zhangzhuangtongxue的博客

我们先来看一下dvwa文件包含high级别的代码：<?php // The page we wish to display $file = $_GET[ 'page' ]; // Input validation if( !fnmatch( "file*", $file ) && $file != "include.php" ) { // This isn't the page we