小编Ped*_*iel的帖子

我已经进行了大量搜索,并且不知道为什么Google Play不会让我更新我的Prod应用.他们的错误信息对我来说没有多大意义,实际上我并不理解为什么他们不接受它.

这是错误消息:

This configuration cannot be published for the following reason(s):
It is forbidden to downgrade devices which previously used M permissions (target SDK 23 and above) to APKs which use old style permissions (target SDK 22 and below). This occurs in the change from version 178 (target SDK 23) to version 2008 (target SDK 22).
It is forbidden to downgrade devices which previously used M permissions (target SDK 23 and above) to APKs which use old style permissions …

今天我在尝试使用'lib cURL'时遇到了这个奇怪的错误,我无法找到解决方案,你能帮我搞清楚吗？

<?php
set_time_limit(0);
  class cURL
  {
  var $content;
  var $cookie;
  var $headers = array();
  var $ch;
  var $data;
  var $info;
  var $httpcode;
  var $proxy_ip;
  var $proxy_port;
  var $cookie_f;

  function __construct($cookie = '')
  {
      if (!empty($cookie)) {
          $this->cookie_f = $cookie;
      }
  }

  function setproxy($proxy)
  {
      list($ip, $porta) = explode(":", $proxy);
      $this->proxy_ip = $ip;
      $this->proxy_port = $porta;
  }

  function setcookie($cookie)
  {
      $this->cookie = $cookie;
  }

  function open($type, $url)
  {
      $this->ch = curl_init();
      curl_setopt($this->ch, CURLOPT_URL, $url);      
      curl_setopt($this->ch, CURLOPT_FOLLOWLOCATION, 1);
      curl_setopt($this->ch, CURLOPT_RETURNTRANSFER, 1); …

我已经从这里看到了一些问题(stackoverflow)和这篇帖子,但我仍然有一些问题......

1. 在帖子表单中使用隐藏值,并在帖子到达服务器时检查它.

   • 隐藏的值可以很容易地复制和发送完全像真实的,"难以猜测"(如md5)将无济于事.(对？)

2. 到达表单时设置cookie并将cookie值作为隐藏值发送.

   • 您可以使用相同的真实隐藏值轻松更改cookie值或发送与真实cookie完全相同的自定义cookie.(对？)

3. 使用"超时",POST值无法达到太晚.

   • 所以,如果你很慢,当你试图用隐藏值设置一切时,你将会失败.如果你很快就会工作.(对？)

我希望得到关于CSRF的保护......但我究竟是怎么做到的？