https://plumephp.com/tags/business-logic/Recent content in Business Logic on PlumePHPHugozh-CNSun, 27 Sep 2026 14:30:00 +0800https://plumephp.com/security-business-logic-vulnerabilities/Sun, 27 Sep 2026 14:30:00 +0800https://plumephp.com/security-business-logic-vulnerabilities/<h2 id="导语扫描器扫不出来的漏洞">导语：扫描器扫不出来的漏洞</h2> <p>业务逻辑漏洞（Business Logic Vulnerability）有一个共同特征：<strong>代码&quot;技术上没有漏洞&quot;，但业务规则被利用</strong>。价格改到 0.01 也能正常下单、换个 ID 就能看别人的订单、积分越刷越多——扫描器对此完全无能为力，因为它们不懂业务。</p>