PHP – Injection

PHP – injection is one of the ways to hack the website that runs on PHP by performing of third-party code on the server side. The hazardous functions are:

• • eval();

 

• • preg_replace() (with «e» modificator);

 

• • require_once();

 

• • include_once();

 

• • include();

 

• • require();

 

• • create_function().

 

The PHP-injection is successful when the value parameters adopted and are used without validation.