前言
打开靶机

还以为靶机坏了,结果是需要POST
<?php
error_reporting(0);
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
header("HTTP/1.1 405 Method Not Allowed");
exit();
} else {
    if (!isset($_POST['roam1']) || !isset($_POST['roam2'])){
        show_source(__FILE__);
    }
    else if ($_POST['roam1'] !== $_POST['roam2'] && sha1($_POST['roam1']) === sha1($_POST['roam2'])){
        phpinfo();  // collect information from phpinfo!
    }
}题解
签到题,没什么好说的。
roam1[]=1&roam2[]=2搜下flag,结束。
![刷题笔记:[CISCN2019 总决赛 Day1 Web4]Laravel1](/medias/featureimages/53.jpg) 
                        
                        ![刷题笔记:[XNUCA2019Qualifier]EasyPHP](/medias/featureimages/38.jpg)