Question: wordpress hacked: what does this script actually do?