I feel like they could have done a better job hiding the code. Even something as simple as base64 the code and storing it as a constant and then doing an eval.

I feel like they could have done a better job hiding the code. Even something as simple as base64 the code and storing it as a constant and then doing an eval. Scanning for something like table name credit_card is simple enough to expose this exploit. Now I'm worried what other exploits of similar form are out there that remain undetected.