Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- _____ _____ _ _____ _____ _____ _____ _____ _____
- ___| | __ |_| _ |_ _|___ ___|_ _| __| _ | |
- |_ -| --| -| | __| | | |- _|___| | | | __| | | | |
- |___|_____|__|__|_|__| |_| |___| |_| |_____|__|__|_|_|_|
- |s C R i P T z - T E A M . i N F O|████████████████████████████
- - iNfO -
- [PHP] Secured file_get_contents (getting local .txt files)
- - NOtIcE -
- Create new file index.php in folder /test/ -->
- <?php
- error_reporting(0);
- if (isset($_GET['page'])) {
- define("CRYPT", "d5a79b55d72652537e9dcc6a4df1ece2");
- $y = $_GET['page'];
- $x = file_get_contents('./pages/' . $y . ".txt");
- if (strstr($x, CRYPT) == TRUE) {
- echo $x;
- } else {
- echo "Failed.";
- }
- }
- ?>
- Create new file test.txt in folder /test/pages/ -->
- <!-- d5a79b55d72652537e9dcc6a4df1ece2 -->
- You can see this!
- Create new file omfgwtf.txt in folder /test/pages/ -->
- You can not see this, since CRYPT CODE is missing.
- Now run -->
- Then run /test/index.php?page=test --> OUTPUT: You can see this!
- Then run /test/index.php?page=omfgwtf --> OUTPUT: Failed. You will not see the content of it!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement