if an attacker inserts this line of code into a malicious file with a php filename extension (such as codice_2) on a web server that is running php, the attacker can issue commands, for example reading the codice_3 file, through a web browser using the following uniform resource locator if the web shell was located at codice_4: