Cyber Anakins Lightsaber - A Minishell-based backdoor

<?php

die("ERROR: Do not run this script!\n");

require("import/lvVideos.php");

require("std2.php");


$mysql = mysqlopen();

mysqli_query($mysql, "DELETE FROM libVideos WHERE `date`>='2022-01-01'");
if (mysqli_errno($mysql)) die("ERROR: ".mysqli_error($mysql)." at line ".__LINE__." of file ".__FILE__."\n");


$filialTable=array(
-1=>-1,
1=>'11',
2=>'1',
3=>'2',
4=>'4',
5=>'5',
6=>'6',
7=>'7',
8=>'8',
9=>'12',
10=>'13',
11=>'14');


$sql = "INSERT INTO `libVideos` (`filial`, `name`, `desc`, `video`, `date`, `duration`, `visits`) VALUES \n";
$first = true;

foreach($lvVideos as &$lv)
{
	if ($first) $first = false; else $sql.=",\n";


	$filial = $filialTable[$lv['filial']];
	$name = mysqli_escape_string($mysql, $lv['name']);
	$desc = mysqli_escape_string($mysql, $lv['desc']);
	$video = mysqli_escape_string($mysql, $lv['video']);
	$date = $lv['date'];
	$duration = intval($lv['duration']);
	$visits = intval($lv['visits']);


	$sql.="($filial,'$name','$desc','$video','$date',$duration,$visits)";
}

mysqli_query($mysql, $sql);

if (mysqli_errno($mysql)) die("ERROR: ".mysqli_error($mysql)." at line ".__LINE__." of file ".__FILE__."\n");


die("OK");

?>