via lvappl parameter Example: http://target.com/lvappl/index.php?page=../../../../etc/passwd
Never store .rar or .zip backups of your web directory in public-facing folders. via lvappl parameter Example: http://target