A tester has LFI in a PHP application and wants to read the source code of a PHP file, but the server executes PHP files instead of displaying them. Which technique can the tester use to read the source code?

Use the php://filter wrapper with convert.base64-encode

A developer wants to mitigate LFI in a PHP application that includes files from a user-controlled parameter. Which code change is most effective?

Use basename() to strip directory components from the input

Use realpath() and verify the resolved path is within the allowed directory

Use htmlspecialchars() on the user input

Use addslashes() on the user input

EC-CouncilWeb Application Hacking and Security

Domain 7Objective 1

Local File Inclusion (LFI) WAHS Practice Questions (Page 2)

Part of the File Inclusion and Upload Attacks domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

4concepts

Questions 6–10

6foundation · easy
A web application uses the PHP function include($_GET['page']); to load content. Which URL parameter value is most likely to cause the application to read a local file outside the intended directory?
Select an answer first
7foundation · easy
A penetration tester observes the following URL in a web application: https://example.com/view.php?file=about.php. The tester changes the file parameter to ../../etc/passwd and the application returns the contents of the /etc/passwd file. Which vulnerability is present?
Select an answer first
8expert · hard
A tester has LFI in a PHP application and wants to read the source code of a PHP file, but the server executes PHP files instead of displaying them. Which technique can the tester use to read the source code?
Select an answer first
9foundation · easy
A developer wants to mitigate LFI in a PHP application that includes files from a user-controlled parameter. Which code change is most effective?
Select an answer first
10foundation · easy
A web application is vulnerable to LFI. Which file, if readable, would most directly expose the application's database connection credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WAHS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.

Local File Inclusion (LFI) WAHS Practice Questions (Page 2)

Questions 6–10

A web application uses the PHP function include($_GET['page']); to load content. Which URL parameter value is most likely to cause the application to read a local file outside the intended directory?

A penetration tester observes the following URL in a web application: https://example.com/view.php?file=about.php. The tester changes the file parameter to ../../etc/passwd and the application returns the contents of the /etc/passwd file. Which vulnerability is present?

A tester has LFI in a PHP application and wants to read the source code of a PHP file, but the server executes PHP files instead of displaying them. Which technique can the tester use to read the source code?

A developer wants to mitigate LFI in a PHP application that includes files from a user-controlled parameter. Which code change is most effective?

A web application is vulnerable to LFI. Which file, if readable, would most directly expose the application's database connection credentials?

Keep studying — File Inclusion and Upload Attacks