HTTP: PHP Inclusion Download

This signature detects Web downloads containing a potentially dangerous PHP script. A malicious site can exploit a known vulnerability in multiple PHP applications and execute arbitrary PHP commands on the server. IMPORTANT NOTE: This signature should only be put in front of Web servers running PHP applications. The setting should be from (your internal Web server IPs) to any.

Short Name

HTTP:PHP:FILE-INCL-DL