PHP memory horse detection method and device

Embodiments of the invention relate to a PHP memory horse detection method and apparatus. The method comprises the steps of starting a PHP process in response to a PHP file; hooking a first function and a second function in the PHP file by adopting a hook function; aiming at an execution request of...

Full description

Saved in:
Bibliographic Details
Main Authors YANG YUHUI, YAO JIWEI, BAO CHUNJIE
Format Patent
LanguageChinese
English
Published 07.03.2023
Subjects
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
Online AccessGet full text

Cover

More Information
Summary:Embodiments of the invention relate to a PHP memory horse detection method and apparatus. The method comprises the steps of starting a PHP process in response to a PHP file; hooking a first function and a second function in the PHP file by adopting a hook function; aiming at an execution request of a first function, if a parameter value of program execution time in the execution request is set to be 0, judging that the PHP file meets a first judgment condition; for an execution request of a second function, if a parameter value of a file deletion operation in the execution request is set as the PHP file, judging that the PHP file meets a second judgment condition; and judging the PHP file which simultaneously meets the first judgment condition and the second judgment condition as a memory horse file. According to the technical scheme provided by the embodiment of the invention, the currently executed PHP file is monitored in a hooking manner to perform operations such as file deletion and execution time setti
Bibliography:Application Number: CN202211419861