<a href="http://www.php.net/ChangeLog-5.php#5.2.0">http://www.php.net/ChangeLog-5.php#5.2.0</a>
<br />Added allow_url_include ini directive to complement allow_url_fopen. (Rasmus) <br /><br />也就是说，远程包含文件漏洞，或者是后门，变的很难奏效了。<br />不过同样有两种方式绕过。<br /><br />一个......
终于拿到完整的dezender.c，晚上有的研究了，log之。
转exp之
<?php
print_r('
---------------------------------------------------------------------------
Discuz! 5.0.0 GBK SQL injection / admin credentials disclosure exploit
by rgod rgod@autistici.org
site: http://retrogod.altervista.org
dorks: "powered by discuz! 5.0.0
"powered b......
