[wp] 攻防世界 Web_php_include

<?php show_source(__FILE__); echo $_GET['hello']; $page=$_GET['page']; while (strstr($page, "php://")) { $page=str_replace("php://", "", $page); } include($page); ?> strstr是对大小写敏感的,用大写PHP绕过检测 php

>>阅读原文<<