Is possible do a remote callback to php file ?

As i know, php is a server side language, that's would like mean if we don't have a direct access (ftp/ssh...) is not possible read the code into php file. If we try to download a php file remotely, we can only see the HTML code.

My question is:

Is possible (if we know the structure, variables contained on a determinated file) do a remotly call for see the variables and the structure what contains ?

---

For example, if we have a php file that contain a SQL configuration, is possible do a remotely call for see the configuration ?

17-07-2019, 11:38 AM

Zendra Wrote: As i know, php is a server side language, that's would like mean if we don't have a direct access (ftp/ssh...) is not possible read the code into php file. If we try to download a php file remotely, we can only see the HTML code.

My question is:

Is possible (if we know the structure, variables contained on a determinated file) do a remotly call for see the variables and the structure what contains ?

---

For example, if we have a php file that contain a SQL configuration, is possible do a remotely call for see the configuration ?

Short answer: yes, sometimes

Long answer: When you send a request(GET/POST/etc) to the .php script, the server executes it's code and sends you the result(the .html, json etc). There's this vulnerability called Local File Inclusion, where you are able to read(not execute) files from the server, including the .php ones

19-11-2019, 01:19 PM

lightmaters Wrote: Short answer: yes, sometimes

Long answer: When you send a request(GET/POST/etc) to the .php script, the server executes it's code and sends you the result(the .html, json etc). There's this vulnerability called Local File Inclusion, where you are able to read(not execute) files from the server, including the .php ones

Thank you Sir, i will check it :D

20-11-2019, 02:57 PM

Zendra Wrote: Thank you Sir, i will check it :D

Glad to help you! Don't forget to update us on your progress