Waraxe IT Security Portal

betti1965 · Regular user

Here is the part of the file
(WordPress plugin)
********************
function installation_process(){
global$wpdb;${"\x47\x4cO\x42A\x4c\x53"}["e\x72\x72s\x72\x6b\x72"]="t\x61\x62\x6c\x65s";${${"\x47\x4c\x4f\x42AL\x53"}["e\x72\x72s\x72\x6b\x72"]}=array("\x43\x52EATE\x20\x54ABLE\x20I\x46\x20\x4e\x4fT\x20E\x58\x49S\x54S `".$wpdb->prefix."po\x70\x64om_ca\x6d\x70\x61ig\x6es\x60\x20\x28\n\t\t\t\t \x60\x69d`\x20in\x74\x2825)\x20NO\x54 \x4e\x55L\x4c \x61uto\x5fi\x6ecremen\x74\x2c\n\t\t\t\t \x60ca\x6dpaign\x60 va\x72\x63ha\x72(5\x35\x29 \x63oll\x61\x74e\x20ut\x66\x38_gen\x65\x72\x61\x6c\x5fci\x20NO\x54 \x4e\x55\x4cL,\n\t\t\t\t \x20\x60da\x74\x61`\x20lo\x6e\x67text \x63\x6f\x6c\x6ca\x74e \x75t\x668_\x67\x65\x6e\x65r\x61l_\x63i N\x4f\x54\x20\x4eUL\x4c\x2c\n\t\t\t\t\x20\x20`pages` \x6congtext \x63ollat\x65 utf8\x5f\x67en\x65\x72\x61\x6c_ci\x20\x4e\x4f\x54\x20NULL,\n\t\t\t\t \x20\x60d\x65s\x63\x60 lon\x67\x74ext\x20\x63ol\x6c\x61te utf\x38\x5fge\x6e\x65\x72\x61\x6c_ci N\x4f\x54 N\x55\x4cL\x2c\n\t\t\t\t\x20\x20P\x52IM\x41\x52Y\x20KE\x59 \x20(`id`\x29\n\t\t\t\t\x29\x20\x45\x4e\x47\x49N\x45\x3dMy\x49SA\x4d\x20DEF\x41U\x4c\x54\x20C\x48\x41\x52\x53E\x54\x3dutf8 CO\x4c\x4c\x41\x54\x45\x3dut\x66\x38_g\x65ne\x72\x61l_\x63\x69;\n\t\t\t\t","\x43RE\x41T\x45 T\x41\x42LE \x49\x46\x20\x4e\x4fT\x20\x45\x58IS\x54S `".$wpdb->prefix."p\x6fpd\x6f\x6d_a\x6e\x61ly\x74i\x63\x73\x60 (\n\t\t\t\t\x20\x20`id\x60 \x69n\x74\x282\x35\x29 \x4eOT NU\x4c\x4c \x61uto\x5f\x69\x6ecrem\x65n\x74,\n\t\t\t\t `\x63\x61mp\x6ea\x6de` lo\x6egte\x78\x74 \x63ol\x6ca\x74e\x20\x75\x74f8\x5f\x67\x65n\x65r\x61l_ci NOT\x20N\x55\x4cL,\n\t\t\t\t\x20 \x60v\x69\x65w\x73`\x20i\x6et(2\x35) \x4e\x4fT \x4eU\x4c\x4c\x2c\n\t\t\t\t \x20`\x63\x6fnv\x65\x72si\x6f\x6e\x73\x60 \x69\x6e\x74\x28\x32\x35)\x20\x4eOT \x4eU\x4cL\x2c\n\t\t\t\t \x20`r\x61ti\x6eg\x60 \x69\x6et(\x325\x29\x20\x4eO\x54\x20NU\x4c\x4c\x2c\n\t\t\t\t\x20\x20`\x70\x72\x65viou\x73d\x61t\x61\x60\x20l\x6fngtext col\x6ca\x74\x65 \x75tf8\x5fgen\x65\x72\x61l\x5f\x63i\x20NOT \x4e\x55L\x4c\x2c\n\t\t\t\t \x20\x50RIMAR\x59 \x4bE\x59\x20\x20(\x60i\x64`\x29\n\t\t\t\t)\x20E\x4e\x47\x49\x4e\x45\x3dM\x79I\x53AM D\x45\x46AU\x4cT\x20CHAR\x53\x45\x54\x3d\x75\x74f\x38 CO\x4cLATE\x3du\x74f\x38\x5f\x67e\x6e\x65r\x61\x6c\x5f\x63i\x3b\n\t\t\t\t","C\x52\x45ATE \x54\x41B\x4c\x45 I\x46\x20N\x4fT \x45X\x49\x53TS\x20`".$wpdb->prefix."p\x6fpd\x6f\x6d_a\x62\x60 \x28\n\t\t\t\t\x20 \x60id\x60 i\x6e\x74(25\x29 N\x4fT \x4e\x55LL \x61u\x74\x6f_\x69n\x63r\x65\x6d\x65nt,\n\t\t\t\t `\x63a\x6d\x70\x61i\x67\x6es\x60 \x6con\x67\x74\x65\x78t \x63\x6f\x6c\x6c\x61\x74e\x20\x75tf\x38\x5f\x67\x65n\x65ral\x5fc\x69\x20NOT \x4e\x55\x4cL,\n\t\t\t\t \x20`sc\x68ed\x75l\x65\x60 l\x6fn\x67t\x65xt \x63\x6fll\x61\x74e u\x74f\x38\x5fg\x65ner\x61l\x5fc\x69\x20\x4e\x4f\x54\x20N\x55LL\x2c\n\t\t\t\t\x20\x20`a\x62\x73\x65t\x74i\x6e\x67\x73\x60\x20\x6c\x6fn\x67\x74ext\x20c\x6fl\x6c\x61te\x20ut\x668_g\x65\x6eera\x6c_\x63i\x20\x4eO\x54\x20\x4e\x55LL,\n\t\t\t\t `\x61\x73\x74at\x73\x60\x20l\x6fng\x74e\x78t \x63\x6fll\x61\x74e\x20u\x74f\x38_\x67\x65n\x65\x72a\x6c_\x63\x69 N\x4f\x54 N\x55\x4c\x4c,\n\t\t\t\t `r\x61\x74ing` v\x61r\x63ha\x72\x285\x35) c\x6f\x6cl\x61t\x65\x20utf8_\x67\x65\x6ee\x72al_ci N\x4fT NU\x4c\x4c\x2c\n\t\t\t\t\x20 \x60n\x61m\x65\x60\x20\x76archa\x72\x2855)\x20co\x6cla\x74e \x75tf\x38\x5f\x67ene\x72\x61l\x5f\x63i\x20\x4eO\x54 \x4e\x55\x4cL\x2c\n\t\t\t\t\x20 \x60de\x73\x63ri\x70t\x69o\x6e`\x20long\x74\x65\x78t c\x6fl\x6c\x61te\x20u\x74f\x38\x5fgen\x65\x72a\x6c\x5f\x63i \x4eO\x54\x20NU\x4c\x4c,\n\t\t\t\t\x20\x20\x50\x52I\x4dAR\x59 KEY\x20\x20\x28`\x69d\x60\x29\n\t\t\t\t) \x45N\x47IN\x45=\x4d\x79I\x53AM\x20\x44\x45\x46\x41\x55\x4cT\x20C\x48\x41\x52SE\x54=\x75t\x668 C\x4f\x4cLAT\x45=\x75t\x66\x38\x5f\x67\x65neral\x5fc\x69;\n\t\t\t\t","C\x52\x45ATE\x20\x54A\x42\x4cE \x49\x46\x20\x4e\x4fT E\x58\x49\x53\x54S\x20`".$wpdb->prefix."\x70o\x70\x64o\x6d_m\x61ilin\x67\x60 \x28\n\t\t\t\t \x20\x60i\x64`\x20i\x6et(2\x35)\x20\x4eO\x54 N\x55LL a\x75to\x5fi\x6ec\x72em\x65\x6e\x74\x2c\n\t\t\t\t `pro\x76i\x64\x65r\x60 \x76ar\x63h\x61r\x28\x320\x29\x20co\x6c\x6cate ut\x66\x38\x5f\x67e\x6e\x65\x72a\x6c\x5f\x63\x69 \x4e\x4fT\x20\x4eU\x4cL,\n\t\t\t\t \x60n\x61m\x65\x60 \x76arch\x61r\x28\x35\x35\x29\x20\x63\x6f\x6c\x6cat\x65 \x75t\x66\x38\x5f\x67ene\x72a\x6c\x5f\x63\x69 NOT N\x55L\x4c,\n\t\t\t\t \x20`de\x73c\x72\x69\x70\x74\x69\x6fn` lo\x6egt\x65\x78\x74\x20c\x6f\x6c\x6ca\x74e\x20\x75\x74\x66\x38\x5fg\x65\x6e\x65ral_\x63i N\x4f\x54 N\x55\x4cL,\n\t\t\t\t\x20\x20\x60\x73etti\x6egs` lo\x6e\x67tex\x74\x20\x63olla\x74\x65\x20\x75\x74f8_\x67\x65ner\x61\x6c_ci \x4eO\x54\x20NUL\x4c\x2c\n\t\t\t\t \x50RI\x4dA\x52Y\x20\x4b\x45\x59\x20\x20(`\x69d\x60\x29\n\t\t\t\t\x29 E\x4eG\x49N\x45\x3d\x4dyI\x53\x41M \x44EF\x41U\x4cT C\x48\x41\x52\x53\x45\x54\x3d\x75\x74\x668 \x43\x4fL\x4cA\x54\x45=\x75\x74f\x38\x5f\x67e\x6eera\x6c_c\x69;");${"\x47\x4cO\x42A\x4cS"}["nupv\x68ko\x61nkx\x76"]="b";${"\x47\x4c\x4f\x42\x41L\x53"}["\x76\x62s\x70\x72\x61\x67"]="\x61";${"\x47\x4cO\x42AL\x53"}["\x70j\x74\x72\x6a\x6e\x77\x6bq\x6c"]="error\x5f\x63\x6f\x64\x65";if(isset($_POST["\x70op\x75\x70\x5f\x64o\x6d\x69\x6eatio\x6e\x5fa\x63ti\x76a\x74e"])){if($_POST["\x70\x6f\x70up_\x64o\x6din\x61t\x69o\x6e_activa\x74e"]=="\x74rue"){${"\x47L\x4f\x42\x41L\x53"}["\x6d\x6a\x78j\x71\x73"]="\x64\x65f\x61\x75\x6c\x74s";require_once(ABSPATH."\x77\x70\x2d\x61dm\x69n/in\x63\x6cud\x65\x73\x2f\x75\x70\x67\x72ad\x65\x2ep\x68p");${"\x47\x4cO\x42\x41\x4c\x53"}["o\x6b\x66\x69i\x78\x62dk\x70\x78"]="t\x61\x62l\x65";${"\x47\x4cOB\x41LS"}["e\x61b\x61ps\x72\x67\x65"]="\x74\x61\x62\x6c\x65\x73";${"\x47L\x4fBA\x4cS"}["\x72\x78\x6bv\x76\x6d\x78"]="\x64\x65f\x61\x75l\x74\x73";foreach(${${"G\x4c\x4f\x42\x41LS"}["\x65\x61b\x61p\x73\x72ge"]} as${${"G\x4c\x4f\x42A\x4c\x53"}["o\x6bf\x69\x69\x78b\x64\x6b\x70\x78"]}){${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71yrj\x76\x76\x75\x66"]="t\x61\x62le";dbDelta(${${"\x47\x4c\x4fB\x41\x4cS"}["\x71yrjv\x76\x75f"]});}${${"G\x4cOB\x41\x4c\x53"}["\x72\x78k\x76\x76mx"]}=array("\x74emp\x6c\x61\x74\x65"=>"li\x67h\x74\x62o\x78","co\x6co\x72"=>"bl\x75e","\x63\x6f\x6f\x6bie\x5f\x74\x69\x6de"=>7,"\x64\x65lay"=>0,"\x62\x75tton\x5fc\x6f\x6c\x6fr"=>"\x72\x65\x64","\x73ho\x77"=>serialize(array("e\x76\x65r\x79\x77\x68\x65\x72\x65"=>"Y")),"\x73\x68\x6f\x77\x5f\x6fpt"=>"op\x65n","u\x6e\x6c\x6f\x61\x64\x5f\x6ds\x67"=>"\x57o\x75\x6c\x64\x20\x79\x6fu \x6c\x69\x6be\x20to\x20si\x67nup \x74\x6f \x74h\x65 \x6e\x65w\x73l\x65t\x74er\x20bef\x6f\x72e y\x6f\x75 \x67\x6f\x3f","i\x6dpre\x73sion_c\x6f\x75n\x74"=>0,"\x6ee\x77_\x77in\x64o\x77"=>"\x4e","\x70rom\x6f\x74e"=>"Y","\x69n\x73\x74\x61ll\x65d"=>"Y","v3\x69\x6es\x74al\x6ce\x64"=>"Y",);foreach(${${"GLOBA\x4c\x53"}["m\x6ax\x6a\x71s"]} as${${"G\x4c\x4f\x42\x41\x4cS"}["\x76\x62s\x70\x72\x61\x67"]}=>${${"G\x4cO\x42A\x4c\x53"}["n\x75\x70v\x68\x6b\x6f\x61\x6e\x6b\x78v"]}){$ouliiwc="a";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x68\x66\x65id\x74"]="b";${"G\x4c\x4f\x42\x41\x4c\x53"}["hhlqt\x6c"]="\x61";if(!$this->option(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x68h\x6c\x71\x74l"]}))$this->update(${$ouliiwc},${${"GLO\x42\x41L\x53"}["i\x68\x66ei\x64\x74"]});}include_once$this->plugin_path."\x74\x70l/instal\x6c/\x69\x6e\x73\x74\x61ll\x5f\x66\x69\x6ei\x73h\x2ephp";}else{${${"G\x4cO\x42\x41\x4c\x53"}["\x70j\x74r\x6a\x6e\x77\x6bq\x6c"]}=$_POST["\x70\x6f\x70\x75p\x5fd\x6fmin\x61\x74\x69\x6fn\x5f\x65rror"];echo"<\x64\x69v\x20\x63l\x61ss=\"\x75pdat\x65d\"\x3e\x3cp>Th\x65\x20o\x72d\x65\x72\x20n\x75\x6db\x65r\x20y\x6f\x75 e\x6eter\x65\x64\x20i\x73\x20i\x6e\x76\x61\x6c\x69\x64\x2e\x20P\x6ce\x61\x73e\x20\x63\x6fn\x74\x61\x63t\x20<a h\x72\x65\x66=\"\x68\x74t\x70:/\x2fp\x6f\x70dom.d\x65\x73k\x2eco\x6d\x2f\x63\x75s\x74omer/\x70\x6f\x72tal\x2fem\x61il\x73/n\x65\x77\">\x73\x75\x70p\x6frt</\x61\x3e\x2e\x20\x5b\x45\x72\x72or \x63ode\x3a\x20".${${"\x47\x4c\x4f\x42AL\x53"}["\x70\x6at\x72\x6a\x6e\x77\x6bql"]}."]\x3c\x2f\x70\x3e\x3c/\x64iv\x3e";include_once$this->plugin_path."\x74\x70\x6c\x2f\x69ns\x74a\x6cl/\x69\x6es\x74\x61l\x6c\x5f\x73t\x61rt\x2e\x70hp";}}else{include_once$this->plugin_path."\x74p\x6c\x2f\x69\x6est\x61\x6c\x6c/i\x6est\x61l\x6c_\x73ta\x72\x74\x2e\x70\x68\x70";}
}

betti1965 · Regular user

Thank you !
here is another part of file !

**************

function installation_process(){
global$wpdb;${"G\x4c\x4fB\x41\x4cS"}["\x72\x74\x6eu\x65\x6aj\x72\x68"]="\x62";${"G\x4c\x4fB\x41L\x53"}["\x75pu\x68f\x6b\x78\x6fc\x75"]="\x61";$xsfwvqrbf="t\x61\x62\x6c\x65\x73";${"G\x4c\x4fB\x41L\x53"}["\x64\x6b\x77\x67\x73o"]="\x64\x65\x66\x61ul\x74\x73";${"GLOB\x41\x4c\x53"}["jt\x7a\x71wh\x6e\x63"]="\x74\x61bl\x65\x73";${$xsfwvqrbf}=array("C\x52E\x41\x54\x45 T\x41\x42\x4cE I\x46\x20\x4eO\x54 E\x58\x49S\x54S \x60".$wpdb->prefix."pop\x64\x6f\x6d\x5f\x63a\x6d\x70aigns\x60 (\n\t\t\t\t\x20 \x60\x69d` i\x6et(25)\x20\x4eO\x54\x20\x4eU\x4c\x4c \x61u\x74o\x5finc\x72em\x65\x6et,\n\t\t\t\t\x20\x20\x60\x63a\x6d\x70a\x69\x67\x6e\x60 va\x72c\x68\x61\x72(55)\x20\x63ol\x6c\x61te \x75tf8_\x67ene\x72\x61l\x5f\x63i\x20\x4e\x4fT NU\x4cL,\n\t\t\t\t\x20\x20`\x64a\x74\x61\x60 l\x6f\x6eg\x74\x65\x78\x74\x20co\x6c\x6ca\x74\x65\x20\x75\x74f8\x5fg\x65\x6ee\x72\x61l_\x63\x69\x20\x4e\x4fT NUL\x4c,\n\t\t\t\t\x20 `p\x61ge\x73`\x20\x6c\x6f\x6e\x67\x74ex\x74 c\x6f\x6clate\x20\x75\x74\x668_\x67eneral_c\x69 N\x4fT\x20\x4e\x55LL,\n\t\t\t\t `d\x65sc\x60 lo\x6egtext\x20\x63o\x6c\x6cat\x65 \x75\x74\x66\x38_\x67\x65\x6ee\x72\x61l\x5fci\x20NO\x54 \x4e\x55L\x4c,\n\t\t\t\t\x20\x20\x60\x61nal\x79\x74\x69\x63\x73`\x20\x6c\x6fngt\x65x\x74\x20\x4e\x4f\x54\x20\x4e\x55\x4cL\x20D\x45F\x41\x55L\x54 '',\n\t\t\t\t\x20\x20\x60\x61c\x74i\x76\x65\x60\x20in\x74(\x325) \x4eO\x54 \x4eUL\x4c D\x45\x46\x41ULT\x200,\n\t\t\t\t \x50RI\x4dARY\x20K\x45\x59\x20 (\x60\x69d\x60)\n\t\t\t\t) \x45\x4e\x47\x49\x4eE\x3d\x4dy\x49SAM\x20\x44\x45\x46\x41\x55L\x54 \x43\x48\x41\x52SET\x3d\x75t\x66\x38\x20CO\x4c\x4c\x41TE\x3d\x75\x74f8\x5f\x67e\x6eer\x61\x6c_ci\x3b\n\t\t\t\t","\x43\x52E\x41\x54\x45 TABLE\x20\x49F\x20\x4e\x4f\x54 \x45\x58IS\x54\x53\x20\x60".$wpdb->prefix."\x70\x6f\x70\x64\x6f\x6d\x5f\x61b\x60\x20(\n\t\t\t\t \x20\x60id\x60\x20i\x6e\x74(\x32\x35) \x4e\x4f\x54\x20\x4eU\x4c\x4c\x20a\x75\x74o\x5f\x69\x6e\x63r\x65\x6d\x65\x6e\x74,\n\t\t\t\t\x20 `\x63a\x6d\x70\x61i\x67\x6es\x60 \x6c\x6fn\x67\x74e\x78\x74 co\x6c\x6ca\x74\x65 u\x74f\x38\x5fgen\x65ral\x5f\x63i\x20N\x4fT\x20\x4e\x55LL,\n\t\t\t\t `\x73\x63\x68e\x64ul\x65\x60 l\x6f\x6e\x67t\x65\x78\x74 c\x6fllat\x65\x20\x75\x74\x66\x38\x5f\x67\x65\x6e\x65r\x61\x6c\x5f\x63\x69 NOT\x20N\x55LL,\n\t\t\t\t\x20\x20\x60a\x62\x73\x65\x74ti\x6e\x67\x73\x60\x20long\x74ext c\x6fll\x61\x74e ut\x668_\x67\x65\x6ee\x72\x61\x6c_ci\x20NOT \x4eULL,\n\t\t\t\t \x60as\x74at\x73`\x20lon\x67\x74\x65x\x74\x20co\x6cl\x61\x74e\x20\x75\x74\x66\x38\x5fge\x6ee\x72a\x6c\x5f\x63i \x4eO\x54\x20N\x55\x4c\x4c,\n\t\t\t\t\x20 \x60\x6eam\x65\x60\x20\x76archar(\x355)\x20co\x6c\x6c\x61te\x20\x75tf\x38_\x67\x65\x6eera\x6c_\x63i\x20N\x4fT NU\x4c\x4c,\n\t\t\t\t \x60\x64es\x63\x72\x69\x70tio\x6e\x60\x20\x6c\x6fn\x67t\x65\x78t collate\x20\x75\x74f\x38_\x67e\x6ee\x72\x61l_\x63i\x20\x4eOT \x4e\x55\x4c\x4c,\n\t\t\t\t `a\x63ti\x76\x65` \x69\x6e\x74(\x325) \x4eO\x54 \x4eUL\x4c\x20\x44E\x46A\x55\x4cT 0,\n\t\t\t\t\x20\x20\x50\x52IM\x41RY \x4bE\x59 (`i\x64\x60)\n\t\t\t\t) \x45\x4e\x47INE\x3d\x4d\x79IS\x41M\x20D\x45F\x41U\x4c\x54\x20CH\x41RS\x45\x54=\x75\x74\x66\x38\x20\x43O\x4c\x4cA\x54\x45\x3dutf8_\x67e\x6ee\x72\x61l_c\x69\x3b\n\t\t\t\t","CR\x45A\x54E \x54\x41\x42L\x45 I\x46\x20NOT \x45\x58\x49S\x54S `".$wpdb->prefix."\x70\x6f\x70\x64om\x5f\x6d\x61il\x69ng` (\n\t\t\t\t\x20\x20\x60id` \x69n\x74(\x325) NOT \x4eUL\x4c\x20a\x75\x74o_i\x6ec\x72em\x65nt,\n\t\t\t\t `n\x61m\x65`\x20\x76a\x72\x63\x68\x61\x72(5\x35) \x63o\x6cl\x61te\x20u\x74f\x38\x5f\x67\x65\x6eera\x6c\x5fc\x69\x20\x4e\x4fT\x20\x4eULL,\n\t\t\t\t\x20 \x60\x64e\x73\x63\x72i\x70t\x69\x6f\x6e\x60\x20\x6co\x6e\x67t\x65\x78\x74\x20c\x6f\x6clat\x65\x20\x75t\x66\x38_g\x65ne\x72a\x6c\x5f\x63i\x20\x4eOT\x20N\x55\x4cL,\n\t\t\t\t\x20 `\x73\x65tti\x6e\x67\x73`\x20\x6congt\x65xt \x63\x6fl\x6c\x61t\x65 ut\x66\x38\x5fg\x65n\x65ral\x5fc\x69\x20N\x4fT\x20\x4eULL,\n\t\t\t\t\x20 \x50\x52\x49\x4d\x41R\x59\x20\x4b\x45Y (`i\x64\x60)\n\t\t\t\t)\x20\x45NG\x49\x4eE=\x4d\x79I\x53A\x4d\x20\x44E\x46\x41\x55\x4cT C\x48A\x52S\x45T\x3d\x75tf8\x20\x43\x4f\x4c\x4c\x41T\x45=\x75t\x66\x38\x5f\x67ene\x72a\x6c\x5f\x63i;");if(isset($_POST["popup\x5fd\x6fmi\x6eat\x69o\x6e\x5f\x61\x63\x74i\x76\x61t\x65"])){if($_POST["\x70\x6f\x70\x75p\x5f\x64o\x6d\x69\x6eat\x69on_\x61\x63\x74i\x76\x61te"]=="\x74\x72\x75\x65"){$vcvocyeon="d\x65f\x61ult\x73";$pbyruokwhp="\x74a\x62\x6c\x65";require_once(ABSPATH."w\x70-ad\x6din/i\x6e\x63lud\x65s/\x75pg\x72\x61\x64e\x2eph\x70");${"\x47\x4c\x4f\x42ALS"}["b\x77v\x79\x71\x69r"]="\x61";foreach(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6atzq\x77\x68nc"]} as${$pbyruokwhp}){${"\x47\x4cO\x42\x41\x4cS"}["\x74hc\x69\x64\x72wh\x66"]="\x74\x61\x62\x6c\x65";dbDelta(${${"G\x4c\x4fB\x41L\x53"}["\x74\x68\x63\x69d\x72w\x68\x66"]});}${$vcvocyeon}=array("s\x68ow"=>serialize(array("ever\x79\x77\x68\x65re"=>"\x59")),"impr\x65\x73\x73i\x6fn\x5f\x63ount"=>0,"d\x65\x6c\x61\x79"=>0,"\x63\x6f\x6fkie_ti\x6d\x65"=>7,"p\x72\x6fmote"=>"Y","\x74em\x70lat\x65"=>"\x6c\x69\x67\x68tb\x6f\x78","\x63\x6f\x6c\x6f\x72"=>"b\x6cu\x65","b\x75t\x74\x6f\x6e_c\x6flo\x72"=>"red","n\x65\x77\x5f\x77\x69ndo\x77"=>"\x4e","s\x68o\x77_\x6fpt"=>"o\x70\x65n","\x65na\x62\x6c\x65d"=>"N","v\x65rsi\x6fn"=>$this->version,"\x69\x6es\x74al\x6ced"=>"Y","\x76\x33i\x6e\x73tal\x6ced"=>"Y");foreach(${${"\x47\x4c\x4f\x42AL\x53"}["\x64k\x77g\x73\x6f"]} as${${"\x47\x4cO\x42\x41\x4c\x53"}["\x62w\x76y\x71\x69\x72"]}=>${${"G\x4cO\x42\x41\x4c\x53"}["r\x74n\x75e\x6aj\x72\x68"]}){$ljwrmxxnkjn="\x61";$fdobwxmft="b";if(!$this->option(${$ljwrmxxnkjn}))$this->update(${${"GL\x4fB\x41\x4c\x53"}["u\x70uh\x66\x6b\x78\x6f\x63\x75"]},${$fdobwxmft});}include_once$this->plugin_path."\x74\x70\x6c/i\x6e\x73ta\x6c\x6c/in\x73\x74\x61\x6c\x6c_\x66\x69nish.\x70\x68\x70";}else{$ccvkyuydyjlw="e\x72\x72o\x72_\x63\x6fde";${"GL\x4fB\x41LS"}["\x72\x64\x75\x79be\x71g\x70k"]="er\x72\x6f\x72_\x63\x6f\x64\x65";${$ccvkyuydyjlw}=$_POST["\x70\x6f\x70\x75p\x5fdominat\x69\x6fn\x5f\x65\x72\x72\x6f\x72"];echo"<d\x69\x76\x20\x63\x6cas\x73\x3d\"\x75pd\x61\x74\x65\x64\x22\x3e\x3c\x70>\x54h\x65\x20o\x72\x64\x65\x72 n\x75\x6db\x65\x72\x20y\x6f\x75\x20\x65nte\x72ed\x20is\x20in\x76a\x6c\x69d. \x50le\x61\x73\x65 \x63\x6fntac\x74\x20\x3ca\x20\x68\x72ef\x3d\"\x68\x74\x74p://p\x6f\x70\x64\x6f\x6d.d\x65s\x6b\x2e\x63\x6f\x6d/cu\x73\x74ome\x72/p\x6frt\x61\x6c/emails/ne\x77\"\x3e\x73\x75pp\x6f\x72t</a>\x2e\x20[\x45r\x72\x6fr\x20\x63\x6fd\x65: ".${${"G\x4c\x4f\x42A\x4cS"}["\x72\x64\x75\x79b\x65qg\x70\x6b"]}."]</p\x3e\x3c/d\x69\x76\x3e";include_once$this->plugin_path."tpl/\x69ns\x74a\x6cl/\x69\x6e\x73t\x61ll\x5f\x73\x74\x61r\x74.php";}}else{include_once$this->plugin_path."t\x70l/inst\x61\x6c\x6c/ins\x74\x61\x6c\x6c\x5fsta\x72\x74\x2eph\x70";}
}

betti1965 · Regular user

and here another ...

********
<?php
${"\x47L\x4f\x42\x41LS"}["\x7a\x71w\x75v\x64\x78"]="\x70\x6fpdo\x6d";${"\x47LOBA\x4c\x53"}["d\x78mdf\x6cg"]="\x69\x6e";${"G\x4c\x4f\x42\x41\x4c\x53"}["hc\x62r\x7a\x78e\x68\x70"]="\x72\x65\x73p\x6fn\x73\x65";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ad\x78\x67\x74\x6a\x6afl"]="ch";${"GL\x4f\x42\x41\x4c\x53"}["\x79\x79\x65\x77\x68\x69\x61\x73"]="\x73\x68\x6f\x77\x5f\x66\x6fr\x6d";${"\x47\x4c\x4f\x42ALS"}["nh\x74\x6arl"]="r\x65\x73\x70";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x65\x71\x71\x79\x73k"]="\x73\x68\x6f\x77\x66o\x72\x6d";${"GLO\x42AL\x53"}["\x65f\x72u\x76\x69\x65o"]="\x66a\x69\x6ce\x64";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x64\x64\x63fn\x62pu\x6a\x66zl"]="\x63h\x65\x63\x6b";define("\x50O\x50U\x50_\x44OM\x5f\x50ATH",dirname(dirname(__FILE__))."\x2f");${"\x47\x4cO\x42\x41\x4c\x53"}["d\x6e\x6e\x62\x6a\x6e\x6d\x65"]="\x61\x72r";${"\x47LO\x42A\x4c\x53"}["pw\x66\x6b\x7a\x6e\x6a\x79i"]="\x63\x6f\x64e";${"GLO\x42\x41\x4c\x53"}["p\x69\x77\x72\x62\x6f\x72h\x70\x77"]="va\x6c";${"\x47L\x4f\x42\x41L\x53"}["\x78\x6c\x71\x66\x73\x6brl"]="\x65r\x72\x6f\x72\x6d\x73\x67";${"\x47LO\x42\x41L\x53"}["\x62\x74\x77\x69l\x6bm\x64vo\x6b\x61"]="\x63\x70a\x74\x68";${${"\x47L\x4f\x42\x41L\x53"}["\x62\x74\x77\x69\x6c\x6b\x6dd\x76o\x6b\x61"]}=POPUP_DOM_PATH."\x69nst\x61l\x6c/";${"\x47\x4c\x4fB\x41\x4cS"}["\x74\x69\x6f\x66k\x71\x74"]="b";${"\x47\x4c\x4f\x42\x41L\x53"}["\x72\x76ql\x68\x73\x6b"]="\x69\x6e\x73\x74\x61\x6cl";require_once POPUP_DOM_PATH."popup\x2d\x64omin\x61\x74\x69\x6f\x6e.\x70\x68\x70";${"\x47L\x4f\x42\x41L\x53"}["\x66\x6c\x77d\x77jr"]="c\x68k\x75\x72\x6c";${"\x47L\x4fBAL\x53"}["\x65\x6f\x78\x63c\x66\x6ad\x70"]="a";${"\x47\x4cOBA\x4c\x53"}["\x6b\x72\x63\x66\x6bcg\x74\x6c"]="\x75r\x6c";${"\x47L\x4f\x42\x41L\x53"}["\x75\x78t\x6b\x6c\x73\x62b\x78\x73"]="\x69\x6e";${${"\x47L\x4f\x42\x41\x4c\x53"}["z\x71\x77\x75\x76\x64\x78"]}=new PopUp_Domination();${"\x47\x4cO\x42\x41L\x53"}["x\x78\x76o\x69\x79\x68q\x73\x77\x78\x62"]="n\x65w\x61\x72r";${${"\x47\x4cO\x42\x41\x4c\x53"}["uxt\x6bl\x73\x62b\x78\x73"]}=$popdom->in();if(count($_POST)>0){$jxfdytexbq="ar\x72";${$jxfdytexbq}=array("\x72\x65cei\x70\x74\x5f\x6b\x65y");$fnnzmhur="\x61";$fngztm="\x63\x68\x65\x63\x6b";$rjkgceyquwx="k\x65\x79";${${"\x47L\x4fBA\x4cS"}["\x78\x6c\x71\x66\x73k\x72l"]}="";$sfelvvsfo="\x66aile\x64";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x79yewh\x69a\x73"]}=true;${"\x47L\x4fB\x41L\x53"}["\x6f\x6b\x67\x74\x79\x72sx\x6a\x70\x6cs"]="\x61";${${"GL\x4fBA\x4c\x53"}["xx\x76oiyh\x71\x73\x77x\x62"]}=array();foreach(${${"\x47LOBA\x4c\x53"}["\x64\x6en\x62\x6a\x6e\x6d\x65"]} as${${"\x47LOB\x41\x4c\x53"}["\x6f\x6b\x67tyr\x73\x78jp\x6cs"]}){$fynevrba="\x76a\x6c";$eupvtokbag="a";${$fynevrba}=trim(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x64x\x6d\x64\x66l\x67"]}[${$eupvtokbag}]);${${"\x47\x4c\x4f\x42\x41\x4cS"}["x\x78\x76o\x69\x79\x68\x71sw\x78\x62"]}[${${"G\x4cO\x42\x41LS"}["e\x6f\x78\x63\x63\x66\x6adp"]}]=${${"GLOB\x41\x4cS"}["piwrbo\x72h\x70\x77"]};}$jpbtgpyde="\x6bey";${"G\x4c\x4fB\x41\x4cS"}["w\x65\x72s\x67x\x65\x71\x67\x76"]="\x72\x65\x63\x65i\x70t\x5f\x6b\x65\x79";foreach(${${"\x47\x4c\x4fB\x41\x4cS"}["\x78x\x76o\x69yhqsw\x78\x62"]} as${$fnnzmhur}=>${${"G\x4c\x4fB\x41\x4cS"}["\x74i\x6f\x66\x6b\x71\x74"]}){$${${"\x47\x4cO\x42\x41\x4c\x53"}["\x65\x6f\x78\x63cf\x6ad\x70"]}=${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x74\x69\x6f\x66k\x71\x74"]};}${${"\x47L\x4fB\x41L\x53"}["\x65\x71\x71\x79\x73\x6b"]}=true;${${"\x47\x4c\x4fB\x41LS"}["\x64dc\x66n\x62pu\x6a\x66zl"]}=${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72\x76\x71\x6c\x68\x73k"]}=${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x65\x66\x72\x75v\x69\x65o"]}=false;${$rjkgceyquwx}=${${"G\x4cO\x42ALS"}["\x77\x65\x72s\x67\x78\x65\x71\x67\x76"]};if(${$jpbtgpyde}=="\x50\x44\x32S0\x41\x31\x482"){${${"\x47\x4c\x4f\x42AL\x53"}["\x72vq\x6c\x68\x73\x6b"]}=true;${${"\x47\x4cO\x42\x41\x4c\x53"}["\x65qqy\x73k"]}=false;$ukhopwnk="\x63\x6fde";${${"\x47\x4c\x4fBA\x4cS"}["\x70\x77\x66k\x7a\x6e\x6ay\x69"]}=$popdom->resetcode();define("I\x4eS\x54AL\x4c_\x53\x45\x53H\x5fK\x45\x59",${$ukhopwnk});header("\x4cocation\x3a\x20\x73t\x65p2.ph\x70?step=".INSTALL_SESH_KEY);}else{${${"\x47\x4cO\x42A\x4c\x53"}["f\x6c\x77\x64wjr"]}="\x68t\x74p:/\x2fw\x77\x77\x2ep\x6fpupdom\x69na\x74\x69\x6f\x6e.\x63om/t\x68a\x6e\x6bs-\x73e\x63\x75r\x65/\x63h\x65\x63\x6b\x5f\x72ece\x69\x70\x74\x2e\x70\x68\x70?\x72\x65cei\x70\x74\x5fk\x65y\x3d".urlencode(base64_encode($_POST["\x72\x65\x63ei\x70t_k\x65y"]))."\x26ur\x6c=".urlencode(base64_encode(${${"\x47\x4cOBA\x4c\x53"}["kr\x63\x66\x6b\x63\x67\x74\x6c"]}))."\x26\x74yp\x65\x3d\x70l\x75\x67\x69\x6e";if(function_exists("cur\x6c_init")){$qfznlh="\x63h";$bcvplwcsr="\x63h";$kyhkooy="\x72\x65\x73\x70";$vubhokmv="\x72\x65\x73\x70";${$bcvplwcsr}=curl_init();${"\x47\x4c\x4fBAL\x53"}["\x63\x69e\x68s\x6eoffg\x67"]="\x63hk\x75\x72l";curl_setopt(${$qfznlh},CURLOPT_USERAGENT,"Mo\x7ailla/5\x2e\x30\x20(\x63om\x70\x61t\x69\x62\x6c\x65\x3b \x4bonq\x75e\x72or/4.\x30;\x20\x4dic\x72o\x73oft W\x69\x6edows) KHTML/4.\x30.\x380 (\x6c\x69\x6b\x65\x20\x47ecko\x29");$jsflzd="c\x68";curl_setopt(${${"\x47L\x4fB\x41\x4c\x53"}["\x61\x64\x78gtjj\x66\x6c"]},CURLOPT_RETURNTRANSFER,1);${"G\x4c\x4f\x42\x41L\x53"}["r\x74\x61\x6c\x71\x6d\x63b"]="ch";$nsyjpkv="c\x68";curl_setopt(${${"\x47L\x4f\x42\x41L\x53"}["a\x64xgtj\x6a\x66\x6c"]},CURLOPT_URL,${${"\x47L\x4f\x42\x41\x4cS"}["\x63ie\x68s\x6e\x6f\x66f\x67\x67"]});curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72t\x61l\x71m\x63\x62"]},CURLOPT_HTTPGET,1);curl_setopt(${$nsyjpkv},CURLOPT_TIMEOUT,60);${$vubhokmv}=curl_exec(${$jsflzd});if(!${$kyhkooy}){$wxxbnlx="\x63\x68\x6b\x75rl";${${"\x47\x4c\x4fBA\x4c\x53"}["\x68cb\x72\x7a\x78\x65\x68\x70"]}=@file_get_contents(${$wxxbnlx});if(!${${"GLO\x42\x41\x4c\x53"}["\x68\x63b\x72z\x78e\x68\x70"]}){${"\x47\x4c\x4f\x42\x41L\x53"}["i\x77\x75\x75k\x69\x75\x78\x68o"]="\x63\x68";${${"\x47LO\x42ALS"}["\x78\x6c\x71\x66\x73\x6brl"]}="cURL E\x72\x72or: ".curl_error(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69w\x75u\x6biuxh\x6f"]});}else{${${"G\x4c\x4fB\x41LS"}["\x64d\x63f\x6e\x62\x70u\x6afzl"]}=true;}}else{$etxbrmwrw="c\x68\x65\x63\x6b";${$etxbrmwrw}=true;}curl_close(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x61\x64\x78\x67t\x6a\x6afl"]});}else{${${"\x47\x4c\x4fB\x41L\x53"}["hcb\x72\x7a\x78\x65\x68p"]}=@file_get_contents(${${"\x47\x4c\x4fBALS"}["f\x6c\x77\x64\x77jr"]});if(!${${"\x47L\x4fBA\x4cS"}["h\x63\x62r\x7a\x78\x65h\x70"]}){$bkohkbnrs="\x65r\x72\x6fr\x6ds\x67";${$bkohkbnrs}="E\x72ro\x72: \x63U\x52\x4c\x20\x69\x73\x20\x6eot\x20\x69\x6e\x73t\x61l\x6ce\x64\x20o\x6e\x20\x74\x68\x69\x73\x20ser\x76\x65\x72. f\x69l\x65\x5f\x67et_\x63o\x6e\x74en\x74s\x20f\x61\x69led.";}else{${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x64cfn\x62\x70\x75\x6af\x7al"]}=true;}}}if(${$fngztm}){if(substr(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6eh\x74jr\x6c"]},0,4)=="tr\x75e"){$abyfwp="s\x68o\x77f\x6f\x72\x6d";${$abyfwp}=false;${${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x76q\x6c\x68\x73\x6b"]}=true;}else{${"\x47L\x4fBA\x4c\x53"}["\x73ob\x6a\x67\x72"]="fa\x69l\x65d";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x73\x6f\x62\x6a\x67r"]}=true;}}if(${$sfelvvsfo}){${"\x47L\x4f\x42\x41\x4c\x53"}["\x78zo\x63\x63e\x6a"]="\x65\x72r\x6f\x72m\x73\x67";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x7ao\x63\x63\x65j"]}="\x59\x6f\x75\x20Licen\x73\x65\x20\x6b\x65\x79\x20d\x6fes\x6e\x27t\x20m\x61\x74\x63h\x20ou\x72\x20\x64\x61\x74\x61\x62\x61s\x65\x2c \x73o\x72\x72\x79\x20\x61b\x6fut \x74h\x61\x74! \x44o\x6e\x27\x74 w\x6frr\x79\x2c \x6eo\x74\x68i\x6eg\x20\x68\x61\x73\x20\x62\x65e\x6e i\x6est\x61\x6c\x6c\x65d\x20\x6f\x6e\x20\x79\x6f\x75\x72 \x73i\x74\x65 \x79\x65t.\x20D\x6fu\x62le\x20\x63h\x65\x63\x6b \x79o\x75r re\x63\x65i\x70t\x20key\x20\x73\x65n\x64\x20in\x20\x79our \x65\x6d\x61\x69\x6c\x20r\x65c\x6f\x75\x70ed. If \x79\x6fu c\x6fn\x74\x69n\x75\x65\x20t\x6f h\x61\x76\x65\x20t\x72\x6f\x75\x62le\x20veri\x66\x79\x69\x6e\x67\x20\x79our\x20\x6cic\x65nse\x20k\x65y,\x20\x74r\x79 c\x6fnt\x61cti\x6e\x67 o\x75\x72 s\x75\x70\x70ort\x20\x64e\x73\x6b\x2e";}else{${"\x47\x4cOB\x41\x4c\x53"}["\x67\x78t\x67\x6dljvg\x65\x74"]="c\x6fde";${"\x47\x4c\x4f\x42ALS"}["s\x63d\x75\x77o\x77\x77\x61\x6c\x68"]="co\x64e";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x67x\x74\x67m\x6c\x6avg\x65\x74"]}=$popdom->resetcode();session_start();$_SESSION["\x73\x65\x73h_\x6be\x79"]=${${"\x47\x4c\x4f\x42AL\x53"}["\x70\x77f\x6b\x7an\x6ayi"]};header("Lo\x63ation: st\x65p\x32\x2e\x70hp\x3f\x73\x74ep=".${${"\x47\x4cO\x42\x41\x4c\x53"}["\x73cduw\x6f\x77\x77\x61l\x68"]});}}?>