Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Passwords Reset (Wordpress Plugins Hacked). Parent comment
PHP's assert function ridiculously runs eval() on the code too, so to use their backdoor they just include code as their HTTP_REFERER.
http://plugins.trac.wordpress.org/changeset/399276
http://plugins.trac.wordpress.org/changeset/399286
PHP's assert function ridiculously runs eval() on the code too, so to use their backdoor they just include code as their HTTP_REFERER.