Webweb100 查看源码，发现extract函数，提交覆盖 SDPC ==>aaaaa<br>password ==>sdpcsdpcsdpc<br><!-- if ($_SERVER["REQUEST_METHOD"] == "POST") {?> extract($_POST); if ($SDPC == $password) { echo $key; -->     阅读全文