gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Delete lvl3.php

Browse Source
This commit is contained in:
Ramazan Emre Erkan 2018-11-27 17:02:29 +03:00 committed by GitHub
parent 40c423a064
commit a3885f141b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
FileInclusion/pages/lvl3.php
View File

@ -1,38 +0,0 @@
<html>
<head>
<meta charset="utf-8">
<title> Level 3 </title>
</head>
<body>
<div align="center"><b><h3>This is Level 3</h3></b></div>
<div align="center">
<a href=lvl3.php?file=1.php><button>Show 1</button></a>
<a href=lvl3.php?file=2.php><button>Show 2</button></a>
</div>
<?php
echo "</br></br>";
if (isset( $_GET[ 'file' ]))
{
$secure3 = $_GET[ 'file' ];
$secure3 = strtolower($secure3); #There is no uppercase in the FileInclusion folder.
$secure3 = str_replace( array( "..", "\\" , "..\\" , ":", "/", "%" ), "", $secure3 );
$secure3 = str_replace( array( "http://" , "https://" ),"", $secure3 );
if (isset($secure3))
{
include($secure3);
}
}
?>
</body>
</html>