So if I wanted to build a botnet, then it would be very easy ;).
Infiltrate vulnerable PHP sites. Install backdoor(s). Secure root access. Patch PHP to lock out script kiddies. Let it sit dormant until you need to launch attack
Indeed this is undoubtedly happening as we speak to untold millions of forgotten sites.
Indeed this is undoubtedly happening as we speak to untold millions of forgotten sites.