Merge pull request #109 from harnnless/patch-1

检测 PHP 文件上传是否成功的例子代码存在问题
knownsec · Sep 19, 2016 · ee7c7da · ee7c7da
2 parents 3e326c4 + 5dd18fc
commit ee7c7da
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/CODING.md b/docs/CODING.md
@@ -318,7 +318,7 @@ JSON 格式的 PoC 类似于完形填空,只需要填写相应的字段的值即
         检测 PHP 文件上传是否成功,
 
             token = randomStr()
-            payload = '<?php echo md5(%s);unlink(__FILE__);?>' % token
+            payload = '<?php echo md5("%s");unlink(__FILE__);?>' % token
             ...
 
             if hashlib.new('md5', token).hexdigest() in content: