Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

And if you do find an old php message board, absolutely do not add

  ?topic=../../../../etc/passwd


My first php script was a file upload server for a lan party. Luckily nobody tried to upload a file named ../index.php, because I realized afterwards that it would have worked :p


I've just tried it on mine but nothing fun happened. What is suppose to?


Google / ask AI

Local file inclusion (LFI)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: