this is for Linpha <=1.0 arbitrary local inclusion: http://retrogod.altervista.org/linpha_10_local.html intext:”LinPHA Version” intext:”Have fun” to see version in description in Linpha 0.9 branch there is sql injection through cookies also to bypass admin login, search for exploit