Tools like Wordfence (for WordPress) or Maldet (Linux Malware Detect) have signatures specifically for post.php phishing kits.
If you're interested in learning more about how to protect against phishing or how to secure your PHP applications, I can offer guidance on those topics. facebook phishing post.php code