new pattern

scan.py

@@ -4,6 +4,11 @@
 # Original code by Planet-Work <f.vanniere@planet-work.com>
 # Forked by Malin Cenusa for Lunarpages (malin.cenusa@lunarpages.com)
 #
+# To Do:
+#   - Organize
+#   - Translate
+#   - Add more patterns
+#
 
 import os
 import re
@@ -424,6 +429,7 @@ def is_hacked(filename):
              or (line_num == 2 and "$ref = $_SERVER['HTTP_USER_AGENT'];" in l) \
              or (line_num < 4 and "passthru($_POST[" in l) \
              or (line_num == 1 and '$stg="ba"."se"."64_d"."ecode";eval($stg(' in l) \
+             or '(edoced_46esab(etalfnizg(lave' in l \
              or "file_put_contents('1.txt', print_r" in l:
             score.append(('PHP_SHELL', ''))