From b988dbde64a719fca089bc9b7057e3b0cff466f7 Mon Sep 17 00:00:00 2001
From: 13m0n4de <136407746+13m0n4de@users.noreply.github.com>
Date: Thu, 5 Sep 2024 18:13:02 +0800
Subject: [PATCH] =?UTF-8?q?feat(web/param):=20=E6=B7=BB=E5=8A=A0=E9=A2=98?=
 =?UTF-8?q?=E7=9B=AE=E4=BF=A1=E6=81=AF=E3=80=81=E6=9E=84=E5=BB=BA=E6=96=87?=
 =?UTF-8?q?=E4=BB=B6=E5=92=8C=E5=B7=A5=E4=BD=9C=E6=B5=81=E6=96=87=E4=BB=B6?=
 =?UTF-8?q?=20(#4)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(web/param): 添加题目信息和构建文件

* ci(web/param): 添加工作流文件
---
 .github/workflows/web.param.yml           | 50 +++++++++++++++++++++++
 challenges/web/param/README.md            | 16 ++++++++
 challenges/web/param/build/html/index.php | 19 +++++++++
 3 files changed, 85 insertions(+)
 create mode 100644 .github/workflows/web.param.yml
 create mode 100644 challenges/web/param/README.md
 create mode 100644 challenges/web/param/build/html/index.php

diff --git a/.github/workflows/web.param.yml b/.github/workflows/web.param.yml
new file mode 100644
index 0000000..541b96b
--- /dev/null
+++ b/.github/workflows/web.param.yml
@@ -0,0 +1,50 @@
+name: Challenge Param 
+
+on:
+  push:
+    branches: ["main"]
+    paths:
+      - "!**/README.md"
+      - "challenges/web/param/build/**"
+  workflow_dispatch:
+
+env:
+  TYPE: web
+  NAME: param
+  REGISTRY: ghcr.io
+
+jobs:
+  challenge-build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository }}/${{ env.NAME }}
+          tags: |
+            latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v4
+        with:
+          context: challenges/${{ env.TYPE }}/${{ env.NAME }}/build
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          push: true
diff --git a/challenges/web/param/README.md b/challenges/web/param/README.md
new file mode 100644
index 0000000..e068034
--- /dev/null
+++ b/challenges/web/param/README.md
@@ -0,0 +1,16 @@
+# Param
+
+- 作者：-
+- 参考：-
+- 难度：Baby
+- 分类：Web
+- 镜像：-
+- 端口：-
+
+## 题目描述
+
+<description>
+
+## 题目解析
+
+<analysis>
diff --git a/challenges/web/param/build/html/index.php b/challenges/web/param/build/html/index.php
new file mode 100644
index 0000000..c5fc2f9
--- /dev/null
+++ b/challenges/web/param/build/html/index.php
@@ -0,0 +1,19 @@
+<?php
+
+$getParam = $_GET['svu'];
+$postParam = $_POST['ctf'];
+
+if (isset($getParam) && isset($postParam)) {
+    if ($getParam === "a") {
+        echo ("POST 方式上传参数 ctf，值为 b");
+        if ($postParam === "b") {
+            echo file_get_contents("/flag");
+        } else {
+            echo ("POST 参数错误!");
+        }
+    } else {
+        echo ("GET 参数错误!");
+    }
+} else {
+    echo ("GET 方式上传参数 svu，值为 a");
+}