OpenCart Union Select SQL注入导致PHP崩溃

时间:2018-07-23 05:53:01

标签: php nginx opencart sql-injection

我有使用PHP 5.6的OpenCart 2.0.3.1网站。 Nginx通常会显示错误504,因为PHP已挂断。我检查了Nginx访问日志文件并看到了:

  

GET /index.php?route=product/category&path=69_1121111111111111'UNION SELECT CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51 ,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45),CHAR(45,120,54,45,81,45),CHAR(45,120 ,55,45,81,45),CHAR(45,120,56,45,81,45),CHAR(45,120,57,45,81,45),CHAR(45,120,49,48,45,81,45) ,CHAR(45,120,49,49,45,81,45),CHAR(45,120,49,50,45,81,45),CHAR(45,120,49,51,45,81,45),CHAR(45,120, 49,52,45,81,45),CHAR(45,120,49,53,45,81,45),CHAR(45,120,49,54,45,81,45),CHAR(45,120,49,55,45 ,81,45),CHAR(45,120,49,56,45,81,45),CHAR(45,120,49,57,45,81,45),CHAR(45,120,50,48,45,81,45) ,CHAR(45,120,50,49,45,81,45),CHAR(45,120,50,50,45,81,45),CHAR(45,120,50,51,45,81,45),CHAR(45,120, 50,52,45,81,45),CHAR(45,120,50,53,45,81,45),CHAR(45,120,50,54,45,81,45),CHAR(45,120,50,55,45 ,81,45),CHAR(45,120,50,56,45,81,45),CHAR(45,120,50,57,45,81,45),CHAR(45,120,51,48,45,81,45) -+ HTTP / 1.1

在PHP日志文件上,我看到了:

  

警告:[池www]服务器已达到pm.max_children设置(20),请考虑将其提高

我试图提高pm.max_children设置,但PHP迟早会挂断。仅重新启动PHP服务会有所帮助。如何解决这个问题?也许我可以从Nginx端阻止包含UNION SELECT的请求?

0 个答案:

没有答案