<?php
session_start();
function proccess($ighost, $useragent, $url, $cookie = 0, $data = 0, $httpheader = array(), $proxy = 0, $userpwd = 0, $is_socks5 = 0){
	$url = $ighost ? 'https://i.instagram.com/api/v1/' . $url : $url;
	$ch = curl_init($url);
	curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
	curl_setopt($ch, CURLOPT_TIMEOUT, 20);
	if($proxy) curl_setopt($ch, CURLOPT_PROXY, $proxy);
	if($userpwd) curl_setopt($ch, CURLOPT_PROXYUSERPWD, $userpwd);
	if($is_socks5) curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
	if($httpheader) curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
	curl_setopt($ch, CURLOPT_HEADER, 1);
	if($cookie) curl_setopt($ch, CURLOPT_COOKIE, $cookie);
	if ($data):
		curl_setopt($ch, CURLOPT_POST, 1);
		curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
	endif;
	$response = curl_exec($ch);
	$httpcode = curl_getinfo($ch);
	if(!$httpcode) return false; else{
		$header = substr($response, 0, curl_getinfo($ch, CURLINFO_HEADER_SIZE));
		$body = substr($response, curl_getinfo($ch, CURLINFO_HEADER_SIZE));
		curl_close($ch);
		return array($header, $body);
	}
}
function generate_useragent($sign_version = '6.22.0'){
	$resolusi = array('1080x1776','1080x1920','720x1280', '320x480', '480x800', '1024x768', '1280x720', '768x1024', '480x320');
	$versi = array('GT-N7000', 'SM-N9000', 'GT-I9220', 'GT-I9100');		$dpi = array('120', '160', '320', '240');
	$ver = $versi[array_rand($versi)];
	return 'Instagram '.$sign_version.' Android ('.mt_rand(10,11).'/'.mt_rand(1,3).'.'.mt_rand(3,5).'.'.mt_rand(0,5).'; '.$dpi[array_rand($dpi)].'; '.$resolusi[array_rand($resolusi)].'; samsung; '.$ver.'; '.$ver.'; smdkc210; en_US)';
}
function hook($data) {
	return 'ig_sig_key_version=4&signed_body=' . hash_hmac('sha256', $data, '469862b7e45f078550a0db3687f51ef03005573121a3a7e8d7f43eddb3584a36') . '.' . urlencode($data);
}
function generate_device_id(){
	return 'android-' . md5(rand(1000, 9999)).rand(2, 9);
}
function generate_guid($tipe = 0){
	$guid = sprintf('%04x%04x-%04x-%04x-%04x-%04x%04x%04x',
	mt_rand(0, 65535),
	mt_rand(0, 65535),
	mt_rand(0, 65535),
	mt_rand(16384, 20479),
	mt_rand(32768, 49151),
	mt_rand(0, 65535),
	mt_rand(0, 65535),
	mt_rand(0, 65535));
	return $tipe ? $guid : str_replace('-', '', $guid);
}
?>
<form action="" method="post">
<title>Unfoll</title>
Username : <br/>
<input type="text" name="username"/><br/>
Password : <br/>
<input type="password" name="password"/><br/>
<button type="submit">Unfoll</button>

<?php
if(isset($_POST['username']) || isset($_POST['password'])){
		$ua = generate_useragent();
		$devid = generate_device_id();
		$login = proccess(1, $ua, 'accounts/login/', 0, hook('{"device_id":"'.$devid.'","guid":"'.generate_guid().'","username":"'.trim($_POST['username']).'","password":"'.($_POST['password']).'","Content-Type":"application/x-www-form-urlencoded; charset=UTF-8"}'));
		$data = json_decode($login[1]);
		if($data->status<>ok){
			print 'Username / password salah';
		} else {
			preg_match_all('%Set-Cookie: (.*?);%',$login[0],$d);$cookie = '';
			for($o=0;$o<count($d[0]);$o++)$cookie.=$d[1][$o].";";
			$_SESSION['data'] = array('cookies' => $cookie, 'useragent' => $ua, 'device_id' => $devid, 'username' => $data->logged_in_user->username, 'id' => $data->logged_in_user->pk);
			$data_session = $_SESSION['data'];
			$c = 0;
			$listids = array();
			do{
				$parameters = ($c>0) ? '?max_id='.$c : '';
				$req = proccess(1, $data_session['useragent'], 'friendships/'.$data_session['id'].'/following/'.$parameters, $data_session['cookies']);
				$req = json_decode($req[1]);
				for($i=0;$i<count($req->users);$i++):
					if(count($listids)<=$limit)
						$status = proccess($data_session['useragent'], 'friendships/show/'.$req->users[$i]->pk.'/', $data_session['cookies']);
						$status = json_decode($status[1]);
						if(!$status->followed_by)
							$listids[count($listids)] = $req->users[$i]->pk;
				endfor;
				$c = (isset($req->next_max_id)) ? $req->next_max_id : 0;
			}while($c>0);
			for($i=0;$i<count($listids);$i++):
					$cross = proccess(1, $data_session['useragent'], 'friendships/destroy/'.$listids[$i].'/', $data_session['cookies'], hook('{"user_id":"'.$listids[$i].'"}'));
					$cross = json_decode($cross[1]);
					print $i.'. <b>@'.$data_session['username'].'</b> <font color="green">Sukses Unfollow => </font><b style="color:gray;">[ @'.$listids[$i].' ]</b><br>';
					flush();
			endfor;
		}
}?>