本帖最后由 大鸡鸡 于 2022-5-12 03:19 编辑
用bt编辑了网站配置文件,然后数据库密码就被记录了,哈哈哈哈哈哈哈哈哈哈哈哈 示例:编辑Laravel配置文件 ["****时间***", "****IP***", "POST", "/files?action=SaveFileBody", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36", "{‘data’: ‘APP_NAME=Laravel\nAPP_ENV=local\nAPP_KEY=*******\nAPP_DEBUG=true\nAPP_URL=http://localhost\n\nLOG_CHANNEL=stack\nLOG_DEPRECATIONS_CHANNEL=null\nLOG_LEVEL=debug\n\nDB_CONNECTION=mysql\nDB_HOST=127.0.0.1\nDB_PORT=3306\nDB_DATABASE=*******\nDB_USERNAME=*******\nDB_PASSWORD=*******\n\nBROADCAST_DRIVER=log\nCACHE_DRIVER=file\nFILESYSTEM_DRIVER=local\nQUEUE_CONNECTION=redis\nSESSION_DRIVER=file\nSESSION_LIFETIME=120\n\nMEMCACHED_HOST=127.0.0.1\n\nREDIS_HOST=127.0.0.1\nREDIS_PASSWORD=null\nREDIS_PORT=6379\n\nMAIL_MAILER=smtp\nMAIL_HOST=mailhog\nMAIL_PORT=1025\nMAIL_USERNAME=null\nMAIL_PASSWORD=null\nMAIL_ENCRYPTION=null\nMAIL_FROM_ADDRESS=null\nMAIL_FROM_NAME="${APP_NAME}"\n\nAWS_ACCESS_KEY_ID=\nAWS_SECRET_ACCESS_KEY=\nAWS_DEFAULT_REGION=us-east-1\nAWS_BUCKET=\nAWS_USE_PATH_STYLE_ENDPOINT=false\n\nPUSHER_APP_ID=\nPUSHER_APP_KEY=\nPUSHER_APP_SECRET=\nPUSHER_APP_CLUSTER=mt1\n\nMIX_PUSHER_APP_KEY="${PUSHER_APP_KEY}"\nMIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"\n’, ‘encoding’: ‘utf-8’, ‘path’: ‘/www/wwwroot/*******/.env’}", 8] |
趁早lnmp吧,熟悉命令后面板就是鸡肋。 |
我是不是要重置所有用户的密码?会脱裤吗 |
该用的还是会用吧?
/** |
本帖最后由 xiaohi 于 2022-5-12 03:55 编辑
关系够硬(有行政植发权) |