Direct Attacks
PHP
2024-11-15
36
Dumb things
Don't do dumb things!
<?php
system
(
$user_data
);
?>
<?php
include
"
$path
/
$user_data
"
;
?>
<?php
eval(
$user_data
);
?>
Others
preg_replace with /e option, exec(), popen(), passthru, and backticks ``
