安装插件后然后一直被阿里云盾提示shell后门！

首先说明下！我第一次购买的时候 一堆问题 ！比如说充值不到账！必须等待 5 4 3  2 1  条回我网站读取  首页存放了2个回调代码！如果 我首页不手动去存放回调代码 ，就无法到账！第一次听说！插件安装后还要人工去复制一些代码存放 网站根目录2个回调文件 ！
开始的问题1： 点击充值后 经过2次跳转 到支付宝充值扫码页面后，扫码充值成功后 必须等待 5 4  3 2  1  回调到我首页，如期间关闭充值页面 ，那么就无法获得充值到账！！

这个问题 提交 后 他们修复了~

但是首页存放代码 还没修复！~必须强制 首页存放2个回调代码！

目前 发现的问题就是 安装 程序后！！我的阿里云盾 一直提示 有后门 ！以下是我的 云盾切图！！







以下是我联系作者的


2天没回话！！

以下是代码
<?php

/**
*      [Sanree] (C)2001-2099 Sanree Inc.
*      This is NOT a freeware, use is subject to license terms
*
*      $Id: sanree_recharge.inc.php sanree $
*/
///error_reporting(E_ALL);
if(!defined('IN_DISCUZ')) {
        exit('2018081422FJDh3o0t53||69948||1534474801');
}
define('CURMODE_SANREE_MODE', 'recharge');
if (CHARSET=='utf-8') {

        define('C_CHARSET','_utf8');

} else {

        define('C_CHARSET','');

}
$plugin['identifier'] = 'sanree_recharge';
define('IN_SANREE', TRUE);
$modfile = DISCUZ_ROOT.'./source/plugin/'.$plugin['identifier'].'/function/function_core.php';
@require_once($modfile);
$modfile = DISCUZ_ROOT.'./source/plugin/'.$plugin['identifier'].'/function/function_module.php';
@require_once($modfile);
define('APPC',DISCUZ_ROOT.'./source/plugin/'.$plugin['identifier'].'/condition/');
$modfile = APPC.'index.php';
@require_once($modfile);

global $_G;
foreach($_GET as $k => $v) {

        $_G['sr_'.$k] = daddslashes($v);

}

$pluginversion = $_G['setting']['plugins']['version']['sanree_recharge'];
$discuz_version = $appVer;
$metakeywords = '';
$metadescription = '';
$groupid = $_G['group']['groupid'];

$mod = isset($_G['sr_mod']) ? $_G['sr_mod'] : 'myrecharge';
$modarray = array('orders', 'myrecharge', 'ordersshow', 'show2code', 'qrcode', 'return_url', 'notify_url', 'wx_native_notify');
$mobilearray = array('orders', 'myrecharge', 'ordersshow');
$mod = !in_array($mod, $modarray) ? 'myrecharge' : $mod;

$config = $_G['cache']['plugin']['sanree_recharge'];
$isopen = intval($config['isopen']);
if ($isopen!=1) {

        showmessage(srlang('noopen'));

}
$config['rate'] =  isset($config['rate']) ? intval($config['rate']) : 1000;
$rate = intval($config['rate']);
$rate = max(1, $rate);

$creditunit = intval($config['creditunit']);
if ($creditunit<1) {
        showmessage(recharge_modlang('nocreditunit'));
}
$extcredits = $_G['setting']['extcredits'];
if(!empty($extcredits)) {
        foreach($extcredits as $key => $val) {
           $extcredits[$key]['account'] = getuserprofile('extcredits'.$key);
        }
        $creditsformula =  str_replace('\$', '\\$', $_G['setting']['creditsformula']);
        $member = $_G['member'];
        eval("\$allcredit = $creditsformula;");

}
define('IS_DEBUG_LOG', $config['islog']);
$creditunitname = $_G['setting']['extcredits'][$creditunit]['title'];
$allowgroup = unserialize($config['allowgroup']);
$defaultprice = $config['defaultprice'];
$minamount = intval($config['minamount']);

$threshold = intval($config['threshold']);
$threshold = max(0, $threshold);
$firstadd = intval($config['firstadd']);
$firstadd = max(0, $firstadd);
$firsttxt = trim($config['firsttxt']);
$firsttxt =  str_replace(array('{threshold}','{credit}'), array('<span>'.$threshold.'</span>', '<span>'.$firstadd.'</span>'), $firsttxt);

$moddir = 'module/';
$template = 'default';
define('sanree_recharge_PATH', 'source/plugin/sanree_'.CURMODE_SANREE_MODE);

if (!file_exists(sanree_recharge_PATH."/template/".$template."/copyright.xml")) {
        define('sanree_recharge_TPL', 'source/plugin/sanree_'.CURMODE_SANREE_MODE.'/template/default/');
        define('sanree_recharge_IMG', sanree_recharge_TPL.'images');
        define('sanree_recharge_JS', sanree_recharge_TPL.'js');
} else{
        define('sanree_recharge_TPL', 'source/plugin/sanree_'.CURMODE_SANREE_MODE.'/template/'.$template.'/');
        define('sanree_recharge_IMG', sanree_recharge_TPL.'images');
        define('sanree_recharge_JS', sanree_recharge_TPL.'js');
}
$modelurl = recharge_getmodeurl();

$ismobilechk = 1;
if($ismobilechk){
        require_once libfile('class/sanree_recharge_mobile','plugin/sanree_recharge');
        $sanreemobile = new sanree_recharge_mobile();
        if(defined('IN_SANREE_MOBILE')){
                $template = 'touch/'.$template;
        }
}
if((defined('IN_MOBILE') || defined('IN_SANREE_MOBILE')) && in_array($mod, $mobilearray)) {
        $modfile = DISCUZ_ROOT.'./source/plugin/'.$plugin['identifier'].'/function/function_mobile.php';
        @require_once($modfile);
        if(file_exists(sanree_recharge_PATH."/template/".$template)){
                define('sanree_recharge_TOUCH', 'source/plugin/sanree_'.CURMODE_SANREE_MODE.'/template/');
                define('TOUCH_CSS', sanree_recharge_TOUCH.$template.'/');
                define('TOUCH_JS', sanree_recharge_TOUCH.$template.'/js');
                define('TOUCH_IMG', sanree_recharge_TOUCH.$template.'/images');
                define('sanree_recharge_touch_TPL', 'source/plugin/sanree_recharge/template/touch/default/');
        } else{
                $template = 'touch/default';
                define('sanree_recharge_TOUCH', 'source/plugin/sanree_'.CURMODE_SANREE_MODE.'/template/touch/default/');
                define('TOUCH_CSS', sanree_recharge_TOUCH.'/');
                define('TOUCH_JS', sanree_recharge_TOUCH.'js');
                define('TOUCH_IMG', sanree_recharge_TOUCH.'images');
                define('sanree_recharge_touch_TPL', 'source/plugin/sanree_recharge/template/touch/default/');
        }
        $moddir = 'mobile/';
        if ($_G['setting']['mobile']['allowmobile'] == true && $_G['setting']['mobile']['mobileforward'] == true) {
                $onsubmitcharset = 'accept-charset="utf-8" onsubmit="document.charset=\'utf-8\';"';
        }
}
require_once recharge_sanree_libfile($moddir.$plugin['identifier'].'/'.$mod, $plugin['identifier']);
?>

已经 联系2天 后没回复了  这个是开始发现问题后我就在插件那边留言  说这个



接下来 我发生了一件很奇葩的事情，就是 我目前没删除 这个留言

过了2天左右 我 服务器系统就瘫痪了

我是liunx 系统  宝塔 专业版  都没进去过 结果 就瘫痪系统了  

具体是什么 我也不是太确定

你贴的代码并不含后门，插件代码中有一个积分相关的处理，使用eval（实际复制的Discuz自带的代码），应该是这个函数引起的误报