\\Program Files\\Common Files _ENV["COMPUTERNAME"] PROXY2 _ENV["ComSpec"] C:\\WINDOWS\\system32\\cmd.exe _ENV["NUMBER_OF_PROCESSORS"] 1 _ENV["OS"] Windows_NT _ENV["Path"] C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem _ENV["PATHEXT"] .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH _ENV["PROCESSOR_ARCHITECTURE"] x86 _ENV["PROCESSOR_IDENTIFIER"] x86 Family 6 Model 8 Stepping 6, GenuineIntel _ENV["PROCESSOR_LEVEL"] 6 _ENV["PROCESSOR_REVISION"] 0806 _ENV["ProgramFiles"] C:\\Program Files _ENV["SystemDrive"] C: _ENV["SystemRoot"] C:\\WINDOWS _ENV["TEMP"] C:\\WINDOWS\\TEMP _ENV["TMP"] C:\\WINDOWS\\TEMP _ENV["USERPROFILE"] C:\\Documents and Settings\\LocalService _ENV["windir"] C:\\WINDOWS

PHP License This program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSE

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact license@php.net.

难道你知道啊``````

哼！！！

我不禁说。天才啊！天才！

搂主是真的很懂这块的。真不错。

是吗？

可是有些看不明白耶```

楼主您好~

很高兴认识你，我是一师范网站设计者，包括IIS+php+mysql架设，程序设计，以及前台设计

很遗憾这个时候才看到这篇帖子，其实你入侵的第一天，我远程全部做了备案，包括所有有价值的信息，也看了你在信息技术系目录下的留言。然后采用我们先进的cms自动恢复技术马上恢复。

承认你asp学得不错，不过php方面分析得似乎不是那么回事，首先cms系统不存在任何漏洞，asp的那个倒是有非常多的漏洞（估计是罪魁祸首），所以我第一时间通知学校停止了asp的运行。

至于服务器架设是有道理的，我们采用的是win2003+IIS+mysql+php效率至少比asp要高得多。至少我认为为了管理方便我也没必要架设Linux+php+apache+mysql，毕竟不是所有人象我一样都懂。php4.3.9的确有那么点漏洞，漏洞是通过程序表达的，我想我的程序方面是不存在漏洞的！

还有我们的后台并不是你所说的类似于类似于帝国新闻系统（这是个很垃圾的系统）。拿源代码出去卖，要比那个帝国起码要贵得多。

很高兴认识你!

zhiwu shan (shan345@sohu.com)