Fakebook 扫描目录发现存在robots.txt和flag.php,访问发现源码泄露/user.php.bak user.php.bak <?php class UserInfo { public $name = ""; public $age = 0; public $blog = ""; public function __construct($name, $age, $blog) { $this->name = $name; $this->age =