web

ok , lets say that I enter a website which is for example

http://www.example.com/index.php

in this website I found three files

*file1
*file2
*file3

when I click on the first file namely file1 , the website redirects me to another website address which is for example: http://www.example.com/404.php in which is it written 404 page not found.

and the same for the file2 , and file3

normally the page must be http://www.example.com/index.php/file1

because file1 is inside index.php file but the website redirect to http://www.example.com/404.php .

another thing: When I write the address like that :http://www.example.com/index.php/file1 only the color of the page becomes white but it does not change and the file1 does not open . It becomes white because it is vulnerable to some URL exploit
it is clear that it is a security tactic to deny the access of these files (file1 , file2 , file3) to unprivileged users . This process uses .htaccess file redirection .

my question is how to bypass this redirection and access the file1 , file2 , file3 ( in our context of course)???????

what is the method used (in our context , I mean my whole example) to bypass redirection and get the file if , of course, what I write is true , I mean if it is a redirection????????


and between , this is not meant to be hacking or something in the sort , but it is for learning , for educational purpose
Last edited on
It becomes white because it is vulnerable to some URL exploit
it is clear that it is a security tactic to deny the access of these files (file1 , file2 , file3) to unprivileged users .
More likely, the file actually doesn't exist and it becomes white because you bypassed the PHP script's file existence check and the server replied with what it could find at that location (nothing).

my question is how to bypass this redirection and access the file1 , file2 , file3 ( in our context of course)?
May I suggest that you're being redirected because the files indeed don't exist? If they used to exist, maybe they were moved or deleted without updating the page.

what is the method used (in our context , I mean my whole example) to bypass redirection and get the file if , of course, what I write is true , I mean if it is a redirection?
Normally, a redirect is sent as part of a blank or generic response. An HTTP client can choose to ignore it (that is, not GET the URL), but that will just leave it staring at a blank page or a "you are being redirected" type of message.
404 the file not found and as you said helios :"More likely, the file actually doesn't exist and it becomes white because you bypassed the PHP script's file existence check and the server replied with what it could find at that location (nothing)."

thank you
Topic archived. No new replies allowed.