Answer the question
In order to leave comments, you need to log in
How to exploit the php_include($_GET['page']) vulnerability?
The site has approximately the following hierarchy of files and folders
index.php
hello.php
папка out
----1.php
----2.php
----3.php
----папка pages
--------11.php
--------22.php
--------33.php
php_include("out/pages/".$_GET['page'].".php")
Answer the question
In order to leave comments, you need to log in
Maybe like this?)
if (filter_var($_GET['page'], FILTER_VALIDATE_INT))
php_include("out/pages/".$_GET['page'].".php");
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question