Cookie-gated PHP webshells use obfuscation, php-fpm execution, and cron-based persistence to evade detection in Linux hosting ...
Cookie-gated PHP web shells enable persistent Linux RCE via cron-based re-creation, reducing detection in routine traffic ...
I've got this sessions script and every once in a while it won't log you out when you tell it to. The logout script is about 5 lines, it does a couple SQL things, then deletes the cookie. That's it.