webshell alfa obfuscated php

Detects obfuscated PHP code, specifically webshells, that utilize apostrophe-based concatenation (e.g., 'a'.'b'.'c') to break up strings into 1-3 character chunks. This technique is often used to evade signature-based detection.