\u4e07\u7ef4\u7f51\u7684\u56db\u5927\u6838\u5fc3\u6784\u6210\u5305\u62ec\u8d85\u6587\u672c\u4f20\u8f93\u534f\u8bae（HTTP）\u3001\u8d85\u6587\u672c\u6807\u8bb0\u8bed\u8a00（HTML）\u3001\u7edf\u4e00\u8d44\u6e90\u5b9a\u4f4d\u7b26（URL）\u548c\u8d85\u94fe\u63a5（Hyperlink）\u3002\u8fd9\u4e9b\u6280\u672f\u5171\u540c\u652f\u6491\u4e86\u73b0\u4ee3\u4e92\u8054\u7f51\u7684\u57fa\u7840\u67b6\u6784\u3002<\/p>\n
HTTP\u662f\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u4e4b\u95f4\u901a\u4fe1\u7684\u57fa\u7840\u534f\u8bae，\u7528\u4e8e\u4f20\u8f93\u8d85\u6587\u672c\u6570\u636e\u3002\u5b83\u5b9a\u4e49\u4e86\u8bf7\u6c42\u548c\u54cd\u5e94\u7684\u683c\u5f0f，\u652f\u6301GET\u3001POST\u7b49\u65b9\u6cd5\u6765\u83b7\u53d6\u6216\u63d0\u4ea4\u8d44\u6e90\u3002HTTP\u662f\u65e0\u72b6\u6001\u7684，\u4f46\u901a\u8fc7Cookie\u7b49\u6280\u672f\u53ef\u4ee5\u5b9e\u73b0\u4f1a\u8bdd\u7ba1\u7406\u3002<\/p>\n
HTML\u662f\u7528\u4e8e\u521b\u5efa\u548c\u8bbe\u8ba1\u7f51\u9875\u7684\u6807\u51c6\u6807\u8bb0\u8bed\u8a00\u3002\u5b83\u901a\u8fc7\u6807\u7b7e\u5b9a\u4e49\u7f51\u9875\u7684\u7ed3\u6784\u548c\u5185\u5bb9，\u5982\u6807\u9898\u3001\u6bb5\u843d\u3001\u56fe\u50cf\u548c\u94fe\u63a5\u3002HTML5\u5f15\u5165\u4e86\u66f4\u591a\u8bed\u4e49\u5316\u6807\u7b7e\u548c\u591a\u5a92\u4f53\u652f\u6301，\u589e\u5f3a\u4e86\u7f51\u9875\u7684\u8868\u73b0\u529b\u548c\u4ea4\u4e92\u6027\u3002<\/p>\n
URL\u662f\u7528\u4e8e\u6807\u8bc6\u4e92\u8054\u7f51\u4e0a\u8d44\u6e90\u4f4d\u7f6e\u7684\u5b57\u7b26\u4e32\u3002\u5b83\u7531\u534f\u8bae\u3001\u57df\u540d\u3001\u8def\u5f84\u548c\u67e5\u8be2\u53c2\u6570\u7b49\u90e8\u5206\u7ec4\u6210\u3002\u4f8b\u5982，https:\/\/example.com\/path?query=value\u3002URL\u786e\u4fdd\u7528\u6237\u548c\u7a0b\u5e8f\u80fd\u591f\u51c6\u786e\u8bbf\u95ee\u7279\u5b9a\u7684\u7f51\u7edc\u8d44\u6e90\u3002<\/p>\n
\u8d85\u94fe\u63a5\u662f\u8fde\u63a5\u4e0d\u540c\u7f51\u9875\u6216\u8d44\u6e90\u7684\u6865\u6881，\u901a\u5e38\u4ee5\u53ef\u70b9\u51fb\u7684\u6587\u672c\u6216\u56fe\u50cf\u5f62\u5f0f\u5448\u73b0\u3002\u5b83\u901a\u8fc7HTML\u7684<a>\u6807\u7b7e\u5b9e\u73b0，\u6307\u5411\u53e6\u4e00\u4e2aURL\u3002\u8d85\u94fe\u63a5\u662f\u4e07\u7ef4\u7f51\u201c\u7f51\u72b6\u201d\u7ed3\u6784\u7684\u6838\u5fc3，\u5b9e\u73b0\u4e86\u4fe1\u606f\u7684\u4e92\u8054\u4e92\u901a\u3002<\/p>\n
\u8fd9\u4e9b\u6280\u672f\u5171\u540c\u6784\u6210\u4e86\u4e07\u7ef4\u7f51\u7684\u57fa\u7840，\u4f7f\u5f97\u4fe1\u606f\u7684\u53d1\u5e03\u3001\u68c0\u7d22\u548c\u5171\u4eab\u6210\u4e3a\u53ef\u80fd\u3002<\/p>\n
Web\u670d\u52a1\u5668\u662f\u4e00\u79cd\u8f6f\u4ef6\u6216\u786c\u4ef6\u7cfb\u7edf，\u8d1f\u8d23\u5904\u7406\u5ba2\u6237\u7aef（\u5982\u6d4f\u89c8\u5668）\u7684HTTP\u8bf7\u6c42，\u5e76\u8fd4\u56de\u54cd\u5e94（\u5982HTML\u9875\u9762\u3001\u56fe\u50cf\u6216\u6570\u636e）\u3002\u5e38\u89c1\u7684Web\u670d\u52a1\u5668\u8f6f\u4ef6\u5305\u62ecApache\u3001Nginx\u3001IIS\u7b49\u3002<\/p>\n
Apache<\/p>\n
Nginx<\/p>\n
Microsoft IIS<\/p>\n
Web\u8bbf\u95ee\u6d41\u7a0b\u63cf\u8ff0\u4e86\u4ece\u7528\u6237\u5728\u6d4f\u89c8\u5668\u8f93\u5165URL\u5230\u9875\u9762\u52a0\u8f7d\u5b8c\u6210\u7684\u5b8c\u6574\u8fc7\u7a0b，\u6d89\u53caDNS\u89e3\u6790\u3001TCP\u8fde\u63a5\u3001HTTP\u8bf7\u6c42\u4e0e\u54cd\u5e94\u3001\u9875\u9762\u6e32\u67d3\u7b49\u5173\u952e\u6b65\u9aa4\u3002<\/p>\n
\u7528\u6237\u5728\u6d4f\u89c8\u5668\u8f93\u5165URL\u540e，\u7cfb\u7edf\u9996\u5148\u901a\u8fc7DNS（\u57df\u540d\u7cfb\u7edf）\u5c06\u57df\u540d\u8f6c\u6362\u4e3a\u5bf9\u5e94\u7684IP\u5730\u5740\u3002DNS\u67e5\u8be2\u9075\u5faa\u9012\u5f52\u6216\u8fed\u4ee3\u65b9\u5f0f，\u4f9d\u6b21\u68c0\u67e5\u6d4f\u89c8\u5668\u7f13\u5b58\u3001\u64cd\u4f5c\u7cfb\u7edf\u7f13\u5b58\u3001\u8def\u7531\u5668\u7f13\u5b58\u3001ISP DNS\u670d\u52a1\u5668，\u76f4\u81f3\u6839\u57df\u540d\u670d\u52a1\u5668\u3002<\/p>\n
\u83b7\u53d6\u76ee\u6807\u670d\u52a1\u5668IP\u540e，\u5ba2\u6237\u7aef\u901a\u8fc7TCP\u4e09\u6b21\u63e1\u624b\u4e0e\u670d\u52a1\u5668\u5efa\u7acb\u8fde\u63a5\u3002\u6b65\u9aa4\u5982\u4e0b：<\/p>\n
\u82e5\u542f\u7528HTTPS，\u8fd8\u9700\u8fdb\u884cTLS\u63e1\u624b\u534f\u5546\u52a0\u5bc6\u534f\u8bae\u3002<\/p>\n
TCP\u8fde\u63a5\u5efa\u7acb\u540e，\u6d4f\u89c8\u5668\u6784\u9020HTTP\u8bf7\u6c42\u62a5\u6587，\u5305\u542b\u8bf7\u6c42\u65b9\u6cd5（\u5982GET\/POST）\u3001\u8bf7\u6c42\u5934（\u5982User-Agent\u3001Accept）\u3001\u8bf7\u6c42\u4f53（\u5982POST\u6570\u636e）\u3002\u793a\u4f8bGET\u8bf7\u6c42：<\/p>\n
GET \/index.html HTTP\/1.1
\nHost: example.com
\nUser-Agent: Mozilla\/5.0<\/p>\n
\u670d\u52a1\u5668\u63a5\u6536\u8bf7\u6c42\u540e，\u6839\u636e\u8def\u5f84\u548c\u53c2\u6570\u5904\u7406\u8bf7\u6c42，\u53ef\u80fd\u6d89\u53ca\u540e\u7aef\u7a0b\u5e8f（\u5982PHP\u3001Node.js）\u6216\u9759\u6001\u6587\u4ef6\u76f4\u63a5\u8fd4\u56de\u3002\u54cd\u5e94\u5305\u62ec\u72b6\u6001\u7801（\u5982200 OK）\u3001\u54cd\u5e94\u5934（\u5982Content-Type）\u548c\u54cd\u5e94\u4f53（\u5982HTML\u5185\u5bb9）\u3002<\/p>\n
\u6d4f\u89c8\u5668\u89e3\u6790\u54cd\u5e94\u5185\u5bb9，\u9010\u6b65\u52a0\u8f7dHTML\u3001CSS\u3001JavaScript\u53ca\u56fe\u7247\u7b49\u8d44\u6e90：<\/p>\n
\u9875\u9762\u52a0\u8f7d\u5b8c\u6210\u540e，TCP\u8fde\u63a5\u901a\u8fc7\u56db\u6b21\u6325\u624b\u91ca\u653e：<\/p>\n
\u5e38\u89c1\u6f0f\u6d1e\u7c7b\u578b<\/p>\n
\u68c0\u6d4b\u4e0e\u4fee\u590d\u65b9\u6cd5<\/p>\n
\u5b89\u5168\u52a0\u56fa\u5b9e\u8df5<\/p>\n
\u4ee3\u7801\u793a\u4f8b（\u9632\u62a4SQL\u6ce8\u5165）<\/p>\n
# \u4f7f\u7528\u53c2\u6570\u5316\u67e5\u8be2（Python\u793a\u4f8b）
\nimport sqlite3
\nconn = sqlite3.connect('example.db')
\ncursor = conn.cursor()
\nuser_input = "admin' OR 1=1–"
\ncursor.execute("SELECT * FROM users WHERE username=?", (user_input,)) # \u5b89\u5168<\/p>\n
\u6570\u5b66\u516c\u5f0f（DoS\u653b\u51fb\u6a21\u578b）
\n\u653b\u51fb\u6d41\u91cf\u9608\u503c\u8ba1\u7b97：
\n$$
\nT_{attack} = \\\\frac{C_{server}}{R_{request}}
\n$$
\n\u5176\u4e2d，(C_{server})\u4e3a\u670d\u52a1\u5668\u627f\u8f7d\u80fd\u529b，(R_{request})\u4e3a\u5355\u8bf7\u6c42\u8d44\u6e90\u6d88\u8017\u3002<\/p>\n
\u00a0\n<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e07\u7ef4\u7f51（Web）\u7684\u56db\u5927\u6838\u5fc3\u6784\u6210\u4e07\u7ef4\u7f51\u7684\u56db\u5927\u6838\u5fc3\u6784\u6210\u5305\u62ec\u8d85\u6587\u672c\u4f20\u8f93\u534f\u8bae（HTTP）\u3001\u8d85\u6587\u672c\u6807\u8bb0\u8bed\u8a00（HTML）\u3001\u7edf\u4e00\u8d44\u6e90\u5b9a\u4f4d\u7b26（URL）\u548c\u8d85\u94fe\u63a5（Hyperlink）\u3002\u8fd9\u4e9b\u6280\u672f\u5171\u540c\u652f\u6491\u4e86\u73b0\u4ee3\u4e92\u8054\u7f51\u7684\u57fa\u7840\u67b6\u6784\u3002\u8d85\u6587\u672c\u4f20\u8f93\u534f\u8bae（HTTP）HTTP\u662f\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u4e4b\u95f4\u901a\u4fe1\u7684\u57fa\u7840\u534f\u8bae，\u7528\u4e8e\u4f20\u8f93\u8d85\u6587\u672c\u6570\u636e\u3002\u5b83<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[87],"topic":[],"class_list":["post-71696","post","type-post","status-publish","format-standard","hentry","category-server","tag-87"],"yoast_head":"\n