• convert.base64-encode & convert.base64-decode base64 编码 / 解码
  • convert.quoted-printable-encode & convert.quoted-printable-decode 将 quoted-printable 字符串转换为 8-bit 字符串
  • 3、 压缩过滤器:

  • zlib.deflate zlib.inflate
  • bzip2.compress bzip2.decompress
  • 4、 加密过滤器:

  • mcrypt.tripledes和mdecrypt.tripledes等
  • readfile("php://filter/read=string.toupper/resource=http://www.example.com");//将www.example.com中的内容转换为大写后输出
    file_put_contents("php://filter/write=string.rot13/resource=example.txt","Hello World");//将字符串”hello world”经过rot13编码后写入example.txt

    /index.php?a=php://filter/read=convert.base64-encode/resource=index2.php

    index.php:

    <?php
    include($_GET['a']);
    

    结果如图:

     https://www.leavesongs.com/PENETRATION/php-filter-magic.html