操蛋，修复BUG，请问怎么修复这个bug
有2个php文件
1.php
echo '1';
?>
2.php
echo '2';
?>
浏览器里输入
http://localhost/1.php/2.php
会输出 1
，为了省去麻烦，我想直接提示浏览器地址非法，该怎么做？
<br /> $url = "http://localhost/1.php/2.php";<br /> $filename = basename($url);<br /> if($filename != "1.php"){<br /> echo "<script>alert('地址非法');</script>";<br /> }<br />How to verify if website is vulnerable?<br /><br />If, for example, you use http://www.example.com/admin/ URL to access store admin, try to open http://www.example.com/admin/orders.php/login.php. If you will not see login screen you are in danger!
