linda

修改 /etc/php/xxx/php.ini (写在最下面）：
session.upload_progress.enabled = Off
session.upload_progress.cleanup = On
session.use_strict_mode = 1
session.use_only_cookies = 1
session.cookie_httponly = 1
memory_limit = -1
fatal_error_backtraces = 0  ; (Required for PHP 8.5)
post_max_size = 8M
upload_max_filesize = 8M
再重启web服务器，创建phpingo文件，内容是 <?php phpinfo(); ?>， 浏览器查看phpinfo页面内容，主要看三项是否改变:

session.cookie_httponly 改成 Off
session.upload_progress.enabled 改成 Off
session.use_strict_mode 改成 On

参考：
https://v2ex.com/t/1250646?p=2
https://jackalsyn.com/posts/php-up-2026.html
https://www.php2shell.com/
https://qideng.substack.com/p/php2shell-dissecting-phps-critical
https://github.com/ikow/php2shell-poc
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.php.net/archive/2026.php#2026-10-21-5
https://github.com/php/php-src/tree/PHP-7.4-CVE-2026-109618-109619
https://ubuntu.com/security/CVE-2026-109618
https://github.com/openai/php2shell-checker
https://stock.10jqka.com.cn/20261022/c680950088.shtml
https://www.wiz.io/blog/php2shell-php-rce
https://limitlesshost.net/php2shell-rce-vulnerabilities/
https://lastpass.com/header.php

[ 本帖最后由 linda 于 2026-10-23 22:55 编辑 ]