得知检验:
<?php <p>code.txt</p> if (isset ($_GET[‘password‘])) { if (preg_match ("/^[a-zA-Z0-9]+$/", $_GET[‘password‘]) === FALSE) //要求含有数字字母,正则表达式匹配 { echo ‘<p>You password must be alphanumeric</p>‘; } else if (strlen($_GET[‘password‘]) < 8 && $_GET[‘password‘] > 9999999)//长度<8,数值>9999999 { if (strpos ($_GET[‘password‘], ‘*-*‘) !== FALSE)//包含*-* { die(‘Flag: ‘ . $flag); } else { echo(‘<p>*-* have not been found</p>‘); } } else { echo ‘<p>Invalid password</p>‘; } } ?>
URL后加上/?password=1e8*-*,1e8是10的8次方
原文:https://www.cnblogs.com/bulter/p/14724070.html