WooYun.org

先看axphp.php的源码
------------------------------------------------
<tr>
<td>账号:</td>
<td><form method="post" action="login.php"> // 提交处理文件login.php
<input tabindex="1" type="text" name="adminname" class="texta" onkeyup="value=value.replace(/[^\w\.\/]/ig,'')" /></td>
<td rowspan="2"><input type="submit" value="登录" class="submit" /></td>
</tr>
<tr>
<td>密码:</td>
<td><input tabindex="2" type="password" name="adminpass" class="textb" /></td></form>
login.php 代码
-------------------------------------------------
require '../config.php';
$adminname = $_POST['adminname'];
$adminpass = $_POST['adminpass'];
$adminpass .= "Axphp.com";
$adminpass = md5($adminpass);
$adminsql = "select * from axphp_admin where adminname='$adminname' and adminpass='$adminpass'";
$adminery = mysql_query($adminsql, $config);
$adminnum = mysql_num_rows($adminery);
if ($adminnum == "1") { //如果用户和密码正确设置cookie
setcookie("admin", "Y", time() + 3600, '/'); //设置cookie值 admin=‘Y’
setcookie("admin_name", $adminname, time() + 3600, '/'); //设置cookie值 admin_name的值
header("location:axadmin.php"); //如果用户和密码正确就跳到后台管理页面
} else {
header("location:axphp.php");
}
再去看下axadmin.php的代码
-----------------------------------------------
<?php
require 'check.php'; //cookie验证文件 我们跟下这个。
require '../template/axadmin/head.php';
require '../template/axadmin/banner.php';
require '../template/axadmin/main.php';
require '../template/axadmin/bottom.php'
?>
check.php代码
-------------------------------------
<?php
error_reporting(0);
isset($_COOKIE['admin'])?$check=$_COOKIE['admin']:$check=null;
//我们只要不让$_COOKIE['admin']这个值不为空就可以
isset($_COOKIE['admin_name'])?$admin_user=$_COOKIE['admin_name']:$user=null;
//这里也是一样不让他不为空。
if($check==null){header("Location:../index.php");exit;}
?>