ãã ãããã®å Žåã§ãããã¹ãŠãããã»ã©çµ¶æçã§ã¯ãªãããšãå€æããå ŽåããããŸãã ãã®èšäºã§ã¯ããããã¯ãæçš¿ã®æ¢èªã¹ããŒã¿ã¹ã®è¡šç€ºãä¿®æ£ããphpBB2ãã©ãŒã©ã ãšã³ãžã³çšã®ããŒã«ã«ã¢ãã€ã³ãäœæããçµéšã«ã€ããŠèª¬æããŸãã ãã®è©Šã¿ã®çµæã¯å®å šã«æ©èœãã補åã§ããããä»ã§ã¯åžžã«äœ¿çšããŠããŸããããã®èšäºãå·çããç®çã¯è£œåã®ãã¬ãŒã³ããŒã·ã§ã³ã§ã¯ãªããåé¡ã解決ããã¢ãããŒãã®èª¬æã§ãã ç§ã¯åãåã£ãããã°ã©ã ã®ã³ãŒããæçš¿ããŸãããã¿ã¹ã¯ã®è©³çŽ°ã®ãããç¹å®ã®ãµã€ãã®ãšã³ãžã³ã®äºåçãªïŒãããŠããªã骚ã®æããïŒæ§æãªãã§ã¯ãããã¯ååã«æ®éçã§ã¯ãªãããã®ãŸãŸäœ¿çšã§ããŸããã ãã£ããããªãããã«ãäºåã«èŠåããããšã«ããŸããã
ãããŠä»ãåé¡æã«é¢ãããã詳现ã«ç€ºããŸãã
3çªç®ã®ããŒãžã§ã³ã¯phpBBã®çŸåšã®ããŒãžã§ã³ã§ãããšé·ãéèããããŠããŸãããã2çªç®ã®ããŒãžã§ã³ã¯ãŸã ã€ã³ã¿ãŒãããäžã§éåžžã«äžè¬çã§ãã ç§ã®ããŒã«ãæŠãããã«èšèšãããŠããphpBB2ã®åŒ±ç¹ã®ãªã¹ãã以äžã«ç€ºããŸãã
- ãã°ã€ã³ãŸãã¯ãã©ãŠã¶ãåèµ·åããåŸãããã³äžå®æééã¢ã¯ãã£ãã«ãªã£ãåŸãæªèªãããã¯ã¯ãã¹ãŠèªåçã«æ¢èªãšããŠããŒã¯ãããŸãã
- ãããã¯ãéããšãéããŠããããŒãžã«é¢ä¿ãªãããããã¯å šäœãèªã¿åãããŸãã
- èªã¿åãã¹ããŒã¿ã¹ã¯ãã·ãªã¢ã«åãããé åãšããŠã¯ãããŒã«ä¿åãããŸãã Cookieã®æ倧ãµã€ãºã¯éåžž4 KBã«å¶éãããŠãããããçŽ140ãããã¯ã®ã¹ããŒã¿ã¹ã®ã¿ãä¿åã§ããŸãã ã¢ã¯ãã£ããªãã©ãŒã©ã ã®å Žåãããã¯ãããããã§ãã
ãã¡ãããåé¡ã«å¯Ÿããæãæ£ãã解決çã¯ãã©ãŒã©ã ãšã³ãžã³ãå€æŽããããšã§ãããå®éã«ã¯ããã¯åžžã«å¯èœãšã¯ã»ã©é ããã®ã§ãã ãããã£ãŠãç§ã¯ãã®åé¡ãèªåã§ãã¯ã©ã€ã¢ã³ãåŽã§è§£æ±ºããããšããããšã«ããŸããã ãã¡ããããµãŒããŒäžã®ããŒã¿ããŒã¹ã«çŽæ¥ã¢ã¯ã»ã¹ããããšãªããå®å šã«çæ³çãªãœãªã¥ãŒã·ã§ã³ã«çåã®äœå°ã¯ãããŸããã å ·äœçã«ã¯ãã»ãšãã©ã®å Žåãæ£ç¢ºã«ïŒããªãã圌ã®ããŒãã®ãã¹ãŠã®ããŒãžã®ãã«ã»ãããããŠã³ããŒãããåæããªãéããããã¯é·ãæéã§ãïŒæ£ããããŒã ããŒãžã«ã¢ã€ã³ã³ã衚瀺ããããã«ç¹å®ã®ãµããã©ãŒã©ã ã§æªèªã®ååš/äžåšã決å®ããããšã¯ã§ããŸããã ããã«ãããããããããã€ãã®éèŠãªæ¹åãéæããããšã¯ããªãå¯èœã§ãã
åèšã¢ãã€ã³ã¢ãŒããã¯ãã£ã¯ä»¥äžã®ãšããã§ãããå被éšè ã®ããã®æåŸã®èšªåã®ã¿ã€ã ã¹ã¿ã³ããæ ŒçŽãããã©ã¹ãã©ãŒã©ã ã®ãã¹ãŠã®ããŒãžãééãããããã·ãµãŒããŒãå®è¡ããŠããããŒã«ã«ããŒã¿ããŒã¹ã«æ ŒçŽãããŠããã¯ã©ã€ã¢ã³ããã·ã³äžã§ãä¿®æ£ã©ãã«ã¯ãå®éã®ç¶æ³ã«å¿ããŠããŒããã¡ãã»ãŒãžãæã£ãŠããŸãããŒã«ã«ããŒã¿ããŒã¹ããååŸããèªã¿åãå€ïŒããã³ãã¡ãããå¿ èŠã«å¿ããŠãã®ããŒã¿ããŒã¹ãæŽæ°ããŸãïŒã
åºæ¬åœ¢åŒãšããŠãã00000000000000ããšãã圢åŒã®è¡ã®ã»ãããæã€ããã¹ããã¡ã€ã«ãéžæããŸããã åè¡ã¯1ã€ã®ãããã¯ãè¡çªå·ïŒãŒãããã«ãŠã³ãïŒ-ãããã¯ã®èå¥åãããã³UNIXæé圢åŒã§ã®æåŸã®èšªåã®ã¿ã€ã ã¹ã¿ã³ãã«å¯Ÿå¿ããè¡ã®ã³ã³ãã³ããšããŠèšé²ãããŸãã ãŒããããã¯ã¯ãªãããããŒãè¡ã¯ç¹å¥ãªæ¹æ³ã§äœ¿çšãããŸãããã©ãŒã©ã å šäœã®æ¥ä»/æå»ãä¿åãããããããã¹ãŠã®ãã©ãŒã©ã ãããã¯ãäžåºŠã«æ¢èªãšããŠããŒã¯ã§ããŸãã ãããã£ãŠãåãããã¯ã«ã€ããŠãæåŸã®èšªåã®ãªã¢ã«ã¿ã€ã ã¯ãäžè¬çãªãã©ãŒã©ã ãšç¹ã«ãã®ãããã¯ã®2ã€ã®å€ã®æ倧å€ãšèŠãªãããŸãã
ãªãç§ã¯ãããã¹ã圢åŒã§åæ¢ããŸãããïŒ ãŸããå¿ èŠã«å¿ããŠããã€ããªãšãã£ã¿ãŒã䜿çšããã«ãšã©ãŒãä¿®æ£ããã®ã«äŸ¿å©ã§ãã 第äºã«ãç§ã®ãããã·ãµãŒããŒã¯ããŒã«ã§æžãããŠããããã€ããªãã¡ã€ã«ãããããã¹ããã¡ã€ã«ã§äœæ¥ããæ¹ã䟿å©ã§ãã ããã¹ãæååããæ°å€ã解æããããšã¯ããªãœãŒã¹ã倧éã«æ¶è²»ããæäœã§ã¯ãªããæååã®é·ããåºå®ãããŠããããããã¡ã€ã«å šäœãè¡ããšã«èªã¿åããã«ãã€ã³ããã¯ã¹ã§ç®çã®ã¬ã³ãŒãã«çŽæ¥ç§»åã§ããŸãã
ãããã·ãµãŒããŒã®å®è£ ã«é¢ããŠã¯ããã®äžã§ããã¹ããæäœããã®ãéåžžã«äŸ¿å©ã§ãããšããçç±ã§ãããŒã«èšèªãéžæãããŸããïŒãããŠãã¡ãããHTMLã®è§£æãéèŠãªéšåã«ãªããŸãïŒã ç§ã®åºæºã§ã¯ãçµæãšããŠåŸãããé床ã¯ããªã蚱容ã§ããããšãå€æããŸããïŒãããã«ãããå¥ã®èšèªã«åãæ¿ããããšã«ããæœåšçãªããã©ãŒãã³ã¹ã®åäžã¯ãåŽåãšæéã®ã³ã¹ãã»ã©éèŠã§ã¯ãªãããã§ãïŒã ãããã·ãµãŒããŒã¯ãã®ããŒãããªãã¹ã³ãããã©ãŠã¶ãŒããèŠæ±ãåä¿¡ãããšãã¿ãŒã²ãããµãŒããŒã«èŠæ±ãéä¿¡ããå¿çãèªã¿åããåä¿¡ããããŒãžã®ã³ã³ãã³ãããã©ãŠã¶ãŒã«éä¿¡ããŸãã ãã®éäžã§ãããŒãžã¯ãã£ã«ã¿ãŒãééãããã®åäœã¯å®å ã¢ãã¬ã¹ã«äŸåããŸãã ããã¯æã ãå¿ èŠãšãããã©ãŒã©ã ã®äžã€ã§ãããviewtopic.phpã¹ã¯ãªãã ãviewforum.phpãindex.phpã® ïŒãŸãã¯ãã©ãŒã©ã ã®ã¡ããã©ã«ãŒãURLïŒã®äžã€ã§ã¯ãªããäœã§ãããå Žåããã£ã«ã¿ã¯ãæ¥ä»ã«åºã¥ããŠãã©ãã«ãã¡ãã»ãŒãžã亀æããããŒãžã解æããããã«éå§ããŸã/ããŒã«ã«ããŒã¿ããŒã¹ããååŸããæåŸã®èšªåã®æéã ããã§ãªãå Žåããã£ã«ã¿ãŒã¯æ©èœãããå€æŽãããŠããªãã³ã³ãã³ãããã©ãŠã¶ãŒã«éä¿¡ããŸãã
æãå°é£ã§äºæž¬äžå¯èœãªéšåã¯è§£æã§ãã åé¡ã¯ãç¹å®ã®ãã©ãŒã©ã ããšã«ç°ãªãããŒããšæ¡åŒµæ©èœãã€ã³ã¹ããŒã«ã§ããããããµãŒããŒããåä¿¡ããããŒãžã®HTMLã³ãŒããéåžžã«åºãç¯å²ã§å€åããããšã§ãã ããŸããŸãªãã©ãŒã©ã ã®æ©èœãèæ ®ããããã«ãphpBB2ãšã³ãžã³ã®äž»èŠãªæ§é çæ©èœã®ã¿ãããŒãã³ãŒãã£ã³ã°ããèµ·åæã«ãããã·ãµãŒããŒã«ãã£ãŠèªã¿èŸŒãŸããåå¥ã®ã¢ãžã¥ãŒã«ã«ç¹å®ã®ä¿¡å·ç·ãé 眮ããåãã©ãŒã©ã ãç¬èªã®ã«ãŒã«ã»ããã«åŸã£ãŠåŠçã§ããããã«ããŸããã ãã¡ãããæ°ãããã©ãŒã©ã ã®ãµããŒããè¿œå ããå¿ èŠãããå Žåã¯ããµãŒããŒããåä¿¡ããHTMLããŒãžãåæããŠãä¿¡å·ç·ã®åŒ·èª¿è¡šç€ºãšèšå®ã®ãã¹ãŠã®äœæ¥ãæåã§è¡ãå¿ èŠããããŸãã ãšã³ãžã³ã®å€æŽãå°ããå Žåããã¹ãŠãããã«å¶éãããŸãã ãããããšã³ãžã³ãå€§å¹ ã«åèšèšãããHTMLæ§é ãå®å šã«ç°ãªã£ãŠããããšãå€æããå ŽåããããŸãã ãã®åŸãã¡ã€ã³ã¢ãžã¥ãŒã«å šäœãããçŽãå¿ èŠããããŸãããäžè¬ã«ããã«ããã©ãŒã©ã ããç¶æã§ãããšããã®ã¯äºå®ã§ã¯ãããŸããã ãããã·ãµãŒããŒã®å¥ã®ããŒãžã§ã³ãä¿æããæ¹ãç°¡åã§ããå¯èœæ§ããããŸããããã¯ãããã¡ã³ã·ãŒããã©ãŒã©ã ã®1ã€ã«ç¹åãããã®ã§ãã
解æãæ£ããæ©èœããããã«ã¯ããã©ãŒã©ã ã®ãããã¡ã€ã«ãå€æŽããå¿ èŠããããŸãã äºå®ãããã©ã«ãã§ã¯ããšã³ãžã³ã¯ç§ãæå®ããã«ã¡ãã»ãŒãžã®æ¥ä»/æå»ã衚瀺ããŸããããã以äžæéããããå ŽæããªããããããŒã¯ãé 眮ããéã®ãšã©ãŒã¯1åã«ãªããŸãããããã¯ãã¡ããå€ãããŸãã ãããã£ãŠããããã¡ã€ã«[èšå®]ã§ããå®å šãªæé圢åŒãç§åäœã§éžæããå¿ èŠããããŸãã ãD dmYãGïŒiïŒsããšãã圢åŒã«æ±ºããŸãããããã«ããããMon 02/14/2011ã10:57:44ãã®åœ¢åŒã§æ¥ä»ã衚瀺ã§ããŸãïŒãã¡ããããããã·ãµãŒããŒã¯ææ¥ãå¿ èŠãšããŸããããæãã人ã«ãšã£ãŠã䟿å©ã§ãå¿ããªãã§ãã ããïŒã å¥ã®åœ¢åŒã䜿çšããå Žåã¯ãã¿ã€ã ã¹ã¿ã³ãã®è§£ææ©èœãé©åã«ä¿®æ£ããå¿ èŠããããŸãã æ¥ä»ã®ä»£ããã«ãä»æ¥ããŸãã¯ãæšæ¥ããšããåèªãæ¿å ¥ã§ããphpBBã®å€æŽãå¿ããŠã¯ãªããŸããã æ®å¿µãªãããããã«ã¯ã³ãŒãã®æ¹è¯ãå¿ èŠã§ãã
ãŸããããã€ãã®ããå€ãã®æ©èœãèšåããã®ãæ®ããŸããã
- ããããäž»ãªåé¡ã¯ããã®ãããªãããã·ãµãŒããŒãç¶ç¶çã«äœ¿çšããããšã¯éåžžã«äžäŸ¿ã§ããããšã§ãã åäžã®ãã©ãŒã©ã ã§äœæ¥ããŠãããšãã«ãã¬ãŒãã³ã°äœæ¥ãçãæ®ãããšãã§ããã°ãæ¥åžžäœæ¥ã§ãã¬ãŒãããããããšã¯éåžžã«äžå¿«ã«ãªããŸãã ç§ã¯ãã®åé¡ã次ã®ããã«èªåã§è§£æ±ºããŸãããProxomitronãåºåçšã«ãã¿ãŒãšããŠé·ãé䜿çšããŠãããããããçš®é¡ã®ã°ããºãè¿œå ããŠããŸãã ç¹ã«ãèŠæ±ãããã¢ãã¬ã¹ã«å¿ããŠç°ãªããããã·ãµãŒããŒã䜿çšããæ©èœããããŸãã ã«ãŒã«ãäœæããã ãã§ãå¿ èŠãªãã©ãŒã©ã ããããã·ãä»ããŠèªã¿èŸŒãŸãïŒå šäœã§ã¯ãªããåŠçãããŠããããŒãžã®ã¿ïŒãä»ã®ãã¹ãŠãçŽæ¥æ©èœããã®ã§ããã®æ¬ ç¹ã¯ç§ã«äžäŸ¿ããåŒãèµ·ãããŸããã Proxomitronã䜿çšããªããŠãŒã¶ãŒã¯ãããã€ãã®ä»£æ¿ãªãã·ã§ã³ãæ¢ããããã©ãŠã¶ã§èªåã§ãããã·ããã°ããæåã§åãæ¿ããæ©èœãèšå®ã§ããŸãïŒãã¡ããããã©ãŠã¶ã«ãã®ãããªæ©äŒãããå ŽåïŒã
- æ¬æ ŒçãªHTTPãµãŒããŒãå®è£ ããããæ¢è£œã®å®è£ ãæ¢ããããªãã£ããããèªåã§äœæããåçŽãªããããããªãéå®ãããããŒãžã§ã³ã«éå®ããŸããïŒgzipå§çž®ã®åŒ·å¶åæã§ã¯HTTP / 1.0ã®ã¿ããµããŒããããŸãïŒã å人çã«ã¯ããã§ååã§ãããäžéšã®äººã«ãšã£ãŠã¯ããããã®æ©äŒã¯ååã«æããªããããããŸããã
- phpBBã«ã¯ãã1ã€åé¡ããããŸãã åæã«è€æ°ã®ãã©ãŒã©ã ããŒãžãéãããæŽæ°ããããããšããšã³ãžã³ã¯ãã©ãŒã©ã ããç§ãè¿œãåºããŸãïŒèªã¿åãã¹ããŒã¿ã¹ã®ãªã»ãããšçžãŸã£ãŠãç§ã¯åã«è ¹ãç«ãŠãŸããïŒã ãã®åäœã®çç±ã¯ãŸã 解æãããŠããŸããããåæã«ãããã·ãµãŒããŒã«ãã£ãŠãã®åé¡ãåé¿ããããšãã§ããŸããã æåã¯ãã«ãã¹ã¬ããåãããŠãããããããããŒãžã®åŠçã§ä»ã®ããŒãžã®åŠçãé ããªãããšã¯ãããŸããã§ããã ãã«ãã¹ã¬ããã®ã³ãŒããã³ã¡ã³ãã¢ãŠãããããŒãžåŠçã®é床ã¯é ããªããŸããããããäžè²«ãããã®ã«ãªã£ãããããã°ã€ã³ããå 容ãã»ãšãã©å¿é ããããšãªããããã«ããã¯ã°ã©ãŠã³ãã¿ãã§å€æ°ã®ãªã³ã¯ãéãããšãã§ããŸãïŒãã¡ãããä»ã§ã¯ããã»ã©èŽåœçã§ã¯ãããŸããããäœåã§ãïŒãã°ã€ã³/ãã¹ã¯ãŒããå ¥åããããæ¢ã«éããŠããããŒãžãæŽæ°ãããããæ°ã¯ãããŸããïŒã ãã¡ããããã®ãããªãœãªã¥ãŒã·ã§ã³ã«ã¯æ¬ ç¹ããããŸããäœããã®çç±ã§ããŒãžã®1ã€ãããªãŒãºããå Žåãæ®ãã®ããŒãžã¯èªã¿èŸŒãŸãããã¿ã€ã ã¢ãŠããåŸ ã€ããããã·ãµãŒããŒãåèµ·åããå¿ èŠããããŸãã ãŸããè€æ°ã®ãã©ãŒã©ã ã§äœæ¥ããå Žåãä»ã®ãã©ãŒã©ã ãããŒãããããã«äžæ¹ãåŸ ã€ããšã¯ééã£ãŠããŸãã 解決çã¯ãåãã©ãŒã©ã ã«1ã€ãã€ãè€æ°ã®ç¬ç«ããã¹ã¬ãããèµ·åããããšããŸãã¯ç°ãªãããŒãã§ãããã·ãµãŒããŒã®è€æ°ã®ã€ã³ã¹ã¿ã³ã¹ãèµ·åããããšã§ãã 念ã®ããããã«ãã¹ã¬ããã³ãŒããåé€ãããåã«ã³ã¡ã³ãã¢ãŠããããããã³ã¡ã³ããå€ããŠãå¿ èŠã«å¿ããŠéåžžã®ãã«ãã¹ã¬ããããŒãžã§ã³ã䜿çšã§ããŸãã
- ãããã·ãµãŒããŒã¯ãããŒã¿ããŒã¹ã®è¡æ°ãç£èŠããå¿ èŠã«å¿ããŠæ°ããè¡ãè¿œå ããæ¹æ³ãç¥ããŸããïŒæ£çŽã«èšããšãå®è£ ããã®ãé¢åã§ããïŒããããã£ãŠãæåã«ãŒãè¡ã§æºãããããã¡ã€ã«ãäœæããå¿ èŠããããŸãã è¡æ°ã¯ãã©ãŒã©ã ïŒããæ£ç¢ºã«ã¯ããã©ãŒã©ã å ã®ãããã¯ã®æ°ïŒã«äŸåããŸãã åé¡ãåé¿ããã«ã¯ãããã«ååãªããŒãžã³ãæã£ãŠãã¡ã€ã«ãäœæããããšããå§ãããŸãã
- ãããã·ãµãŒããŒã§ã¯ãphpBBã¢ãŒããåäžã¡ãã»ãŒãžã®è¡šç€ºãïŒ viewpost.phpã¹ã¯ãªããïŒã®ãµããŒãããããŸãã åäžã®æçš¿ã衚瀺ããå ŽåãããŒã¿ããŒã¹å ã®ãããã¯ã«ã¢ã¯ã»ã¹ããæéã¯æŽæ°ãããŸããã ãã®å Žåã衚瀺ããŠããã¡ãã»ãŒãžã®åã®æªèªã¡ãã»ãŒãžãèŠéãããšã¯ç°¡åã§ãã 誰ãããããééã£ãŠãããšèããå Žåã ifãåé€ããããšã§ã³ãŒããç°¡åã«ä¿®æ£ã§ããŸãã
ããŠã誰ãããã®ãã©ãã«ããã¹ãŠæãããªãã£ãå ŽåããµãŒããŒèªäœã¯ããããããŠã³ããŒãã§ããŸã ïŒã¢ãŒã«ã€ãã5 KbïŒã ãããã«ã¯ãå ¬åŒãã©ãŒã©ã Total Commanderã®äžé£ã®ã«ãŒã«ããããŸããããã¯ãç§ã®å®éšã®åºç€ãšããŠæ¡çšãããã®ã§ãåºæ¬çã«ãã®ãã¹ãŠã®ããã£ã¢ãžãŒãå§ãŸããŸããã