5.1.5. Security related configuration

5.1.5.1. Function and class restrictions

Can pass``disable_functions`` / disable_classes restrict PHP callable functions and classes.

5.1.5.2. Directory Access Restrictions

The directories accessible to PHP can be open_basedir restricted。

5.1.5.3. Remote Reference Restrictions

Remote file inclusion can be all_url_include restricted , which is disabled by default. Remote files can be opened by allow_url_fopen restricting , which is enabled by default.

5.1.5.4. Session

5.1.5.4.1. Session.Save

The default handler of PHP’s Session is a file, which is stored in session.save_path php.ini . If you have any permission to read and write files, you can modify or read the session. The session location can be obtained from phpinfo.

5.1.5.4.2. Session.Upload

PHP is default enabled by session.upload_progress.enabled, this option will cause the upload progress file to be generated, and its storage path can be obtained in phpinfo.

Then a special message can be constructed and sent to the server, which can be used in the case of LFI.