??  1. ?????????

????(1) ?????????

????1) ????????????????Щ??????????????????

????2) ???A??????е??????B?????????в????????????session??????????????

????3???????A??????????????????棬???B??????????????URL?????

????(2) ?????????

????1?? ?????е????????棬???????????????????з???

????2????????A??B??C????棬???????????A??C?

????2. URL???????

??????1?????÷?Χ?? URL?к??в???????????GET????????HTTP????

??????2??????GET?????

????HTTP ?????????????????????????????????????? GET ?? POST??

????GET????????????URL?????????????URL?п??????????????????ж???????

????http://pay.daily.taobao.net/mysub/subdeal/order_sub_deal.htm?servId=2

????POST??????????????HTML HEADER????????????URL?п?????

????GET????????????????????????POST??????????????????GET??

??????3??????????

????1?? URL ??????飺

????A:  ??URL?в???????????????

?????磺URL?е????????????????????????????????????????

????B:  ?????Щ????????????????????URL?????????

?????磺?????????????????????????????? ??

????2?? URL????????

???????URL?е????????????????????

?????磺????????URL?????????planId??????????????????

????http://pay.daily.taobao.net/mysub/plan/subplan/confirmSubPlanInfo.htm?planId=878

???????磺????URL?а??????????????????????????????????????????2??????1???????????????????????????????????????

????3?? URL?в?????????XSS???

????????XSS??

????XSS???????Cross Site Script???????????

????XSS??????????????н?????URL???????????????????У??????JavaScript???????<script>alter(??abc??)<script>

??????URL?н???XSS???????URL?е???????JS?????

????4?? URL?????н???SQL ???

????????SQL???

????SQL????????SQL Injection ??????ó?????????????????????sql????????????????????sql????????????????????????

????????????? URL??д??SQL?????????????У??磺??or 1=1;shutdown

?????????????????SQL?????????????????????????????ж???????????????????????д????Ч??SQL??????

????3. ????????????

???????÷?Χ???б????????????HTTP???????(????GET??POST????)

????????????

????1?? ????????XSS???

????????XSS????????????????????URL????????XSS???????и???????

?????????????????????д??????????JS???

????????????????XSS????????????????y????е?

????2?? ????????SQL ???

??????URL?в???????SQL????????????????д??SQL???????????????????

????4. Session????

????(1)   Session??????????????????????????????????????????????????λ????????sessionId??????????????sessionID?????

?????????????????????????λ?????????????С???????????????????????????

????(2)   ????????

????1) Session????

????Session??????????A??????????B??????

???????Session????????????????????????????????????A???в??????????????A???????????棬????B??session????????????A???????????

????Session?????????

??????TAB?????????????TAB??ж???????????A??session?????????????????TAB???????????????????B?? ???????TAB?????B??session????????????A???????в???????????????? ?????????????????????B???????A???????????????????????????????B?????A??? ??????????????B???????A???

????2) Session???

????????Session????????????session????г???????????????session??????????????????????

?????????????

????1?????????棬????10????session??????????????????в???????Ч????

????2????TAB?????????????TAB??ж???????????A??session?????????????????TAB?????????????????????????????????????????????????????????????????????檔