Based on this previous question, it seems like the difference between directory traversal and file inclusion is as follows:
- Improper validation of user input leads to read access of server resource.
- Improper validation of user input leads to the loading of an external resource into the server and execution therein.
This link, however, describes these concepts using the words local file inclusion and remote file inclusion.
So, is the first example
- directory traversal vs. file inclusion
the same as the second example
- local file inclusion vs. remote file inclusion
i.e. LFI/RFI is just different terminology for the same thing?