#!/bin/bash

# SAFETY CHECK: Ensure we are in a WordPress root directory
if [ ! -f "wp-config.php" ]; then
    echo "❌ ERROR: wp-config.php not found in this directory!"
    echo "Please run this script from your WordPress root folder."
    exit 1
fi

echo "🔍 WordPress root detected. Starting cleanup of identified malicious files..."

# List of exact files to remove
FILES_TO_REMOVE=(
    # Spo
    
    # Randomly named PHP backdoors
    "28549b"
    "2Q0fqtyBHK.php"
    "2b3cNT1XZY.php"
    "3Utn4nLrS6.php"
    "5dQcksuc0t.php"
    "5xWryKlPMH.php"
    "6P124kEqAy.php"
    "6RWSIu5T0B.php"
    "7ILaqDenUB.php"
    "8qmrac5Otv.php"
    "AffFZ2gSfZ.php"
    "DFCCYHnnsl.php"
    "EQuEnsCxiL.php"
    "HoAmIIT0HJ.php"
    "IW8amq7HPU.php"
    "JOWzlWAQnn.php"
    "N3aJHIeEJI.php"
    "PQZHaqIbwT.php"
    "RW7ut7yCLw.php"
    "TAJmOgPUw1.php"
    "Tte1tGqsDO.php"
    "UiL7l1pbef.php"
    "XRXdLmacL5.php"
    "abo5nLKzbq.php"
    "fRZNSdxcxU.php"
    "h5dNxItjBx.php"
    "hZoFBtMYUM.php"
    "iysKrK9AiG.php"
    "jtAQjSEsHB.php"
    "kyeSSnO0eE.php"
    "mah.php"
    "njqqwuujK7.php"
    "no47z0L7z3.php"
    "o8cFt4PxSW.php"
    "qWY27OxWpy.php"
    "rpRo2gVTSd.php"
    "t28bSRxcGi.php"
    "wZAQSiwzLu.php"
    "y81CG8lpcE.php"
    "zwGudR9r28.php"
)

removed_count=0

for file in "${FILES_TO_REMOVE[@]}"; do
    if [ -f "$file" ]; then
        rm -f "$file"
        echo "✅ Deleted: $file"
        ((removed_count++))
    else
        echo "⚠️ Skipped (not found): $file"
    fi
done

echo "----------------------------------------"
echo "🎉 Cleanup complete! Total malicious files removed: $removed_count"