17-07-2019, 11:38 AMZendra Wrote: As i know, php is a server side language, that's would like mean if we don't have a direct access (ftp/ssh...) is not possible read the code into php file. If we try to download a php file remotely, we can only see the HTML code.
My question is:
Is possible (if we know the structure, variables contained on a determinated file) do a remotly call for see the variables and the structure what contains ?
For example, if we have a php file that contain a SQL configuration, is possible do a remotely call for see the configuration ?
Short answer: yes, sometimes
Long answer: When you send a request(GET/POST/etc) to the .php script, the server executes it's code and sends you the result(the .html, json etc). There's this vulnerability called Local File Inclusion, where you are able to read(not execute) files from the server, including the .php ones