Questions tagged [lfi]
The lfi tag has no usage guidance.
0
votes
1answer
70 views
PHP LFI fix with the right file permissions
I'm trying to understand how to perform a LFI (specifically PHP LFI), and there is a aspect of this attack that seems to be never discussed in online articles I read: The injected file permissions.
...
6
votes
3answers
460 views
Can there be a way to exploit PHP include_once() when the input is filtered?
Let's assume there is this code for including other php files from user input (yes, I know it's a bad choice):
$input = addslashes($_GET["input"]);
if (strpos($input, '../') === false) {
...
