GET parameter "/remote-file-inclusion.android?file=" is valunerable. Remote file with phpinfo() function only allowed.