HEX
Server: Apache
System: Linux host17.registrar-servers.com 4.18.0-513.18.1.lve.2.el8.x86_64 #1 SMP Sat Mar 30 15:36:11 UTC 2024 x86_64
User: shrsglobal (7178)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: //var/softaculous/webasyst/update_antibot.php
<?php
@unlink('update_antibot.php');

function __getRandomHexString($length = 64)
    {
        if (!__wa_is_int($length) || $length <= 0) {
            $length = 64;
        }

        // we will bin2hex and byte is 2 hex digit, so make a little correction and than, before method returns, make correction back
        $is_even = $length % 2 === 0;
        if (!$is_even) {
            $length += 1;
        }

        if (function_exists('random_bytes')) {
            try {

                $result = bin2hex(random_bytes($length / 2));

                // make a correction back
                if (!$is_even) {
                    $result = substr($result, 1);
                }

                return $result;
            } catch (Exception $e) {
            }
        }

        if (function_exists('openssl_random_pseudo_bytes')) {
            $result = openssl_random_pseudo_bytes($length / 2);
            if ($result) {
                $result = bin2hex($result);

                // make a correction back
                if (!$is_even) {
                    $result = substr($result, 1);
                }

                return $result;
            }
        }

        $bytes = [];
        if (function_exists('random_int')) {
            $fn = 'random_int';
        } elseif (function_exists('mt_rand')) {
            $fn = 'mt_rand';
        } else {
            $fn = 'rand';
        }

        for ($i = 0, $n = $length / 2; $i < $n; $i++) {
            $bytes[] = chr($fn(0, 255));   // gen one byte
        }

        $bytes = join('',$bytes);

        $result = bin2hex($bytes);

        // make a correction back
        if (!$is_even) {
            $result = substr($result, 1);
        }

        return $result;
}

function __wa_is_int($val)
{
    // check against objects to avoid nasty object to int conversion errors
    if (!is_numeric($val)) {
        return false;
    }
    // Test for very large integers
    if (function_exists('ctype_digit')) {
        $val = (string) $val;
        if (ctype_digit($val)) {
            return true;
        } else if ($val && $val[0] == '-' && ctype_digit(substr($val, 1))) {
            return true;
        }
    }
    // typecast trick works fine for anything else except boolean true
    return ($val !== true) && ((string)(int) $val) === ((string) $val);
}

$empty_field_name = serialize('!f'. __getRandomHexString(6));
$filled_field_name = serialize('!f'. __getRandomHexString(6));
$filled_field_value = serialize(__getRandomHexString(32));

echo '<empty_field_name>'.$empty_field_name.'</empty_field_name>';
echo '<filled_field_name>'.$filled_field_name.'</filled_field_name>';
echo '<filled_field_value>'.$filled_field_value.'</filled_field_value>';

?>