Remote Command Execution (RCE) For Newbies

:: Intro ::

Prerequisites: PHP Coding
Impact: High
Popularity: Medium
Protect: Input Validate, Something like Magic_quote <_<

[hide=15]RCE, It's possible to execute (malicious) PHP Code on a website. Hackers able to read sensitive files, spawn shells, delete files, defacing ,blah blah blah... (Up to you)

:: Commonly PHP function for RCE ::

fwrite()
eval()

:: fwrite() ::

[code]$file = 'file.php';