bugku——各种绕过

打开题目代码如下?php highlight_file(flag.php); $_GET[id] urldecode($_GET[id]); $flag flag{xxxxxxxxxxxxxxxxxx}; if (isset($_GET[uname]) and isset($_POST[passwd])) { if ($_GET[uname] $_POST[passwd]) print passwd can not be uname.; else if (sha1($_GET[uname]) sha1($_POST[passwd])($_GET[id]margin)) die(Flag: .$flag); else print sorry!; } ?代码很简单大概就是sha1函数绕过和id需要等于margin看到果断构造数组绕过最后的poc如下拿到flag