This one is easy. Step 1: Pick a name that looks harmless. wp-cache.old. email.bak. wp-content.old.tmp. Something you won’t think of. Remember, it doesn’t have to end with PHP just because it’s got PHP code in it. Step 2: Hide the code itself. Except in special circumstanc...