Webmaster Security

Is possible do a remote callback to php file ?

Submitted by Zendra, , Thread ID: 137256

Thread Closed
Zendra
Member
Level:
0
Reputation:
0
Posts:
146
Likes:
11
Credits:
145
17-07-2019, 11:38 AM
This post was last modified: 17-07-2019, 11:39 AM by Zendra
#1
As i know, php is a server side language, that's would like mean if we don't have a direct access (ftp/ssh...) is not possible read the code into php file. If we try to download a php file remotely, we can only see the HTML code.

My question is:

Is possible (if we know the structure, variables contained on a determinated file) do a remotly call for see the variables and the structure what contains ?

For example, if we have a php file that contain a SQL configuration, is possible do a remotely call for see the configuration ?
[Image: pGgwbhB.jpg]

RE: Is possible do a remote callback to php file ?

lightmaters
Newbie
Level:
0
Reputation:
0
Posts:
12
Likes:
1
Credits:
16
19-11-2019, 01:19 PM
#2
17-07-2019, 11:38 AM
Zendra Wrote:
As i know, php is a server side language, that's would like mean if we don't have a direct access (ftp/ssh...) is not possible read the code into php file. If we try to download a php file remotely, we can only see the HTML code.

My question is:

Is possible (if we know the structure, variables contained on a determinated file) do a remotly call for see the variables and the structure what contains ?

For example, if we have a php file that contain a SQL configuration, is possible do a remotely call for see the configuration ?


Short answer: yes, sometimes

Long answer: When you send a request(GET/POST/etc) to the .php script, the server executes it's code and sends you the result(the .html, json etc). There's this vulnerability called Local File Inclusion, where you are able to read(not execute) files from the server, including the .php ones

RE: Is possible do a remote callback to php file ?

Zendra
Member
Level:
0
Reputation:
0
Posts:
146
Likes:
11
Credits:
145
OP
20-11-2019, 02:57 PM
#3
19-11-2019, 01:19 PM
lightmaters Wrote:
Short answer: yes, sometimes

Long answer: When you send a request(GET/POST/etc) to the .php script, the server executes it's code and sends you the result(the .html, json etc). There's this vulnerability called Local File Inclusion, where you are able to read(not execute) files from the server, including the .php ones
Thank you Sir, i will check it :D
[Image: pGgwbhB.jpg]

RE: Is possible do a remote callback to php file ?

lightmaters
Newbie
Level:
0
Reputation:
0
Posts:
12
Likes:
1
Credits:
16
25-11-2019, 01:53 PM
#4
20-11-2019, 02:57 PM
Zendra Wrote:
Thank you Sir, i will check it :D
Glad to help you! Don't forget to update us on your progress
1

Users browsing this thread: 1 Guest(s)