利用zip(或者phar)协议进行本地文件包含

$include_file=$_GET[include_file]; if ( isset( $include_file ) && strtolower( substr( $include_file, -4 ) ) == ".php" ) { require( $include_file ); }php 1.php->phpinfo()->.zip->zip://xxx/xxx/.zip%231.

>>阅读原文<<