1
2

<?php
eval( ''$RuleRes = cf_MailInsert($row,$id);'' )

I still haven’t found where in the database the eval’d string is coming from. FML.

For background see Pure evil. This function call is the result of the eval("$doAction" . ";"); line.