<?php
$t=$_GET['token']??'';
foreach(glob('uploads/*.json') as $m){
 $j=json_decode(file_get_contents($m),true);
 if($j['delete_token']===$t){
   @unlink('uploads/'.$j['id'].'.bin');
   @unlink($m);
   die('Deleted');
 }
}
echo 'Invalid token';