Here is the code:
<?php
$file=trim($_GET['img_name']);
//echo $file;
if (file_exists($file)) {
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename='.basename($file));
header('Content-Transfer-Encoding: binary');
header('Expires: 0');
header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
header('Pragma: public');
header('Content-Length: ' . filesize($file));
ob_clean();
flush();
readfile($file);
exit;
}
?>
Is there any possibility of RCE? I am a web developer and developing a website for my client.
openbase_dir
is not set inphp.ini
. I am not sure why you think an LFI is related to RCE. You only read local files, this by itself will not lead (directly) to RCE.