[PHP][Linux] PHP安全性加強 抵擋 駭客 存取 linux 下的 /etc/password

近日公司部份客戶發現有被hacker 嘗試的 存取 linux 下的 /etc/passowrd 檔，請參照下圖

很明顯的看到是在要取得 password 檔的內容，另外在從MySQL資料庫中也發現到

看到這幾筆資料 , 就覺得有問題了:

| 44 | `cat /etc/passwd`                                                                  | y     |
| 45 | cat /etc/passwd                                                                    | y     |
| 46 | ;cat /etc/passwd;                                                                  | y     |
| 47 | |cat /etc/passwd                                                                   | y     |
| 48 |  cat /etc/passwd                                                                   | y     |
| 49 | <cat /etc/passwd                                                                   | y    |
| 50 | ../../../../../../../../etc/passwd                                                 | y      |
| 51 | ../../../../../../../../etc/passwd                                                 | y      |
| 52 |  ../../../../../../../../etc/passwd                                                | y      |
| 53 | ../../../../../../../../etc/passwd .html                                           | y    |
| 54 | ../../../../../../../../etc/passwd .jpg                                            | y     |
| 55 | .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd                                           | y      |
| 56 | /etc/passwd                                                                        | y      |
| 57 | /./././././././etc/passwd                                                          | y      |
| 58 | ..\..\..\..\..\..\..\..\etc/passwd                                                 | y      |
| 59 | ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd                 | y      |
| 60 | ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd | y      |
| 61 | <../../../../../../../../etc/passwd                                                | y     |