Unobfuscating and Attack - a look into an evil PHP script

It was uploaded through a client account via sftp, not injected into the actual directory by any other means. I think that's outlined in the post.