A yii include chain here

[hhhhhhhhddddddd]

\yii\base\BaseObject::__construct
\yii\rbac\PhpManager::init
\yii\rbac\PhpManager::load
\yii\rbac\PhpManager::loadFromFile

refer https://blog.calif.io/p/craftcms-rce

but I don't have enough time to coding now, so just put chain here for somebody to working

[reverseth]

Hi,

Unless if I'm missing something (still learning…), the __construct() magic method in the BaseObject class will never be called when an object is unserialized, it’s only invoked when using the new PHP keyword.

If I'm wrong, could you please clarify how it works ?

If I’m right, the following magic methods would be more relevant targets

• __destruct()
• __unserialize()
• __wakeup()
• __toString() (requires echo/print)

Have fun !