If the developer forgets to remove the built in controller welcome.php it helps the attacker to identify that the site is built with Codeigniter
该报告还没有中文解读。
原文摘录
摘自原文（306 字符中的一小部分）
The attacker can check the website's backend technology simply by typing site_name/index.php/welcome/index it will display the codeigniter welcome page if the developer dosen't removed the built in controller and view welcome.php and welcome_message.php i attaching a screenshot below as a proof of …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 CodeIgniter 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @hackerneo · 版权归作者与 CodeIgniter 所有