Remote File Inclusion

Remote File Inclusion, or RFI, occurs when an application accepts user-controlled input to include files from remote locations. If external resources are executed or processed unsafely, attackers may run malicious code, alter application behavior, steal sensitive information, or compromise the server. RFI is particularly dangerous in applications with insecure file inclusion logic, weak URL validation, legacy configurations, or unsafe dynamic module loading.