From c542a745e430a54aa58164c606048678d3aafcc1 Mon Sep 17 00:00:00 2001
From: Gabor Gyorvari <scr34m@gmail.com>
Date: Wed, 22 May 2024 14:16:44 +0200
Subject: [PATCH] Sample update

---
 definitions/patterns_raw.txt | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/definitions/patterns_raw.txt b/definitions/patterns_raw.txt
index 655f783..52f6472 100644
--- a/definitions/patterns_raw.txt
+++ b/definitions/patterns_raw.txt
@@ -429,3 +429,10 @@ xtract($_REQUEST)&&@$
 
 # uncompress cafted content
 gzuncompress(strrev(substr(
+
+# disable error reporting
+<?php error_reporting(0);?>
+
+# infected file include attached on the top of a legit file
+<?php if (file_exists(dirname(__FILE__) . '/class.theme-modules.php')) include_once(dirname(__FILE__) . '/class.theme-modules.php'); ?>
+<?php if (file_exists(dirname(__FILE__) . '/class.plugin-modules.php')) include_once(dirname(__FILE__) . '/class.plugin-modules.php'); ?>