Is it possible to locate web document root using SQL query/SQL Injection? August 21, 2020August 21, 2020 PCIS Support Team Security If you have permissions to write files, you probably have permission to read them, too. I’d start from reading web server configuration files, e.g. Related:Mailings from our servers and containing some text blocked