Suspected hack … "php $ikie ="

No, thank you.

I don’t want any additional attention until I have resolved this and hardened the site.

Can you tell me how to decode the initial string?

There is no harm to posting the rest because it means nothing in that format. I think it’s important for people to know because it does not come up anywhere in Google.

I’ve never come across “php $ikie =” before.

Perhaps it is just nonsense and a trial upload prior to a full attack?

Thanks

I’ll remove the most obvious codes strings and replace them with ….. , the rest will mean nothing.

[do no post any hacked code here]