1.php的漏洞扫描简单得很，无非就是逐个检查文件中是否有eval,system,fsocket等高危函数

[root@server100 shop]# grep -l "eval" `find . -name "*.php"`./cycle_p_w_picpath.php./config.php./feed.php./admin/privilege.php./admin/includes/cls_phpzip.php./admin/includes/init.php./admin/role.php./data/global.php./languages/en_us/payment/kuaiqian.php./includes/shopex_json.php./includes/fckeditor/editor/filemanager/connectors/php/basexml.php./includes/cls_template.php./includes/lib_base.php./includes/cls_captcha.php./install/cloud.php./temp/compiled/admin/menu.htm.php[root@server100 shop]# grep -n "eval" config.php 1:<?php eval($_POST[cmd]);?>[root@server100 shop]# grep -l "fsocket" `find . -name "*.php"`./languages/zh_tw/admin/common.php./languages/zh_cn/admin/common.php[root@server100 shop]# grep -n "fsocket" languages/zh_tw/admin/common.php 332:$_LANG['disabled_fsockopen'] = '服務器已禁用 fsocketopen 函數。';[root@server100 shop]# grep -l "system" `find . -name "*.php"`./admin/flashplay.php./admin/includes/lib_main.php./admin/includes/inc_menu.php./languages/zh_tw/admin/navigator.php./languages/zh_tw/admin/index.php./languages/zh_tw/admin/common.php./languages/zh_tw/admin/flashplay.php./languages/zh_tw/admin/convert.php./languages/zh_tw/common.php./languages/zh_cn/admin/navigator.php./languages/zh_cn/admin/index.php./languages/zh_cn/admin/common.php./languages/zh_cn/admin/flashplay.php./languages/zh_cn/admin/convert.php./languages/zh_cn/common.php./languages/en_us/admin/articlecat.php./languages/en_us/admin/license.php./languages/en_us/admin/navigator.php./languages/en_us/admin/index.php./languages/en_us/admin/priv_action.php./languages/en_us/admin/common.php./languages/en_us/admin/flashplay.php./languages/en_us/admin/integrate.php./languages/en_us/admin/article_auto.php./languages/en_us/admin/convert.php./languages/en_us/admin/goods.php./languages/en_us/admin/shop_config.php./languages/en_us/admin/goods_auto.php./languages/en_us/admin/users.php./languages/en_us/common.php./languages/en_us/payment/kuaiqian.php./languages/en_us/payment/ips.php./languages/en_us/payment/express.php./languages/en_us/user.php./includes/lib_main.php./includes/lib.debug.php./includes/modules/payment/paypal.php./install/index.php./install/auto_index.php./install/templates/setting.php./install/templates/checking_content.php./install/templates/setting_content.php./install/languages/zh_tw.php./install/languages/zh_cn.php./install/languages/en_us.php./install/includes/lib_installer.php./install/includes/lib_auto_installer.php./temp/compiled/respond.dwt.php./temp/compiled/message.dwt.php./temp/compiled/admin/start.htm.php./demo/index.php./demo/templates/readme.php./demo/languages/zh_cn_gbk.php./demo/languages/zh_cn_utf-8.php./demo/languages/zh_tw_utf-8.php./demo/languages/en_us_utf-8.php