yesterday I found out that someone uploaded a php file into my wordpress site and could hack into it. Fortunately I could figure it out soon and stopped the attack. but then i noticed a lot of hidden php files have been injected in my wordpress core files. In the last line of code its been written....
eval(htmlspecialchars_decode(gzinflate(base64_decode($stt1))));
how can I decode this php file? I tried to decode this file using online decoders but the output was nonsense.