This plugin family basically checks for (remote) code inclusions. It tries to inject several payload strings that enable Chorizo! to check if blind file inclusions are possible. The test includes for nullbyte terminated strings that slip through some old PHP versions.

Chorizo's Advisor will give you more detailed information about the problem itself, a general solution and provides a solution PHP code how to solve your problem.

Back to Help Center.