Remove First Line Injection

Aug 16, 2017

·

1 min read

#site #wordpress

How remove injection on the first line.

The crack injects all of PHP files in the first line with the form:

1
<?php ...../** INJECTED CODE  */ ?> <?php
2
// NORMAL LINES
3
...

Remove first line that get injected on all PHP files:

1
find ./ -iname '*.php' -exec  sed -i '1 s/<?php/\n&/2;s/<?php.*\n//' {} \;