SSRF Vulnerability Attack and Prevention Based on PHP

摘要

This paper firstly introduced the SSRF and the reason of its formation, and a simple demonstration with PHP codes was made. Then, four attack types of SSRF and their combination with other WEB vulnerabilities were introduced and analyzed. And then, the introduction of two kinds of SSRF preventive measures was made and the general defense flow chart was listed. Web security is an important field of Network Space Security, while SSRF is also one of the top 10 vulnerabilities in web security. So, its analysis is of practical significance.