if the permissions of the codice_3 file allow viewing the file, the web server will send the contents of codice_3 to the web browser and the browser will then display the contents of the codice_3 file or any other file the attacker wishes to view.