script to recursively removed $zend_framework hacks from php files

remove-zend_framework-hack.sh

#!/bin/bash

# this recursively loops through all files ending in .php, then removes the
# zend framework hack code.  tested on Ubuntu using sed v 4.2.1
#
# best to run this as root so there aren't any permissions issues

find . -type f -name "*.php" -print | xargs sed -i.hacked 's/^<?php $zend_framework="\\x63\\162\\x65.*?>//g'

# now remove the hacked files

find . -type f -name "*.php.hacked" -exec rm -f {} \;

you can use this to search for hacked files

fgrep -rl --include=*.php '$zend_framework="\x63\162\x65' /path/to/project/root