 Remote file inclusion (RFI) occurs when the web application downloads and executes a remote file.These remote files are usually obtained in the form of an HTTP or FTP URI as a user-supplied parameter to the web application.Local file inclusion (LFI) is similar to a remote file inclusion vulnerability except instead of including remote files, only local files i.e.