Linux find with sed not work

Question

I've got a large problem. I'm trying to remove malware code from first lines of php files in my project but all the time console returns:

sed: 1: "./{PATH_TO_FILE}": invalid command code .

My request:

find . -name "*.php" -type f -exec sed -n -i '1s/.*/<?php/' {} \;

Can anyone tell me what is wrong here? :)

Thanks a lot in advance!

I've solved a similar problem a couple of days ago, take a look at http://stackoverflow.com/a/33049983/797495 — Pedro Lobito, Oct 14 '15 at 14:09
Yes, but version in production is different than in repository — Patryk Niewiada, Oct 14 '15 at 14:10
Don't try to edit infected files. Replace them with clean backups — chepner, Oct 14 '15 at 14:38
@Mithrandir: Do not combine `-n` with `-i`: it _truncates_ the input file, because `-n` suppresses all (implicit) output so that _nothing_ is written back to the input file. — mklement0, Oct 14 '15 at 14:43
I think @mklement answered you correctly above, the `-n` precludes output (without a `p` sed command, but its easier to simply remove the `-n`). — , Oct 14 '15 at 16:33

score 2 · Answer 1 · answered Oct 14 '15 at 14:29

2

First of all, you didn't put the wildcard in ".php". it should be "*.php".

find . -name "*.php"

Second, you forgot to add the place-holder for the file name in the exec clause and the end of the exec clause (a semi-colon):

Third, your sed expression is invalid. If what you want to achieve is to delete the first line then '1d' should make it:

-exec sed -n -i '1d' {} \;

Finally, -n seems to interfere with the -i, so just remove it.

Your full command should be:

find . -name "*.php" -type f -exec sed -i '1d' {} \;

answered Oct 14 '15 at 14:29

Alejandro López

Good points (combining `-n` with `-i` actually _truncates_ the input file, because `-n` suppresses all (implicit) output so that _nothing_ is written back to the input file). However, the intent was to _replace_ the 1st line with ` – mklement0 Oct 14 '15 at 14:45

score 1 · Answer 2 · answered Oct 15 '15 at 13:40

1

Thanks a lot ! Finally i sloved problem using command

LC_ALL=C find . -name "*.php" -type f -exec sed -i '' -e "s/^<\?php.*\?>//" {} \;

answered Oct 15 '15 at 13:40

Patryk Niewiada

2 Answers2