[rapidleech][u] mediafire.com_member.php

<?php
######## Account Info ########
$upload_acc['mediafire_com']['user'] = ''; //Set your login
$upload_acc['mediafire_com']['pass'] = ''; //Set your password
########################

// Uncomment the next line to force default upload settings: Instant Upload: ON and Default Action on Duplicate Name: Skip Upload
// define('MF_forceDefaultUploadOptions');

$_GET['proxy'] = isset($_GET['proxy']) ? $_GET['proxy'] : '';
$not_done = true;

$cURL = $options['use_curl'] && extension_loaded('curl') && function_exists('curl_init') && function_exists('curl_exec') ? true : false;
$chttps = false;
if ($cURL) {
    $cV = curl_version();
    if (in_array('https', $cV['protocols'], true)) $chttps = true;
}
if (!extension_loaded('openssl') && !$chttps) html_error('You need to install/enable PHP\'s OpenSSL extension to support HTTPS connections.');
elseif (!$chttps) $cURL = false;

/* Not Final */
if (!function_exists('curl_upfile')) {
    function curl_upfile($host, $port, $url, $referer, $cookie, $post, $file, $filename, $fieldname, $field2name = '', $proxy = 0, $pauth = 0, $upagent = 0, $scheme = 'http') {
        static $ch;
        if (empty($upagent)) $upagent = rl_UserAgent;
        $scheme = strtolower("$scheme://");
        $fileSize = filesize($file);

        if (!is_readable($file)) return html_error(sprintf(lang(65), $file));
        if ($scheme == 'https://' && ($port == 0 || $port == 80)) $port = 443;
        elseif ($port == 0) $port = 80;

        if (!extension_loaded('curl') || !function_exists('curl_init') || !function_exists('curl_exec')) return html_error('cURL isn\'t enabled or cURL\'s functions are disabled');
        $arr = explode("\r\n", $referer);
        $header = array();
        if (count($arr) > 1) {
            $referer = $arr[0];
            unset($arr[0]);
            $header = array_filter(array_map('trim', $arr));
        }
        $opt = array(CURLOPT_HEADER => 1, CURLOPT_SSL_VERIFYPEER => 0,
            CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_RETURNTRANSFER => 1,
            CURLOPT_FOLLOWLOCATION => 0, CURLOPT_FAILONERROR => 1,
            CURLOPT_FORBID_REUSE => 0, CURLOPT_FRESH_CONNECT => 0,
            CURLINFO_HEADER_OUT => 1, CURLOPT_URL => $scheme . $host . ($port != 80 && $port != 443 ? ":" . $port : "") . str_replace(array(' ', "\r", "\n"), array('%20'), $url),
            CURLOPT_USERAGENT => $upagent);

        $opt[CURLOPT_REFERER] = !empty($referer) ? $referer : false;
        $opt[CURLOPT_COOKIE] = !empty($cookie) ? (is_array($cookie) ? CookiesToStr($cookie) : trim($cookie)) : false;

        if (!empty($_GET['useproxy']) && !empty($_GET['proxy'])) {
            $opt[CURLOPT_HTTPPROXYTUNNEL] = ($scheme == 'https://') ? true : false;
            // $opt[CURLOPT_HTTPPROXYTUNNEL] = false; // Uncomment this line for disable https proxy over curl.
            $opt[CURLOPT_PROXY] = $_GET['proxy'];
            $opt[CURLOPT_PROXYUSERPWD] = (!empty($pauth) ? base64_decode($pauth) : false);
        } else $opt[CURLOPT_PROXY] = false;

        // Send more headers...
        $headers = array('Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'Accept-Language: en-US;q=0.7,en;q=0.3', 'Pragma: no-cache', 'Cache-Control: no-cache', 'Connection: Close');
        if (empty($opt[CURLOPT_REFERER])) $headers[] = 'Referer:';
        if (empty($opt[CURLOPT_COOKIE])) $headers[] = 'Cookie:';
        if (!empty($opt[CURLOPT_PROXY]) && empty($opt[CURLOPT_PROXYUSERPWD])) $headers[] = 'Proxy-Authorization:';
        if (count($header) > 0) $headers = array_merge($headers, $header);
        $opt[CURLOPT_HTTPHEADER] = $headers;

        $opt[CURLOPT_HTTPAUTH] = false;

        if (empty($post)) $post = array();
        $opt[CURLOPT_POST] = 1;
        if (!is_array($post)) return html_error('Error: $post must be a array!');
        if (function_exists('curl_file_create')) {
            $post[$fieldname] = curl_file_create($file);
        } else {
            $post = array_map(function($val) {
                return ltrim($val, '@');
            }, $post);
            $post[$fieldname] = sprintf('@%s;filename=%s', realpath($file), $filename);
            if (defined('CURLOPT_SAFE_UPLOAD')) $opt['CURLOPT_SAFE_UPLOAD'] = false;
        }
        $opt[CURLOPT_POSTFIELDS] = $post;

        // Progress bar
        $opt[CURLOPT_NOPROGRESS] = false;
        $opt[CURLOPT_BUFFERSIZE] = GetChunkSize($fileSize);
        $opt[CURLOPT_PROGRESSFUNCTION] = function($ch, $download_size = 0, $downloaded = 0, $upload_size = 0, $uploaded = 0) {
            if (version_compare(PHP_VERSION, '5.5.0') < 0) {
                $uploaded = $upload_size;
                $upload_size = $downloaded;
                $downloaded = $download_size;
                $download_size = $ch;
            }
            static $lastUploaded = 0;
            static $time = 0;
            static $lastChunkTime;
            if (!isset($lastChunkTime)) $lastChunkTime = microtime(true);

            if ($uploaded != $lastUploaded && (time() > $time || $uploaded == $upload_size)) {
                $mtime = microtime(true);
                $ctime = $mtime - $lastChunkTime;
                $ctime = ($ctime > 0) ? $ctime : 1;
                $lastChunkTime = $mtime;
                $speed = round(($uploaded - $lastUploaded) / 1024 / $ctime, 2);
                $progress = min(round(($uploaded / $upload_size) * 100, 2), 100);
                echo "<script type='text/javascript'>pr('$progress', '" . bytesToKbOrMbOrGb($uploaded) . "', '$speed');</script>\n";
                flush();
                $lastUploaded = $uploaded;
                $time = time();
            }
        };

        $opt[CURLOPT_CONNECTTIMEOUT] = $opt[CURLOPT_TIMEOUT] = 120;

        // Creating curl resource
        if (!isset($ch)) $ch = curl_init();

        foreach ($opt as $O => $V) curl_setopt($ch, $O, $V); // Using this instead of 'curl_setopt_array'

        if ($proxy) echo '<p>' . sprintf(lang(89), $proxyHost, $proxyPort) . '<br />UPLOAD: <b>' . htmlspecialchars($url) . "</b>...<br />\n";
        else echo '<p>'.sprintf(lang(90), $host, $port).'</p>';

        echo(lang(104) . ' <b>' . htmlspecialchars($filename) . '</b>, ' . lang(56) . ' <b>' . bytesToKbOrMbOrGb($fileSize) . '</b>...<br />');
        $GLOBALS['id'] = md5(time() * rand(0, 10));
        require (TEMPLATE_DIR . '/uploadui.php');
        flush();

        $page = curl_exec($ch);
        $info = curl_getinfo($ch);
        $errz = curl_errno($ch);
        $errz2 = curl_error($ch);
        curl_close($ch);

        if ($errz != 0) return html_error("[cURL-Upload:$errz] $errz2");

        if (substr($page, 9, 3) == '100' || !empty($opt[CURLOPT_HTTPPROXYTUNNEL])) $page = preg_replace("@^HTTP/1\.[01] \d{3}(?:\s[^\r\n]+)?\r\n\r\n(HTTP/1\.[01] \d+ [^\r\n]+)@i", "$1", $page, 1); // The "100 Continue" or "200 Connection established" can break some functions in plugins, lets remove it...
        return $page;
    }
}

if ($upload_acc['mediafire_com']['user'] && $upload_acc['mediafire_com']['pass']) {
    $default_acc = true;
    $_REQUEST['up_login'] = $upload_acc['mediafire_com']['user'];
    $_REQUEST['up_pass'] = $upload_acc['mediafire_com']['pass'];
    $_REQUEST['action'] = 'FORM';
    echo "<b><center>Using Default Login.</center></b>\n";
} else $default_acc = false;

if (empty($_REQUEST['action']) || $_REQUEST['action'] != 'FORM') {
    echo "<table border='0' style='width:270px;' cellspacing='0' align='center'>
    <form method='POST'>
    <input type='hidden' name='action' value='FORM' />
    <tr><td style='white-space:nowrap;'>&nbsp;Login*</td><td>&nbsp;<input type='text' name='up_login' value='' style='width:160px;' /></td></tr>
    <tr><td style='white-space:nowrap;'>&nbsp;Password*</td><td>&nbsp;<input type='password' name='up_pass' value='' style='width:160px;' /></td></tr>\n";
    echo "<tr><td colspan='2' align='center'><br /><input type='submit' value='Upload' /></td></tr>\n";
    echo "<tr><td colspan='2' align='center'><small>*You can set it as default in <b>".basename(__FILE__)."</b></small></td></tr>\n";
    echo "</table>\n</form>\n";
} else {
    $login = $not_done = false;
    $domain = 'www.mediafire.com';
    $referer = "https://$domain/";
    $app = array('id' => '44595', 'api_version' => '1.5'); // Application ID for MediaFire's API @ https://www.mediafire.com/#settings/applications

    // Login
    echo "<table style='width:600px;margin:auto;'>\n<tr><td align='center'>\n<div id='info' width='100%' align='center'>Login to $domain</div>\n";

    $cookie = array();
    if (!empty($_REQUEST['up_login']) && !empty($_REQUEST['up_pass'])) {
        if (!empty($_REQUEST['A_encrypted'])) {
            $_REQUEST['up_login'] = decrypt(urldecode($_REQUEST['up_login']));
            $_REQUEST['up_pass'] = decrypt(urldecode($_REQUEST['up_pass']));
            unset($_REQUEST['A_encrypted']);
        }
        Login($_REQUEST['up_login'], $_REQUEST['up_pass']);
        $login = true;
    } else html_error('Login failed: User/Password empty.');

    // Hashing File
    echo "<script type='text/javascript'>document.getElementById('info').innerHTML = 'Hashing File';</script>\n";

    $fileHash = (in_array('sha256', hash_algos()) ? hash_file('sha256', $lfile, false) : ''); // sha256 is needed for Instant upload and extra checks.

    // Preparing Upload
    echo "<script type='text/javascript'>document.getElementById('info').innerHTML = 'Preparing Upload';</script>\n";

    $uploadCheck = array_map('strtolower_nr', mf_apireq('upload/check', array('size' => $fsize, 'hash' => $fileHash, 'filename' => $lname)));
    mf_checkErrors($uploadCheck, 'Pre-Upload Check Error');

    if ($uploadCheck['storage_limit_exceeded'] == 'yes') html_error('User storage limit exceeded.');
    if ($fsize > $uploadCheck['available_space']) html_error('User does not have enough space for this file.'); // $fsize > ($uploadCheck['storage_limit'] - $uploadCheck['used_storage_size'])

    if (!empty($fileHash) && $uploadCheck['file_exists'] == 'yes' && !empty($uploadCheck['different_hash']) && $uploadCheck['different_hash'] == 'no') html_error('A file with the same name already exists in your root directory and it\'s contents are identical.');

    if (!defined('MF_forceDefaultUploadOptions')) {
        $uploadPrefs = array_map('strtolower', mf_apireq('upload/get_options'));
        mf_checkErrors($uploadPrefs, 'Cannot Get Upload Preferences');
    } else $uploadPrefs = array('disable_instant' => 'no', 'action_on_duplicate' => 'skip');

    if ($uploadCheck['file_exists'] == 'yes' && $uploadPrefs['action_on_duplicate'] == 'skip') html_error('A file with the same name already exists in your root directory.');

    if ($uploadCheck['hash_exists'] == 'yes' && $uploadPrefs['disable_instant'] == 'no') {
        // Instant Upload
        echo "<script type='text/javascript'>document.getElementById('info').innerHTML = 'Instant Upload Mode';</script>\n";

        $instantUpload = mf_apireq('upload/instant', array('size' => $fsize, 'hash' => $fileHash, 'filename' => $lname, 'action_on_duplicate' => $uploadPrefs['action_on_duplicate']));
        mf_checkErrors($instantUpload, 'Instant Upload Error');

        if (empty($instantUpload['quickkey'])) html_error('Instant Upload: quickkey not found.');
        $download_link = "$referer?" . $instantUpload['quickkey'];
        return; // Stop this include
    }

    // Uploading
    echo "<script type='text/javascript'>document.getElementById('info').style.display = 'none';</script>\n";

    // action_token
    $getAToken = mf_apireq('user/get_action_token', array('type' => 'upload', 'lifespan' => 1440)); //24 Hours Lifespan
    mf_checkErrors($getAToken, 'Error Getting Action Token');

    $up_url = $referer . "api/{$app['api_version']}/upload/simple.php?response_format=json&session_token={$getAToken['action_token']}&action_on_duplicate=" . $uploadPrefs['action_on_duplicate'];

    $url = parse_url($up_url);
    $upfiles = curl_upfile($url['host'], defport($url), $url['path'].(!empty($url['query']) ? '?'.$url['query'] : ''), $referer.(!empty($fileHash) ? "\r\nX-Filehash: $fileHash" : ''), 0, 0, $lfile, $lname, 'Filedata', '', $_GET['proxy'], $pauth, 0, $url['scheme']);

    // Upload Finished
    echo "<script type='text/javascript'>document.getElementById('progressblock').style.display='none';</script>\n";

    is_page($upfiles);

    $status = intval(substr($upfiles, 9, 3));
    if ($status >= 500) $ulResult = array('result' => 'Error', 'error' => $status, 'message' => "Upload: HTTP Error $status.");
    else {
        $ulResult = Get_Reply($upfiles);
        if (count($ulResult) == 1 && !empty($ulResult['response'])) $ulResult = $ulResult['response'];
    }
    mf_checkErrors($ulResult, $prefix = 'Upload error');

    if (empty($ulResult['doupload']['key'])) html_error('Upload error: Key not found.');

    // Kill Action Token and test the Session Token with it too
    $test = mf_apireq('user/destroy_action_token', array('action_token' => $getAToken['action_token']));
    if (strtolower($test['result']) == 'error' && $test['error'] == '105') {
        // Re-Login
        Login($_REQUEST['up_login'], $_REQUEST['up_pass']);
        mf_apireq('user/destroy_action_token', array('action_token' => $getAToken['action_token']));
    }

    // Pool Upload
    echo "<div id='T8_div' width='100%' align='center'>Checking Finished Upload : Try <span id='T8_try'>0</span><br /><span id='T8_status'></span></div>\n";

    $x = 1;
    do {
        echo "<script type='text/javascript'>document.getElementById('T8_try').innerHTML = '$x';</script>\n";

        sleep($x + 5);
        $poll_upload = mf_apireq('upload/poll_upload', array('key' => $ulResult['doupload']['key']));
        mf_checkErrors($poll_upload, 'Error Saving File');

        echo "<script type='text/javascript'>document.getElementById('T8_status').innerHTML += '" . htmlspecialchars($poll_upload['doupload']['description'], ENT_QUOTES) . "<br />';</script>\n";

        if (!empty($poll_upload['doupload']['fileerror'])) {
            $err = "Uploaded File Error: [{$poll_upload['doupload']['error']}]";
            switch ($poll_upload['doupload']['error']) {
                default: $err .= ($poll_upload['doupload']['description'] ? $poll_upload['doupload']['description'] : '*No description for this error*');break;
                case 1: $err .= 'File is larger than the maximum filesize allowed';break;
                case 2: $err .= 'File size cannot be 0';break;
                case 3: case 4:
                case 9: $err .= 'Found a bad RAR file';break;
                case 5: $err .= 'Virus found';break;
                case 6: case 8:
                case 10: $err .= 'Unknown internal error';break;
                case 7: $err .= 'File hash or size mismatch';break;
                case 12: $err .= 'Failed to insert data into database';break;
                case 13: $err .= 'File name already exists in the same parent folder, skipping';break;
                case 14: $err .= 'Destination folder does not exist';break;
                case 15: $err .= 'Account storage limit is reached';break;
                case 16: $err .= 'There was a file update revision conflict';break;
                case 17: $err .= 'Error patching delta file';break;
                case 18: $err .= 'Account is blocked';break;
                case 19: $err .= 'Failure to create path';break;
            }
            html_error("$err.");
        }
    } while ($x++ < 20 && $poll_upload['doupload']['status'] != '99');

    if (empty($poll_upload['doupload']['quickkey'])) html_error('Upload: quickkey not found.');
    $download_link = "$referer?" . $poll_upload['doupload']['quickkey'];
}

function Login($user, $pass) {
    $post = array();
    $post['email'] = $user;
    $post['password'] = $pass;
    $post['application_id'] = $GLOBALS['app']['id'];
    $post['signature'] = sha1($user . $pass . $GLOBALS['app']['id']);
    $post['token_version'] = 1;

    $login = mf_apireq('user/get_session_token', $post);
    mf_checkErrors($login, 'Login Error');
    if (empty($login['session_token'])) html_error('Session Token not Found.');
    $GLOBALS['app']['session_token'] = $login['session_token'];

    if (!empty($login['current_api_version']) && $login['current_api_version'] != $GLOBALS['app']['api_version']) $GLOBALS['app']['new_api_version'] = $login['current_api_version'];

    return true;
}

function Get_Reply($content) {
    if (!function_exists('json_decode')) html_error('Error: Please enable JSON in PHP.');
    $content = ltrim($content);
    if (($pos = strpos($content, "\r\n\r\n")) > 0) $content = trim(substr($content, $pos + 4));
    $cb_pos = strpos($content, '{');
    $sb_pos = strpos($content, '[');
    if ($cb_pos === false && $sb_pos === false) html_error('JSON start braces not found.');
    $sb = ($cb_pos === false || $sb_pos < $cb_pos) ? true : false;
    $content = substr($content, strpos($content, ($sb ? '[' : '{')));$content = substr($content, 0, strrpos($content, ($sb ? ']' : '}')) + 1);
    if (empty($content)) html_error('No JSON content.');
    $rply = json_decode($content, true);
    if ($rply === null) html_error('Error reading JSON.');
    return $rply;
}

function mf_checkErrors($reply, $prefix = 'Error') {
    if (strtolower($reply['result']) != 'error' || (!empty($reply['doupload']['result']) && is_numeric($reply['doupload']['result']) && $reply['doupload']['result'] >= 0)) return;
    if (!empty($reply['error'])) {
        $err = "$prefix: [{$reply['error']}]: ";
        switch ($reply['error']) {
            default: $err .= ($reply['message'] ? $reply['message'] : '*No message for this error*');break;
            case 101:
            case 900: $err .= 'API temporarily not available, please try again later';break;
            case 107: $err .= 'Email/Password incorrect';break;
            case 108: $err .= 'Invalid User/Email';break;
            // HTTP Errors
            case 500: $err .= 'Server error while processing your request, please try again later';break;
            case 503: $err .= 'API temporarily not available, please try again later';break;
        }
    } else {
        $err = "$prefix: [{$reply['doupload']['error']}]: ";
        switch ($reply['doupload']['error']) {
            default: $err .= ($reply['doupload']['description'] ? $reply['doupload']['description'] : '*No description for this error*');break;
            case -20: $err .= 'Invalid Upload Key';break;
            case -80: $err .= 'Upload Key not Found';break;
            case -701:
            case -881: $err .= 'Maximum file size for free users exceeded';break;
            case -700:
            case -882: $err .= 'Maximum file size exceeded';break;
        }
    }
    if (!empty($GLOBALS['app']['new_api_version'])) echo "\n<span>Current API Used: " . htmlspecialchars($GLOBALS['app']['api_version']) . "<br />Lastest API Available: " . htmlspecialchars($GLOBALS['app']['new_api_version']) . "</span>\n";
    html_error("$err.");
}

function mf_apireq($action, $post = array()) {
    if (!function_exists('json_encode')) html_error('Error: Please enable JSON in PHP.');
    if (!is_array($post)) html_error('mf_apireq: Parameter 2 must be passed as an array.');

    $post['response_format'] = 'json'; // Get API replies in json
    if (in_array($action, array('user/get_session_token', 'upload/poll_upload'))) unset($post['session_token']);
    else if (empty($post['session_token']) && !empty($GLOBALS['app']['session_token'])) $post['session_token'] = $GLOBALS['app']['session_token'];
    $post = array_map('urlencode', array_filter($post));

    $path = "api/{$GLOBALS['app']['api_version']}/$action.php";
    if ($GLOBALS['cURL']) $page = cURL($GLOBALS['referer'] . $path, 0, $post, $GLOBALS['referer']);
    else {
        $page = geturl($GLOBALS['domain'], 443, "/$path", $GLOBALS['referer'], 0, $post, 0, $_GET['proxy'], $GLOBALS['pauth'], 0, 'https');
        is_page($page);
    }

    $status = intval(substr($page, 9, 3));
    if ($status >= 500) return array('result' => 'Error', 'error' => $status, 'message' => "mf_apireq: HTTP Error $status.");

    $json = Get_Reply($page);
    if (count($json) == 1 && !empty($json['response'])) $json = $json['response'];
    return $json;
}

function strtolower_nr($str) {
    return (is_string($str) ? strtolower($str) : $str);
}

//[18-2-2015]  Written by Th3-822.
//[30-12-2017] Updated API to 1.5 & small fixes. - Th3-822
//[24-1-2018] Fixed upload token expiring issues & small fixes. - Th3-822
//[03-6-2018] Switched to www. domain & use cURL for upload (Requires PHP 5.4 for Progress Bar to Work, iirc) & spamming GH with issues won't make this fixed early. - Th3-822
//[08-6-2018] Fixed filenames on upload. - Th3-822