Malicious code PHP.EVAL.CRYPT in index.php

1.- It is true that these functions are not functions that can not be misused.
Please read these links.
http://php.net/manual/en/function.eval.php
https://api.jquery.com/jquery.globaleval/

2.- EVAL (GLOBALEVAL) are used scripts:
Index.php, index.php (admin), pulsecore / misc.php, redactor.min.js and jquery.js.

3.- You can check the contents of these scripts.
Example: Edit script index.php. Copy the content between two abostrofs.

<?php eval("?>".base64_decode('
=text=
')."<?");?>

Open Web Page = https://www.base64decode.org/
Decode the content between two abostrofs.
Check the content.

4.- Request a feature (your web site provider)

IvaRo

2 Likes