Shulou(Shulou.com)06/01 Report--

Conditions:

[condition] when allow_url_include = On and PHP > = 5.2.0

[advantage] directly POST php code and execute

[note] must use include tangent execution functions (such as include require) can not use file_get_contents, etc. These functions will not execute functions in data/input.

[opinion] this is actually a way of thinking. When allow_url_include is opened, a sentence uploaded by any webshell can be included remotely.

Php://input

0x007.com/data.php?a=php://input

Post submission: arbitrary php code

Data:

Include $_ GET ['a']

0x007.com/data.php?a=data:text/plain

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.