Espcms background getshell-1

You can use ../to modify the PHP file other than the template directory to write a sentence. (For the convenience of demonstration, the home page is written and phpinfo is written, and a sentence can be written in a concealed file.) The normal modification is as follows: // 127.0.0.1/espcms/adminsoft/index. php? Archive = templatemain & action = templateedit & dir = .. /& filename = index. php & type = edit & freshid = 0.41100375866517425 & iframename = jerichotabiframe_0 & iframeheightwindow = 617 & iframewidthwindow = 1430 successfully. You can modify the home page and write it to phpinfo to check the home page?
 Solution:

Restrict the file path and filter the special paths that can jump out of the directory. Disable writing php scripts to the template.