Hey,
Thanks for your prompt reply. Yes, definitely thought so too. It just seemed odd to me that if someone found a backdoor and was able to execute php, why would he then overwrite the htaccess file with a AIOWPS function rather than directly with php?