PHP Code Injection Attack

PHP Code Injection Attack is an attack that allows an attacker to insert arbitrary code into script execution flow. The attack is usually associated with the use of dynamic variables in the include() and require() functions without proper validation of the these variables.

Read More at ULTSEC: PHP Code Injection Attack