[Sunlight]

Introduction

In this guide I will show you how to prevent backdoored files so that you don't end up having your site fucked over and/or defaced. All website owners need to scan EVERY file they upload to the site before uploading because 1 file can ruin the site completely.



Backdoors in PHP files

The most common backdoor in php files is the

Code:

system

If you see that in your code with a GET or POST then you need to get rid of that file, because it is backdoored for sure.

system() is for executing a system command and immediately displaying the output - presumably text

You may also want to look for exec() and passthru()


Also, make sure to ALWAYS test your plugins before actually putting it on your real site. to do this just create a site on 000webhost and test everything on there.

[Cosmic]

Of all the people to write this guide.

OT: Thanks for the share! I'll be sure to read it before I put anything you send me on my sites.

[Sunlight]

Of all the people to write this guide.

OT: Thanks for the share! I'll be sure to read it before I put anything you send me on my sites.

That's the spirit. Anyways, you never know.

Also, make sure you don't use html headers to much.

[Wonders]

Lol nice thread, thanks and good work.

[Boyd]

"If you see that in your code with a GET or POST then you need to get rid of that file, because it is backdoored for sure."

That is not true.. GET and POST are not some sort of thing that you can not have useful in your code.

[Sunlight]

"If you see that in your code with a GET or POST then you need to get rid of that file, because it is backdoored for sure."

That is not true.. GET and POST are not some sort of thing that you can not have useful in your code.

With system in it? GET and POST using the system command allows access to system commands that can lead to file exposure and such with a simple GET or POST data edit.

[Boyd]

With system in it? GET and POST using the system command allows access to system commands that can lead to file exposure and such with a simple GET or POST data edit.

Not with system in it. You never specified that the code used for the GET and POST used system. Regardless, GET and POST are not some deadly choices..

[Sunlight]

Not with system in it. You never specified that the code used for the GET and POST used system. Regardless, GET and POST are not some deadly choices..

Yeah, I probably made it unclear for some people. What I meant was if it used like system with the GET or Post response.