18.06.2021, 11:47
|
|
Участник форума
Регистрация: 15.09.2018
Сообщений: 236
С нами:
4033046
Репутация:
212
|
|
К слову(на всякий случай добавлю), не только file_exist.
PHP код:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#FF8000"]// php 7.3
[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]"/etc/../etc/"[/COLOR][COLOR="#007700"];
if([/COLOR][COLOR="#0000BB"]is_dir[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"])){include[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'passwd'[/COLOR][COLOR="#007700"];}[/COLOR][COLOR="#FF8000"]// passwd
[/COLOR][COLOR="#007700"]echo[/COLOR][COLOR="#0000BB"]file_get_contents[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'passwd'[/COLOR][COLOR="#007700"]);[/COLOR][COLOR="#FF8000"]// passwd
[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]"/etc/aaaa/../"[/COLOR][COLOR="#007700"];
if([/COLOR][COLOR="#0000BB"]is_dir[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"])){include[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'passwd'[/COLOR][COLOR="#007700"];}[/COLOR][COLOR="#FF8000"]// nothing
[/COLOR][COLOR="#007700"]echo[/COLOR][COLOR="#0000BB"]file_get_contents[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'passwd'[/COLOR][COLOR="#007700"]);[/COLOR][COLOR="#FF8000"]// passwd
[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]"/etc/../etc/passwd"[/COLOR][COLOR="#007700"];
if([/COLOR][COLOR="#0000BB"]is_file[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"])){include[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"];}[/COLOR][COLOR="#FF8000"]// passwd
[/COLOR][COLOR="#007700"]echo[/COLOR][COLOR="#0000BB"]file_get_contents[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"]);[/COLOR][COLOR="#FF8000"]// passwd
[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]"/etc/aaaa/../passwd"[/COLOR][COLOR="#007700"];
if([/COLOR][COLOR="#0000BB"]is_file[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"])){include[/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"];}[/COLOR][COLOR="#FF8000"]// nothing
[/COLOR][COLOR="#007700"]echo[/COLOR][COLOR="#0000BB"]file_get_contents[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$a[/COLOR][COLOR="#007700"]);[/COLOR][COLOR="#FF8000"]// passwd
[/COLOR][/COLOR]
|
|
|