[wp] 攻防世界 Web_php_include

<?php show_source(__FILE__); echo $_GET['hello']; $page=$_GET['page']; while (strstr($page, "php://")) { $page=str_replace("php://", "", $page); } include($page); ?> strstr是對大小寫敏感的,用大寫PHP繞過檢測 php

>>阅读原文<<