https://blog.wpsec.com/wordpress-backdoor-detection/