1. Intermediate Program include. inc
Copy codeThe Code is as follows:
<?
Include_once 'include/Base. php ';
$ Path = '';
$ Url = isBase: decrypt (urlDecode ($ _ SERVER ['query _ string']);
Parse_str ($ url); // GET the variable passed through the url address GET
If (! Empty ($ _ POST ['path']) {// get the variable passed by POST
$ Path = $ _ POST ['path'];
$ Path = isBase: decrypt (urlDecode ($ path ));
}
// Parse the actual path
If (empty ($ path )){
// Header ("Location: login. php ");
Exit;
}
If (! Preg_match ("/(^ http: \/) | ([? | & | =])/", $ Path )){
// Jump to the path of the actual execution File
Chdir (dirname ($ path ));
Include_once basename ($ path );
Exit;
}
?>
Index. php and include. inc are in the same directory
Copy codeThe Code is as follows:
<?
Include. inc;
?>
2. Modify links in a program ()
Copy codeThe Code is as follows:
"Index. php? ". Encrypt (" path =/test. php & test = 123 & test2 = 4321 ")
3. Modify the POST form in the program
All forms are submitted to index. php.
Add a hidden form in the middle
4. Modify the path of the front-end Html page
Baseref =/test
5. Write the encryption and decryption functions on your own.
Summary:
This method is cumbersome and can only hide the background script path. The Front-End Script path can still be seen in the source file (baseref). The address displayed in the address bar is index. php? Xxxxxxxx