Code Audit of File operations

0x00 General description

Including: unauthorized access, file upload, file inclusion, file download, file deletion, vulnerability protection and other tips

0x01 file ultra vires and upload search tips

1. Unauthorized access

1.1 Files with headers not introduced like global.php or common.php are highly likely to be accessed by unauthorized

1.2 Search tips: Find php files that do not contain "common.php" strings under etc

Find/etc-name "*.php" | Xargs grep =l "common.php"

Other Command reference: http://sundful.iteye.com/blog/1730385

1.3 Cases

wooyun-2010-098084

Last-update

Code Audit of File operations