php-txt-db-api

Discussion in 'Песочница' started by zifus, 3 Nov 2016.

  1. zifus

    zifus Member

    Joined:
    15 Aug 2015
    Messages:
    83
    Likes Received:
    9
    Reputations:
    0
    Нужна помощь!! Есть c-worker.ch/txtdbapi версия $txtdb_WEBGUI_version = "0.4a";
    В phpinfo
    allow_url_fopen On On
    allow_url_include Off Off
    Кто что посоветует?

    Вот что есть в libs/txtdbapi/stringparser.php
    include_once(API_HOME_DIR . "util.php");
     
    #1 zifus, 3 Nov 2016
    Last edited: 3 Nov 2016
  2. zifus

    zifus Member

    Joined:
    15 Aug 2015
    Messages:
    83
    Likes Received:
    9
    Reputations:
    0
    #2 zifus, 5 Nov 2016
  3. BabaDook

    BabaDook Well-Known Member

    Joined:
    9 May 2015
    Messages:
    1,066
    Likes Received:
    1,565
    Reputations:
    40
    В phpinfo
    allow_url_fopen On On
    allow_url_include Off Off
    RFI вам недоступен будет.
     
    #3 BabaDook, 5 Nov 2016
  4. zifus

    zifus Member

    Joined:
    15 Aug 2015
    Messages:
    83
    Likes Received:
    9
    Reputations:
    0
    PHP Version 5.2.6-1+lenny16
    Вот что в .htaccess
    php_value register_globals on
    Может RFI и не получится, это я и так понял. Но LFI возможно провести?
     
    #4 zifus, 5 Nov 2016
  5. BabaDook

    BabaDook Well-Known Member

    Joined:
    9 May 2015
    Messages:
    1,066
    Likes Received:
    1,565
    Reputations:
    40
    Не вижу причин что бы нельзя было
     
    #5 BabaDook, 5 Nov 2016
(You must log in or sign up to post here.)