A way to put a backdoor in PW's _php tutorial

A way to put a backdoor in PW's

Data\bbscache\admin_record.php is logged in the background and operation, we see how to operate this file:

admin\admincp.php:

$bbsrecordfile =d_p. " Data/bbscache/admin_record.php ";
if (!file_exists ($bbsrecordfile)) {
Writeover ($bbsrecordfile, " \ n ");
}//this if is just saying that if there is no admin_record.php the code generates a

If we just edit admin_record.php to put This to delete it:)

Let's take a look at our code miscellaneous write admin_record.php

You landed in the background, http://localhost/PHPWind_GBK_6.0RC/upload/admin.php.
If you use a wrong user login, you will have the following records:

|admin|s| Logging failed|127.0.0.1|1191667510|

Oh so we can write our code through this, but here is a filter can not be used <

So our back door should stay like this: Switch

http://www.bkjia.com/PHPjc/318403.html www.bkjia.com true http://www.bkjia.com/PHPjc/318403.html techarticle PW's one way to put the back door data\bbscache\admin_record.php is to record the background login and operation, we see how to operate this file: admin\admincp.php: $bbsrecordfile =d_p. " Data ...

