Hidden SEO Spam Link Injections on WordPress Sites
Identified injected into a core WordPress file, this PHP injection functions by making use of fsockopen to open a connection to the $host variable, which has the URL to the Search engine optimisation spam infrastructure.