added check for backdoor variables common in PHP shells