{"id":27002,"date":"2024-04-14T22:01:27","date_gmt":"2024-04-14T15:01:27","guid":{"rendered":"https:\/\/doc.bnix.vn\/?p=27002"},"modified":"2024-04-14T22:01:30","modified_gmt":"2024-04-14T15:01:30","slug":"vi-sao-phai-han-che-thuc-thi-mot-so-ham-php-tren-may-chu-hosting","status":"publish","type":"post","link":"https:\/\/doc.bnix.vn\/vi-sao-phai-han-che-thuc-thi-mot-so-ham-php-tren-may-chu-hosting\/","title":{"rendered":"V\u00ec sao ph\u1ea3i h\u1ea1n ch\u1ebf th\u1ef1c thi m\u1ed9t s\u1ed1 h\u00e0m PHP tr\u00ean m\u00e1y ch\u1ee7 Hosting?"},"content":{"rendered":"\n\n
\n \n
\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n<\/div>\n \n\n
\n 4.6\/5 - (7 b\u00ecnh ch\u1ecdn) <\/div>\n <\/div>\n\n

Ng\u00f4n ng\u1eef l\u1eadp tr\u00ecnh PHP cung c\u1ea5p m\u1ed9t th\u01b0 vi\u1ec7n h\u00e0m phong ph\u00fa, cho ph\u00e9p l\u1eadp tr\u00ecnh vi\u00ean th\u1ef1c hi\u1ec7n nhi\u1ec1u t\u00e1c v\u1ee5 kh\u00e1c nhau, bao g\u1ed3m c\u1ea3 vi\u1ec7c truy c\u1eadp v\u00e0 \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng m\u00e1y ch\u1ee7. Tuy nhi\u00ean, m\u1ed9t s\u1ed1 h\u00e0m PHP c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c h\u00e0nh \u0111\u1ed9ng \u0111\u1ed9c h\u1ea1i, ch\u1eb3ng h\u1ea1n nh\u01b0:<\/p>\n\n\n\n

    \n
  • Ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c:<\/strong>\u00a0C\u00e1c h\u00e0m nh\u01b0 exec(), system(), shell_exec(), passthru() cho ph\u00e9p l\u1eadp tr\u00ecnh vi\u00ean th\u1ef1c thi c\u00e1c l\u1ec7nh shell tr\u00ean m\u00e1y ch\u1ee7. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 t\u1ea3i xu\u1ed1ng v\u00e0 c\u00e0i \u0111\u1eb7t m\u00e3 \u0111\u1ed9c tr\u00ean m\u00e1y ch\u1ee7.<\/li>\n\n\n\n
  • Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u:<\/strong>\u00a0C\u00e1c h\u00e0m nh\u01b0 file_get_contents(), file_put_contents(), fopen() cho ph\u00e9p l\u1eadp tr\u00ecnh vi\u00ean truy c\u1eadp v\u00e0 \u0111\u1ecdc\/ghi d\u1eef li\u1ec7u tr\u00ean m\u00e1y ch\u1ee7. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 l\u1ea5y c\u1eafp th\u00f4ng tin nh\u1ea1y c\u1ea3m, ch\u1eb3ng h\u1ea1n nh\u01b0 m\u1eadt kh\u1ea9u, th\u00f4ng tin th\u1ebb t\u00edn d\u1ee5ng, v.v.<\/li>\n\n\n\n
  • Ph\u00e1 ho\u1ea1i h\u1ec7 th\u1ed1ng:<\/strong>\u00a0C\u00e1c h\u00e0m nh\u01b0 chmod(), chown(), symlink() cho ph\u00e9p l\u1eadp tr\u00ecnh vi\u00ean thay \u0111\u1ed5i quy\u1ec1n truy c\u1eadp c\u1ee7a c\u00e1c t\u1ec7p v\u00e0 th\u01b0 m\u1ee5c tr\u00ean m\u00e1y ch\u1ee7. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t m\u00e1y ch\u1ee7.<\/li>\n<\/ul>\n\n\n\n

    \u0110\u1ec3 ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda b\u1ea3o m\u1eadt n\u00e0y, h\u1ea7u h\u1ebft c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 l\u01b0u tr\u1eef Hosting \u0111\u1ec1u ng\u0103n ch\u1eb7n th\u1ef1c thi m\u1ed9t s\u1ed1 h\u00e0m PHP tr\u00ean m\u00e1y ch\u1ee7 c\u1ee7a h\u1ecd. C\u00e1c h\u00e0m th\u01b0\u1eddng b\u1ecb ch\u1eb7n bao g\u1ed3m:<\/p>\n\n\n\n

    * exec()
    * system()
    * shell_exec()
    * passthru()
    * file_get_contents()
    * file_put_contents()
    * fopen()
    * chmod()
    * chown()
    * symlink()<\/p>\n\n\n\n

    Ngo\u00e0i ra, m\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 Hosting c\u0169ng c\u00f3 th\u1ec3 ch\u1eb7n th\u1ef1c thi c\u00e1c h\u00e0m PHP kh\u00e1c, t\u00f9y thu\u1ed9c v\u00e0o ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt c\u1ee7a h\u1ecd.<\/p>\n\n\n\n

    Vi\u1ec7c ng\u0103n ch\u1eb7n th\u1ef1c thi m\u1ed9t s\u1ed1 h\u00e0m PHP c\u00f3 th\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn kh\u1ea3 n\u0103ng ho\u1ea1t \u0111\u1ed9ng c\u1ee7a m\u1ed9t s\u1ed1 \u1ee9ng d\u1ee5ng web. Tuy nhi\u00ean, \u0111\u00e2y l\u00e0 m\u1ed9t bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt quan tr\u1ecdng c\u1ea7n \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n \u0111\u1ec3 b\u1ea3o v\u1ec7 m\u00e1y ch\u1ee7 Hosting kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda b\u1ea3o m\u1eadt.<\/p>\n\n\n\n

    D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 m\u1eb9o \u0111\u1ec3 gi\u1ea3m thi\u1ec3u t\u00e1c \u0111\u1ed9ng c\u1ee7a vi\u1ec7c ng\u0103n ch\u1eb7n th\u1ef1c thi c\u00e1c h\u00e0m PHP:<\/strong><\/p>\n\n\n\n

      \n
    • S\u1eed d\u1ee5ng c\u00e1c h\u00e0m PHP thay th\u1ebf an to\u00e0n h\u01a1n. V\u00ed d\u1ee5: thay v\u00ec s\u1eed d\u1ee5ng exec(), system(), shell_exec() ho\u1eb7c passthru(), b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng h\u00e0m exec_safe() ho\u1eb7c system_safe().<\/li>\n\n\n\n
    • Ki\u1ec3m tra m\u00e3 PHP c\u1ee7a b\u1ea1n \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o r\u1eb1ng b\u1ea1n kh\u00f4ng s\u1eed d\u1ee5ng c\u00e1c h\u00e0m PHP b\u1ecb ch\u1eb7n.<\/li>\n\n\n\n
    • N\u1ebfu b\u1ea1n c\u1ea7n s\u1eed d\u1ee5ng c\u00e1c h\u00e0m PHP b\u1ecb ch\u1eb7n, h\u00e3y li\u00ean h\u1ec7 v\u1edbi nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 Hosting c\u1ee7a b\u1ea1n \u0111\u1ec3 \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3.<\/li>\n<\/ul>\n\n\n\n

      \u0110\u1ec3 hi\u1ec3u r\u00f5 v\u1ea5n \u0111\u1ec1 v\u00e0 nguy\u00ean nh\u00e2n t\u1ea1i sao h\u1ecd l\u1ea1i ng\u0103n ch\u1eb7n c\u00e1c h\u00e0m n\u00e0y, nh\u1eefng h\u00e0m n\u00e0o bu\u1ed9c ph\u1ea3i ng\u0103n ch\u1eb7n th\u1ef1c thi, b\u1ea1n xem m\u00f4 t\u1ea3 trong b\u1ea3ng sau nh\u00e9:<\/p>\n\n\n\n

      STT<\/strong><\/td>Name<\/strong><\/td>T\u00ednh n\u0103ng<\/strong><\/td>M\u00f4 t\u1ea3<\/strong><\/td><\/tr>
      1<\/td>system<\/td>Th\u1ef1c hi\u1ec7n m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh b\u00ean ngo\u00e0i v\u00e0 hi\u1ec3n th\u1ecb \u0111\u1ea7u ra<\/td>System () gi\u1ed1ng nh\u01b0 phi\u00ean b\u1ea3n C c\u1ee7a h\u00e0m trong \u0111\u00f3 n\u00f3 th\u1ef1c thi l\u1ec7nh \u0111\u00e3 cho v\u00e0 \u0111\u01b0a ra k\u1ebft qu\u1ea3. Cu\u1ed9c g\u1ecdi system () c\u0169ng c\u1ed1 g\u1eafng t\u1ef1 \u0111\u1ed9ng x\u00f3a b\u1ed9 \u0111\u1ec7m \u0111\u1ea7u ra c\u1ee7a m\u00e1y ch\u1ee7 web sau m\u1ed7i d\u00f2ng \u0111\u1ea7u ra n\u1ebfu PHP \u0111ang ch\u1ea1y nh\u01b0 m\u1ed9t m\u00f4-\u0111un m\u00e1y ch\u1ee7. N\u1ebfu b\u1ea1n c\u1ea7n th\u1ef1c thi m\u1ed9t l\u1ec7nh v\u00e0 c\u00f3 t\u1ea5t c\u1ea3 d\u1eef li\u1ec7u t\u1eeb l\u1ec7nh \u0111\u01b0\u1ee3c truy\u1ec1n tr\u1ef1c ti\u1ebfp tr\u1edf l\u1ea1i m\u00e0 kh\u00f4ng c\u00f3 b\u1ea5t k\u1ef3 s\u1ef1 can thi\u1ec7p n\u00e0o, h\u00e3y s\u1eed d\u1ee5ng h\u00e0m passthru ().<\/td><\/tr>
      2<\/td>exec<\/td>Th\u1ef1c hi\u1ec7n m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh b\u00ean ngo\u00e0i<\/td>Cho ph\u00e9p th\u1ef1c hi\u1ec7n 1 ch\u01b0\u01a1ng tr\u00ecnh t\u1eeb b\u00ean ngo\u00e0i. D\u1ec5 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 thao t\u00e1c chi\u1ebfm quy\u1ec1n, th\u1ef1c thi c\u00e1c ch\u01b0\u01a1ng tr\u00ecnh \u0111\u1ed9c h\u1ea1i.<\/td><\/tr>
      3<\/td>shell_exec<\/td>Th\u1ef1c thi l\u1ec7nh th\u00f4ng qua shell v\u00e0 tr\u1ea3 v\u1ec1 \u0111\u1ea7u ra ho\u00e0n ch\u1ec9nh d\u01b0\u1edbi d\u1ea1ng chu\u1ed7i<\/td>Th\u1ef1c thi l\u1ec7nh b\u1eb1ng command v\u00e0 tr\u1ea3 k\u1ebft qu\u1ea3 l\u00e0 chu\u1ed7i. T\u01b0\u01a1ng t\u1ef1 nh\u01b0 exce, d\u1ec5 b\u1ecb l\u1ee3i d\u1ee5ng v\u00e0 khai th\u00e1c nh\u1ea7m m\u1ee5c \u0111\u00edch x\u1ea5u.<\/td><\/tr>
      4<\/td>proc_close<\/td>\u0110\u00f3ng m\u1ed9t quy tr\u00ecnh \u0111\u01b0\u1ee3c m\u1edf b\u1edfi Proc_open () v\u00e0 tr\u1ea3 l\u1ea1i m\u00e3 tho\u00e1t c\u1ee7a quy tr\u00ecnh \u0111\u00f3<\/td>Proc_close () t\u01b0\u01a1ng t\u1ef1 nh\u01b0 pclose () ngo\u1ea1i tr\u1eeb vi\u1ec7c n\u00f3 ch\u1ec9 ho\u1ea1t \u0111\u1ed9ng tr\u00ean c\u00e1c quy tr\u00ecnh \u0111\u01b0\u1ee3c m\u1edf b\u1edfi Proc_open (). Proc_close () ch\u1edd qu\u00e1 tr\u00ecnh k\u1ebft th\u00fac v\u00e0 tr\u1ea3 v\u1ec1 m\u00e3 tho\u00e1t c\u1ee7a n\u00f3. N\u1ebfu b\u1ea1n c\u00f3 c\u00e1c \u0111\u01b0\u1eddng \u1ed1ng m\u1edf cho quy tr\u00ecnh \u0111\u00f3, b\u1ea1n n\u00ean d\u00f9ng fclose() \u0111\u1ec3 \u0111\u00f3ng ch\u00fang tr\u01b0\u1edbc khi g\u1ecdi h\u00e0m n\u00e0y \u0111\u1ec3 tr\u00e1nh ngh\u1ebdn \u2013 qu\u00e1 tr\u00ecnh con c\u00f3 th\u1ec3 kh\u00f4ng th\u1ec3 tho\u00e1t trong khi c\u00e1c \u0111\u01b0\u1eddng \u1ed1ng \u0111ang m\u1edf.<\/td><\/tr>
      5<\/td>proc_get_status<\/td>Nh\u1eadn th\u00f4ng tin v\u1ec1 m\u1ed9t quy tr\u00ecnh \u0111\u01b0\u1ee3c m\u1edf b\u1edfi Proc_open ()<\/td>Proc_get_status () t\u00ecm n\u1ea1p d\u1eef li\u1ec7u v\u1ec1 m\u1ed9t quy tr\u00ecnh \u0111\u01b0\u1ee3c m\u1edf b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng Proc_open ().<\/td><\/tr>
      6<\/td>proc_nice<\/td>Thay \u0111\u1ed5i m\u1ee9c \u0111\u1ed9 \u01b0u ti\u00ean c\u1ee7a quy tr\u00ecnh hi\u1ec7n t\u1ea1i<\/td>Thay \u0111\u1ed5i m\u1ee9c \u0111\u1ed9 \u01b0u ti\u00ean c\u1ee7a quy tr\u00ecnh hi\u1ec7n t\u1ea1i. \u0110i\u1ec1u n\u00e0y s\u1ebd g\u00e2y ra v\u1ea5n \u0111\u1ec1 leo thang t\u00e0i nguy\u00ean.<\/td><\/tr>
      7<\/td>popen<\/td>M\u1edf con tr\u1ecf t\u1ec7p qu\u00e1 tr\u00ecnh<\/td>popen t\u01b0\u01a1ng t\u1ef1 v\u1edbi proc_open nh\u01b0ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u00edt h\u01a1n.<\/td><\/tr>
      8<\/td>proc_terminate<\/td>\u0110\u00f3ng m\u1ed9t ti\u1ebfn tr\u00ecnh \u0111\u01b0\u1ee3c m\u1edf b\u1edfi Proc_open<\/td>T\u00edn hi\u1ec7u m\u1ed9t qu\u00e1 tr\u00ecnh (\u0111\u01b0\u1ee3c t\u1ea1o b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng Proc_open ()) m\u00e0 n\u00f3 s\u1ebd ch\u1ea5m d\u1ee9t. Proc_terminate () tr\u1ea3 v\u1ec1 ngay l\u1eadp t\u1ee9c v\u00e0 kh\u00f4ng ch\u1edd qu\u00e1 tr\u00ecnh k\u1ebft th\u00fac. Proc_terminate () cho ph\u00e9p b\u1ea1n ch\u1ea5m d\u1ee9t qu\u00e1 tr\u00ecnh v\u00e0 ti\u1ebfp t\u1ee5c v\u1edbi c\u00e1c nhi\u1ec7m v\u1ee5 kh\u00e1c. B\u1ea1n c\u00f3 th\u1ec3 th\u0103m d\u00f2 qu\u00e1 tr\u00ecnh (\u0111\u1ec3 xem n\u00f3 \u0111\u00e3 d\u1eebng ch\u01b0a) b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng h\u00e0m Proc_get_status ().\u0110i\u1ec1u n\u00e0y d\u1ec5 g\u00e2y ra vi\u1ec7c c\u00e1c ti\u1ebfn tr\u00ecnh quan tr\u1ecdng \u0111ang th\u1ef1c hi\u1ec7n nh\u01b0ng l\u1ea1i b\u1ecb ng\u1eaft b\u1edfi function n\u00e0y. G\u00e2y \u1ea3nh h\u01b0\u1edfng kh\u00e1 nghi\u00eam tr\u1ecdng, c\u0169ng nh\u01b0 g\u00e2y ra c\u00e1c v\u1ea5n \u0111\u1ec1 li\u00ean quan \u0111\u1ebfn b\u1ea3o m\u1eadt d\u1eef li\u1ec7u.<\/td><\/tr>
      9<\/td>escapeshellcmd<\/td>Tho\u00e1t shell metacharacters<\/td>escapeshellcmd () tho\u00e1t b\u1ea5t k\u1ef3 k\u00fd t\u1ef1 n\u00e0o trong chu\u1ed7i c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 l\u1eeba l\u1ec7nh shell \u0111\u1ec3 th\u1ef1c thi c\u00e1c l\u1ec7nh t\u00f9y \u00fd. H\u00e0m n\u00e0y n\u00ean \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o r\u1eb1ng m\u1ecdi d\u1eef li\u1ec7u \u0111\u1ebfn t\u1eeb \u0111\u1ea7u v\u00e0o c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec1u \u0111\u01b0\u1ee3c tho\u00e1t tr\u01b0\u1edbc khi d\u1eef li\u1ec7u n\u00e0y \u0111\u01b0\u1ee3c chuy\u1ec3n \u0111\u1ebfn c\u00e1c h\u00e0m exec () ho\u1eb7c system () ho\u1eb7c cho to\u00e1n t\u1eed backtick. C\u00e1c k\u00fd t\u1ef1 sau \u0111\u01b0\u1ee3c b\u1eaft \u0111\u1ea7u b\u1eb1ng d\u1ea5u g\u1ea1ch ch\u00e9o ng\u01b0\u1ee3c: & #; `| *? ~ <> ^ () [] {} $ , X0A v\u00e0 xFF. \u2018v\u00e0 \u201cch\u1ec9 \u0111\u01b0\u1ee3c tho\u00e1t n\u1ebfu ch\u00fang kh\u00f4ng \u0111\u01b0\u1ee3c gh\u00e9p n\u1ed1i. Trong Windows, t\u1ea5t c\u1ea3 c\u00e1c k\u00fd t\u1ef1 n\u00e0y c\u1ed9ng v\u1edbi% v\u00e0! \u0111\u01b0\u1ee3c thay th\u1ebf b\u1eb1ng kho\u1ea3ng tr\u1eafng thay th\u1ebf.<\/td><\/tr>
      10<\/td>escapeshellcmd<\/td>Tho\u00e1t m\u1ed9t chu\u1ed7i \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng l\u00e0m \u0111\u1ed1i s\u1ed1 shell<\/td>escapeshellarg () th\u00eam c\u00e1c tr\u00edch d\u1eabn \u0111\u01a1n xung quanh m\u1ed9t chu\u1ed7i v\u00e0 tr\u00edch d\u1eabn \/ tho\u00e1t kh\u1ecfi m\u1ecdi tr\u00edch d\u1eabn \u0111\u01a1n hi\u1ec7n c\u00f3 cho ph\u00e9p b\u1ea1n chuy\u1ec3n m\u1ed9t chu\u1ed7i tr\u1ef1c ti\u1ebfp \u0111\u1ebfn h\u00e0m shell v\u00e0 \u0111\u1ec3 n\u00f3 \u0111\u01b0\u1ee3c coi l\u00e0 m\u1ed9t \u0111\u1ed1i s\u1ed1 an to\u00e0n duy nh\u1ea5t. H\u00e0m n\u00e0y n\u00ean \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 tho\u00e1t c\u00e1c \u0111\u1ed1i s\u1ed1 ri\u00eang l\u1ebb sang c\u00e1c h\u00e0m shell \u0111\u1ebfn t\u1eeb \u0111\u1ea7u v\u00e0o c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. C\u00e1c h\u00e0m shell bao g\u1ed3m exec (), system () v\u00e0 to\u00e1n t\u1eed backtick. Tr\u00ean Windows, escapeshellarg () thay th\u1ebf thay th\u1ebf c\u00e1c d\u1ea5u ph\u1ea7n tr\u0103m, d\u1ea5u ch\u1ea5m than (thay th\u1ebf bi\u1ebfn b\u1ecb tr\u00ec ho\u00e3n) v\u00e0 d\u1ea5u ngo\u1eb7c k\u00e9p b\u1eb1ng d\u1ea5u c\u00e1ch v\u00e0 th\u00eam d\u1ea5u ngo\u1eb7c k\u00e9p quanh chu\u1ed7i.<\/td><\/tr>
      11<\/td>dl<\/td> T\u1ea3i m\u1ed9t ph\u1ea7n m\u1edf r\u1ed9ng PHP khi ch\u1ea1y<\/td>T\u1ea3i ph\u1ea7n m\u1edf r\u1ed9ng PHP \u0111\u01b0\u1ee3c cung c\u1ea5p b\u1edfi th\u01b0 vi\u1ec7n tham s\u1ed1. S\u1eed d\u1ee5ng extension_loaded () \u0111\u1ec3 ki\u1ec3m tra xem m\u1ed9t ti\u1ec7n \u00edch m\u1edf r\u1ed9ng \u0111\u00e3 c\u00f3 s\u1eb5n hay ch\u01b0a. \u0110i\u1ec1u n\u00e0y ho\u1ea1t \u0111\u1ed9ng tr\u00ean c\u1ea3 c\u00e1c ti\u1ec7n \u00edch m\u1edf r\u1ed9ng t\u00edch h\u1ee3p v\u00e0 c\u00e1c ti\u1ec7n \u00edch \u0111\u01b0\u1ee3c t\u1ea3i \u0111\u1ed9ng (th\u00f4ng qua php.ini ho\u1eb7c dl ()).<\/td><\/tr>
      12<\/td>show_source<\/td>Tr\u1ea3 v\u1ec1 m\u1ed9t t\u1ec7p c\u00f3 c\u00fa ph\u00e1p PHP \u0111\u01b0\u1ee3c t\u00f4 s\u00e1ng. C\u00fa ph\u00e1p \u0111\u01b0\u1ee3c t\u00f4 s\u00e1ng b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c th\u1ebb HTML.<\/td>In ra ho\u1eb7c tr\u1ea3 v\u1ec1 m\u1ed9t phi\u00ean b\u1ea3n \u0111\u01b0\u1ee3c t\u00f4 s\u00e1ng b\u1eb1ng c\u00fa ph\u00e1p c\u1ee7a m\u00e3 c\u00f3 trong t\u00ean t\u1ec7p b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c m\u00e0u \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh trong c\u00f4ng c\u1ee5 t\u00f4 s\u00e1ng c\u00fa ph\u00e1p t\u00edch h\u1ee3p cho PHP. Nhi\u1ec1u m\u00e1y ch\u1ee7 \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng l\u00e0m n\u1ed5i b\u1eadt c\u00e1c t\u1ec7p c\u00f3 ph\u1ea7n m\u1edf r\u1ed9ng phps. V\u00ed d\u1ee5: example.phps khi xem s\u1ebd hi\u1ec3n th\u1ecb c\u00fa ph\u00e1p t\u00f4 s\u00e1ng ngu\u1ed3n c\u1ee7a t\u1ec7p<\/td><\/tr>
      13<\/td>ini_alter<\/td>H\u00e0m n\u00e0y l\u00e0 b\u00ed danh c\u1ee7a: ini_set ()<\/td>\u0110\u1eb7t gi\u00e1 tr\u1ecb c\u1ee7a t\u00f9y ch\u1ecdn c\u1ea5u h\u00ecnh \u0111\u00e3 cho. T\u00f9y ch\u1ecdn c\u1ea5u h\u00ecnh s\u1ebd gi\u1eef gi\u00e1 tr\u1ecb m\u1edbi n\u00e0y trong qu\u00e1 tr\u00ecnh th\u1ef1c thi t\u1eadp l\u1ec7nh v\u00e0 s\u1ebd \u0111\u01b0\u1ee3c kh\u00f4i ph\u1ee5c \u1edf cu\u1ed1i t\u1eadp l\u1ec7nh.<\/td><\/tr>
      14<\/td>virtual<\/td>Th\u1ef1c hi\u1ec7n m\u1ed9t y\u00eau c\u1ea7u ph\u1ee5 c\u1ee7a Apache<\/td>Th\u1ef1c hi\u1ec7n m\u1ed9t y\u00eau c\u1ea7u ph\u1ee5 c\u1ee7a Apache<\/td><\/tr>
      15<\/td>openlog<\/td>M\u1edf m\u1ed9t k\u1ebft n\u1ed1i \u0111\u1ebfn b\u1ed9 ghi h\u1ec7 th\u1ed1ng cho m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh<\/td>M\u1edf m\u1ed9t k\u1ebft n\u1ed1i \u0111\u1ebfn b\u1ed9 ghi h\u1ec7 th\u1ed1ng cho m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh<\/td><\/tr>
      16<\/td>mail<\/td>G\u1eedi mail kh\u00f4ng c\u1ea7n ch\u1ee9ng th\u1ef1c<\/td>G\u1eedi mail kh\u00f4ng c\u1ea7n ch\u1ee9ng th\u1ef1c<\/td><\/tr>
      17<\/td>symlink<\/td>T\u1ea1o  symbolic link<\/td>T\u1ea1o  symbolic link<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

      B\u1ea3ng b\u00ean tr\u00ean li\u1ec7t k\u00ea nh\u1eefng h\u00e0m PHP \u0111\u00e3 b\u1ecb v\u00f4 hi\u1ec7u ho\u00e1 (disable functions). V\u1eady, nh\u1eefng h\u00e0m n\u00e0o v\u00e0 nh\u1eefng modules n\u00e0o c\u1ee7a PHP\/ Apache \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3. B\u1ea3ng sau \u0111\u00e2y s\u1ebd li\u1ec7t k\u00ea chi ti\u1ebft:<\/p>\n\n\n\n

      STT<\/strong><\/td>Apache Module<\/strong><\/td>PHP Extention<\/strong><\/td><\/tr>
      1<\/td>config<\/td>libc-client<\/td><\/tr>
      2<\/td>config-runtime<\/td>pear<\/td><\/tr>
      3<\/td>devel<\/td>php-bcmath<\/td><\/tr>
      4<\/td>mod-alt-passenger<\/td>php-bz2<\/td><\/tr>
      5<\/td>mod_bwlimited<\/td>php-calendar<\/td><\/tr>
      6<\/td>mod_cache<\/td>php-cli<\/td><\/tr>
      7<\/td>mod_cgid<\/td>php-common<\/td><\/tr>
      8<\/td>mod_charset_lite<\/td>php-curl<\/td><\/tr>
      9<\/td>mod_deflate<\/td>php-dba<\/td><\/tr>
      10<\/td>mod_env<\/td>php-devel<\/td><\/tr>
      11<\/td>mod_evasive<\/td>php-enchant<\/td><\/tr>
      12<\/td>mod_expires<\/td>php-exif<\/td><\/tr>
      13<\/td>mod_file_cache<\/td>php-fileinfo<\/td><\/tr>
      14<\/td>mod_headers<\/td>php-fpm<\/td><\/tr>
      15<\/td>mod_hostinglimits<\/td>php-ftp<\/td><\/tr>
      16<\/td>mod_http2<\/td>php-gd<\/td><\/tr>
      17<\/td>mod_imagemap<\/td>php-gettext<\/td><\/tr>
      18<\/td>mod_lsapi<\/td>php-gmp<\/td><\/tr>
      19<\/td>mod_macro<\/td>php-iconv<\/td><\/tr>
      20<\/td>mod_mime_magic<\/td>php-imap<\/td><\/tr>
      21<\/td>mod_mpm_event<\/td>php-intl<\/td><\/tr>
      22<\/td>mod_proxy<\/td>php-ioncube<\/td><\/tr>
      23<\/td>mod_proxy_fcgi<\/td>php-litespeed<\/td><\/tr>
      24<\/td>mod_proxy_http<\/td>php-mbstring<\/td><\/tr>
      25<\/td>mod_proxy_wstunnel<\/td>php-mcrypt<\/td><\/tr>
      26<\/td>mod_remoteip<\/td>php-mysqlnd<\/td><\/tr>
      27<\/td>mod_reqtimeout<\/td>php-odbc<\/td><\/tr>
      28<\/td>mod_security2<\/td>php-pdo<\/td><\/tr>
      29<\/td>mod_speling<\/td>php-phalcon<\/td><\/tr>
      30<\/td>mod_ssl<\/td>php-posix<\/td><\/tr>
      31<\/td>mod_substitute<\/td>php-soap<\/td><\/tr>
      32<\/td>mod_suexec<\/td>php-sockets<\/td><\/tr>
      33<\/td>mod_unique_id<\/td>php-sourceguardian<\/td><\/tr>
      34<\/td>mod_version<\/td>php-suhosin<\/td><\/tr>
      35<\/td>mod_vhost_alias<\/td>php-tidy<\/td><\/tr>
      36<\/td>Tools<\/td>php-xml<\/td><\/tr>
      37<\/td><\/td>php-zendguard<\/td><\/tr>
      38<\/td><\/td>php-zip<\/td><\/tr>
      39<\/td><\/td>runtime<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

      Vi\u1ec7c ng\u0103n ch\u1eb7n th\u1ef1c thi m\u1ed9t s\u1ed1 h\u00e0m PHP kh\u00f4ng ph\u1ea3i l\u00e0 gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt duy nh\u1ea5t. C\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n web c\u0169ng c\u1ea7n ph\u1ea3i th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt kh\u00e1c, ch\u1eb3ng h\u1ea1n nh\u01b0:<\/p>\n\n\n\n

        \n
      • S\u1eed d\u1ee5ng m\u00e3 ngu\u1ed3n an to\u00e0n<\/li>\n\n\n\n
      • X\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng<\/li>\n\n\n\n
      • C\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m th\u01b0\u1eddng xuy\u00ean<\/li>\n<\/ul>\n\n\n\n

        Vi\u1ec7c th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt n\u00e0y s\u1ebd gi\u00fap gi\u1ea3m thi\u1ec3u nguy c\u01a1 t\u1ea5n c\u00f4ng t\u1eeb tin t\u1eb7c.<\/p>\n","protected":false},"excerpt":{"rendered":"

        Ng\u00f4n ng\u1eef l\u1eadp tr\u00ecnh PHP cung c\u1ea5p m\u1ed9t th\u01b0 vi\u1ec7n h\u00e0m phong ph\u00fa, cho ph\u00e9p…<\/p>\n","protected":false},"author":3,"featured_media":27003,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[224],"tags":[70],"class_list":["post-27002","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-php-secure"],"_links":{"self":[{"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/posts\/27002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/comments?post=27002"}],"version-history":[{"count":0,"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/posts\/27002\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/media\/27003"}],"wp:attachment":[{"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/media?parent=27002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/categories?post=27002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/doc.bnix.vn\/wp-json\/wp\/v2\/tags?post=27002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}