<?php
$file = false;
if(isset($_GET['load'] && is_string($_GET['load'])) {
$tmp = stripclashes($_GET['load']);
$tmp = str_replace(".","",$tmp);
$file = $tmp . '.php';
}
if($file != false && file_exists($file) && is_readable($file)) {
require_once $file;
}
?>
file.php? load = test
PHP, HTML
target = document.getElementById('page');
target.innerHTML = response.responseText;
, , , . , . , , , responseText DIV, XSS. , . , - file_get_contents, . PHP file_get_contents, ... , . ,
<?php
echo file_get_contents("http://www.google.com");
?>
, , ? .
AJAX AJAXs?