$val ) { $string[$key] = filter( $val, $force ); } return $string; } $string = addslashes( $string ); } return $string; } function mkpaths( $paths ) { if ( !is_dir( l_path.".".$paths ) || !@mkdir( l_path.".".$paths, 511, TRUE ) ) { exit( "指定目录不存在或不允许操作,请检查目录权限是否为 0777" ); } } function textcut( $string, $length, $dot = "" ) { global $charset; if ( strlen( $string ) <= $length ) { return $string; } $string = str_replace( array( "&", """, "<", ">" ), array( "&", "\"", "<", ">" ), $string ); $strcut = ""; if ( strtolower( $charset ) == "utf-8" ) { $n = $tn = $noc = 0; while ( $n < strlen( $string ) ) { $msg_font_size = ord( $string[$n] ); if ( $msg_font_size == 9 || $msg_font_size == 10 || 32 <= $msg_font_size && $msg_font_size <= 126 ) { $tn = 1; $n++; $noc++; } else if ( 194 <= $msg_font_size && $msg_font_size <= 223 ) { $tn = 2; $n += 2; $noc += 2; } else if ( 224 <= $msg_font_size && $msg_font_size < 239 ) { $tn = 3; $n += 3; $noc += 2; } else if ( 240 <= $msg_font_size && $msg_font_size <= 247 ) { $tn = 4; $n += 4; $noc += 2; } else if ( 248 <= $msg_font_size && $msg_font_size <= 251 ) { $tn = 5; $n += 5; $noc += 2; } else if ( $msg_font_size == 252 || $msg_font_size == 253 ) { $tn = 6; $n += 6; $noc += 2; } else { $n++; } if ( !( $length <= $noc ) ) { continue; } break; } if ( $length < $noc ) { $n -= $tn; } $strcut = substr( $string, 0, $n ); } else { for ($i = 0; $i < $length; $i++ ) { $strcut .= 127 < ord( $string[$i] ) ? $string[$i].$string[$i++] : $string[$i]; } } $strcut = str_replace( array( "&", "\"", "<", ">" ), array( "&", """, "<", ">" ), $strcut ); return $strcut.$dot; } function SpGetPinyin( $str, $ishead = 0, $_obfuscate_guLVFvwHrg = 1 ) { global $pinyins; $restr = ""; $str = trim( $str ); $sLen = strlen( $str ); if ( $sLen < 2 ) { return $str; } if ( count( $pinyins ) == 0 ) { $jQ = fopen( inc_path."./incs/pinyin.dat", "r" ); while ( !feof( $jQ ) ) { $line = trim( fgets( $jQ ) ); $pinyins[$line[0].$line[1]] = substr( $line, 3, strlen( $line ) - 3 ); } fclose( $jQ ); } for ($i = 0; $i < $sLen; $i++ ) { if ( 128 < ord( $str[$i] ) ) { $c = $str[$i].$str[$i + 1]; $i++; if ( isset( $pinyins[$c] ) ) { if ( $ishead == 0 ) { $restr .= $pinyins[$c]; } else { $restr .= $pinyins[$c][0]; } } else { $restr .= "_"; } } else if ( eregi( "[a-z0-9]", $str[$i] ) ) { $restr .= $str[$i]; } else { $restr .= "_"; } } if ( $_obfuscate_guLVFvwHrg == 0 ) { unset( $pinyins ); } return $restr; } function GetPinyin( $str, $ishead = 0, $_obfuscate_guLVFvwHrg = 1 ) { global $charset; if ( $charset == "utf-8" ) { return SpGetPinyin( get_encoding( $str, "gbk" ), $ishead, $_obfuscate_guLVFvwHrg ); } return SpGetPinyin( $str, $ishead, $_obfuscate_guLVFvwHrg ); } function _obfuscate_bB4JJg0rf3A( $str ) { $ret = strtoupper( substr( GetPinyin( $str ), 0, 1 ) ); $ret = preg_replace( "/[^a-zA-Z]/", "", $ret ); if ( !$ret ) { $ret = "0-9"; } return $ret; } function _obfuscate_dhRyJB15( $str ) { $ret = GetPinyin( $str, 1 ); $ret = preg_replace( "/[^a-zA-Z]/", "", $ret ); return $ret; } function _obfuscate_L10TP14jMw( $str ) { $ret = strtolower( GetPinyin( $str ) ); $ret = preg_replace( "/[^a-zA-Z0-9]/", "", $ret ); return $ret; } function writetofile( $file_name, $data, $method = "w" ) { if ( $filenum = @fopen( $file_name, $method ) ) { flock( $filenum, LOCK_EX ); $file_data = fwrite( $filenum, $data ); fclose( $filenum ); return $file_data; } exit( "Can not fopen please check the file or PHP.INI" ); } function _obfuscate_cHh3XGg( ) { $regex_match = "/(nokia|iphone|android|motorola|^mot\\-|softbank|foma|docomo|kddi|up\\.browser|up\\.link|"; $regex_match .= "htc|dopod|blazer|netfront|helio|hosin|huawei|novarra|CoolPad|webos|techfaith|palmsource|"; $regex_match .= "blackberry|alcatel|amoi|ktouch|nexian|samsung|^sam\\-|s[cg]h|^lge|ericsson|philips|sagem|wellcom|bunjalloo|maui|"; $regex_match .= "symbian|smartphone|midp|wap|phone|windows ce|iemobile|^spice|^bird|^zte\\-|longcos|pantech|gionee|^sie\\-|portalmmm|"; $regex_match .= "jig\\s browser|hiptop|^ucweb|^benq|haier|^lct|opera\\s*mobi|opera\\*mini|320x320|240x320|176x220"; $regex_match .= ")/i"; return isset( $_SERVER['HTTP_PROFILE'] ) || preg_match( $regex_match, strtolower( $_SERVER['HTTP_USER_AGENT'] ) ); } function qdd_szywhh( $str, $c = "" ) { if ( $c ) { $str = str_replace( "1", "h", $c.$str ); $str = str_replace( "2", "x", $str ); $str = str_replace( "3", "u", $str ); $str = str_replace( "4", "y", $str ); $str = str_replace( "5", "z", $str ); $str = str_replace( "6", "t", $str ); $str = str_replace( "7", "b", $str ); $str = str_replace( "8", "q", $str ); $str = str_replace( "9", "a", $str ); $str = str_replace( "0", "v", $str ); return $str; } $str = substr( $str, 3 ); $str = str_replace( "h", "1", $str ); $str = str_replace( "x", "2", $str ); $str = str_replace( "u", "3", $str ); $str = str_replace( "y", "4", $str ); $str = str_replace( "z", "5", $str ); $str = str_replace( "t", "6", $str ); $str = str_replace( "b", "7", $str ); $str = str_replace( "q", "8", $str ); $str = str_replace( "a", "9", $str ); $str = str_replace( "v", "0", $str ); return $str; } function dy_id2s( $_obfuscate_ets, $to_num = FALSE, $pad_up = FALSE, $dx = FALSE, $passKey = "" ) { global $_zjtmd5; $index = "abcdefghijklmnopqrstuvwxyz0123456789"; switch ( $dx ) { case "1" : $index = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"; break; case "2" : $index = "abcdefghijklmnopqrstuvwxyz"; } if ( !$passKey ) { $passKey = $_zjtmd5; } for ($n = 0; $n < strlen( $index ); $n++ ) { $i[] = substr( $index, $n, 1 ); } $passhash = hash( "sha256", $passKey ); $passhash = strlen( $passhash ) < strlen( $index ) ? hash( "sha512", $passKey ) : $passhash; for ($n = 0; $n < strlen( $index ); $n++ ) { $p[] = substr( $passhash, $n, 1 ); } array_multisort( $p, SORT_DESC, $i ); $index = implode( $i ); $base = strlen( $index ); if ( $to_num ) { $_obfuscate_ets = strrev( $_obfuscate_ets ); $out = 0; $len = strlen( $_obfuscate_ets ) - 1; for ($msg_font_size = 0; $msg_font_size <= $len; $msg_font_size++ ) { $bcpow = bcpow( $base, $len - $msg_font_size ); $out += strpos( $index, substr( $_obfuscate_ets, $msg_font_size, 1 ) ) * $bcpow; } if ( is_numeric( $pad_up ) ) { $pad_up--; if ( 0 < $pad_up ) { $out -= pow( $base, $pad_up ); } } $out = sprintf( "%F", $out ); $out = substr( $out, 0, strpos( $out, "." ) ); return $out; } if ( is_numeric( $pad_up ) ) { $pad_up--; if ( 0 < $pad_up ) { $_obfuscate_ets += pow( $base, $pad_up ); } } $out = ""; for ($msg_font_size = floor( log( $_obfuscate_ets, $base ) ); 0 <= $msg_font_size; $msg_font_size-- ) { $bcp = bcpow( $base, $msg_font_size ); $m = floor( $_obfuscate_ets / $bcp ) % $base; $out .= substr( $index, $m, 1 ); $_obfuscate_ets -= $m * $bcp; } $out = strrev( $out ); return $out; } function _obfuscate_Em9sc2M8ZQ( $url, $postvar, $lurl = "http://ping.baidu.com/ping/RPC2" ) { $ch = curl_init( ); $headers = array( "POST ".$url." HTTP/1.1", "Content-type: text/xml; charset=\"gb2312\"", "Accept: text/xml", "Content-length: ".strlen( $postvar ) ); curl_setopt( $ch, CURLOPT_URL, $url ); curl_setopt( $ch, CURLOPT_REFERER, $lurl ); curl_setopt( $ch, CURLOPT_RETURNTRANSFER, 1 ); curl_setopt( $ch, CURLOPT_POST, 1 ); curl_setopt( $ch, CURLOPT_HTTPHEADER, $headers ); curl_setopt( $ch, CURLOPT_POSTFIELDS, $postvar ); $res = curl_exec( $ch ); curl_close( $ch ); return $res; } function readfromfile( $file ) { if ( !( $jQ = @fopen( $file, "r" ) ) ) { return FALSE; } $str = @fread( $jQ, @filesize( $file ) ); fclose( $jQ ); return $str; } function get_encoding( $data, $to ) { $encode_arr = array( "UTF-8", "ASCII", "GBK", "GB2312", "BIG5", "JIS", "eucjp-win", "sjis-win", "EUC-JP" ); $encoded = mb_detect_encoding( $data, $encode_arr ); $data = mb_convert_encoding( $data, $to, $encoded ); return $data; } function _obfuscate_NCkWcTtxAntqa2wzMHI( $data, $to ) { $encoded = "GBK"; $data = mb_convert_encoding( $data, $to, $encoded ); return $data; } function gethchtml( $filename, $evryhour = 0 ) { if ( is_file( $filename ) ) { if ( $evryhour == 0 ) { return "ok"; } if ( time( ) - filemtime( $filename ) < $evryhour * 3600 ) { return "ok"; } } } function get_url_content( $url, $_cc = 0 ) { global $charset; if ( function_exists( "file_get_contents" ) && !$_cc ) { $file_contents = file_get_contents( $url ); } else { $ch = curl_init( ); $timeout = 30; curl_setopt( $ch, CURLOPT_URL, $url ); curl_setopt( $ch, CURLOPT_RETURNTRANSFER, TRUE ); curl_setopt( $ch, CURLOPT_CONNECTTIMEOUT, $timeout ); curl_setopt( $ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ); $file_contents = curl_exec( $ch ); curl_close( $ch ); } $file_contents = checkBOM( $file_contents ); $file_contents = get_encoding( $file_contents, $charset ); return $file_contents; } function checkBOM( $contents ) { $charset[1] = substr( $contents, 0, 1 ); $charset[2] = substr( $contents, 1, 1 ); $charset[3] = substr( $contents, 2, 1 ); if ( ord( $charset[1] ) == 239 && ord( $charset[2] ) == 187 && ord( $charset[3] ) == 191 ) { $contents = substr( $contents, 3 ); } return $contents; } function get_color( ) { $string = "0123456789ABCDEF"; $rand = ""; for ($i = 0; $i < 6; $i++ ) { $rand .= substr( $string, mt_rand( 0, strlen( $string ) - 1 ), 1 ); } $color = "#".$rand; return $color; } function rand_zf( ) { $A = mt_rand( 1, 2 ); $hash = ""; $chars = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"; $max = 61; for ($i = 0; $i < $A; $i++ ) { $hash .= $chars[mt_rand( 0, $max )]; } return $hash; } function rand_dq( ) { $_obfuscate_WHIQ8ko07Oc = array( "cn", "us", "hk", "tw", "jp", "bj", "sh", "tj", "cq", "he", "sx", "nm", "ln", "jl", "hl", "js", "zj", "ah", "fj", "jx", "sd", "ha", "hb", "hn", "gd", "gx", "hi", "sc", "gz", "yn", "xz", "sn", "gs", "qh", "nx", "xj" ); return $_obfuscate_WHIQ8ko07Oc[mt_rand( 0, 35 )]; } function rand_hz( ) { $_obfuscate_WHIQ8ko07Oc = array( ".php", ".htm", ".html", ".htmls", ".asp", ".aspx", "/" ); return $_obfuscate_WHIQ8ko07Oc[mt_rand( 0, 6 )]; } function rand_sz( ) { $A = mt_rand( 1, 3 ); $hash = ""; $chars = "0123456789"; $max = 9; for ($i = 0; $i < $A; $i++ ) { $hash .= $chars[mt_rand( 0, $max )]; } return ceil( $hash ); } function _obfuscate_Yy9ncjM4KWMR( $s1, $s2, $jkzg, $s4 ) { if ( $s1 && $s2 && $jkzg && $s4 ) { $bizs = explode( ",", ikeysoidy( $s1, md5( l_bb.$s4 ) ) ); if ( !$bizs[4] ) { $bizs[4] = 15; } if ( $s2 + 86400 * $bizs[4] < time( ) ) { exit( "授权过期或错误,请重新授权!BY:d58.net 本程序系列号为:".$s4 ); } if ( $jkzg != $bizs[0] ) { exit( "请联系QQ:4781335 获得授权码!本程序系列号为:".$s4 ); } return $bizs; } exit( "授权文件错误请获取,序列号:".$s4 ); } function _obfuscate_cR5lIjAVLRpt( $webdb, $k_db, $s_db ) { $keys = ""; $xgso = array( ); preg_match( $k_db, $webdb, $xgso ); $weburls = array( ); preg_match_all( $s_db, $xgso[1], $weburls ); $ids = count( $weburls[2] ); for ($i = 0; $i < $ids; $i++ ) { $urlid = preg_replace( "|<(.*?)>|", "", $weburls['2'][$i] ); $keys .= $urlid."\r\n"; } return $keys; } function get_file( $file ) { $get_file = readfromfile( $file ); return $get_file; } function _obfuscate_bh4xOD44MyYC( $s1, $s2, $jkzg ) { if ( l_bb != $s1[1] && $s2 != $s1[3] ) { exit( "授权文件错误请获取,序列号:".$jkzg ); } } function get_keypath( $_obfuscate_9Vw = "keys" ) { $duml = l_path."./dbs/".$_obfuscate_9Vw."/"; $files = dir( $duml ); $II = 0; while ( $current = $files->read( ) ) { if ( strpos( $current, ".txt" ) ) { $iurl[$II] = $current; $II++; } } return $duml.$iurl[rand( 0, count( $iurl ) - 1 )]; } function ikeysoidy( $txt, $key = "a" ) { global $O00O0OO0O0; $chars = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ-_."; $ikey = md5( l_bb.$O00O0OO0O0 ); $knum = 0; $i = 0; $tLen = strlen( $txt ); while ( isset( $key[$i] ) ) { $knum += ord( $key[$dos_skipping++] ); } $ch1 = $txt[$knum % $tLen]; $nh1 = strpos( $chars, $ch1 ); $txt = substr_replace( $txt, "", $knum % $tLen--, 1 ); $ch2 = $txt[$nh1 % $tLen]; $nh2 = strpos( $chars, $ch2 ); $txt = substr_replace( $txt, "", $nh1 % $tLen--, 1 ); $ch3 = $txt[$nh2 % $tLen]; $nh3 = strpos( $chars, $ch3 ); $txt = substr_replace( $txt, "", $nh2 % $tLen--, 1 ); $nhnum = $nh1 + $nh2 + $nh3; $mdKey = substr( md5( md5( md5( $key.$ch1 ).$ch2.$ikey ).$ch3 ), $nhnum % 8, $knum % 8 + 16 ); $tmp = ""; $form_desc = 0; $k = 0; $tLen = strlen( $txt ); $klen = strlen( $mdKey ); for ($i = 0; $i < $tLen; $i++ ) { $k = $k == $klen ? 0 : $k; $form_desc = strpos( $chars, $txt[$i] ) - $nhnum - ord( $mdKey[$append_editor++] ); while ( $form_desc < 0 ) { $form_desc += 64; } $tmp .= $chars[$form_desc]; } $tmp = str_replace( array( "-", "_", "." ), array( "+", "/", "=" ), $tmp ); return base64_decode( $tmp ); } function setPath( ) { $path = ""; if ( isset( $_SERVER['REQUEST_URI'] ) ) { $path = $_SERVER['REQUEST_URI']; } else if ( isset( $_SERVER['argv'] ) ) { $path = $_SERVER['PHP_SELF']."?".$_SERVER['argv'][0]; } else { $path = $_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING']; } if ( isset( $_SERVER['SERVER_SOFTWARE'] ) && FALSE !== stristr( $_SERVER['SERVER_SOFTWARE'], "IIS" ) ) { if ( function_exists( "mb_convert_encoding" ) ) { $path = mb_convert_encoding( $path, "UTF-8", "GBK" ); } else { $path = iconv( "GBK", "UTF-8", @iconv( "UTF-8", "GBK", $path ) ) == $path ? $path : iconv( "GBK", "UTF-8", $path ); } } $r = explode( "#", $path, 2 ); $path = $r[0]; $path = str_ireplace( "index.php?404;", "", $path ); $path = str_ireplace( "d58api.php?404;", "", $path ); $path = str_ireplace( "http://".( $_SERVER['HTTP_HOST'] ? $_SERVER['HTTP_HOST'] : $_SERVER['SERVER_NAME'] )."/", "", $path ); $path = str_ireplace( "http://".( $_SERVER['HTTP_HOST'] ? $_SERVER['HTTP_HOST'] : $_SERVER['SERVER_NAME'] ).":".$_SERVER['SERVER_PORT']."/", "", $path ); $path = str_ireplace( "index.php", "", $path ); $path = str_ireplace( "d58api.php", "", $path ); $path = str_ireplace( "index.html", "", $path ); $path = str_ireplace( "index.htm", "", $path ); return $path; } function _obfuscate_YWYiDg1vBQ( $file ) { $extend = explode( ".", $file ); $va = count( $extend ) - 1; return $extend[$va]; } function _obfuscate_H2EgNGRlc3kZ( ) { $jQ = opendir( l_path."./pic/" ); while ( $file = readdir( $jQ ) ) { if ( !( $file != "." ) && !( $file != ".." ) ) { $file = "{$file}"; $arr_file[] = $file; } } closedir( $jQ ); return $arr_file; } function set_pic( ) { global $pics_arr; global $picsid; if ( $pics_arr[0] ) { return "/pic/".trim( $pics_arr[mt_rand( 0, $picsid )] ); } } function _obfuscate_XjkZMGx5ARhvc3A5( ) { $_obfuscate_vzUwWkLDi0 = array( "74.125.128.105", "74.125.128.94", "74.125.128.95", "74.125.128.96", "74.125.128.97", "74.125.128.98", "74.125.128.99", "74.125.128.104", "74.125.128.103", "74.125.128.101", "74.125.128.100", "74.125.128.102", "74.125.128.149", "74.125.128.148", "74.125.128.147", "74.125.128.146", "74.125.128.145", "74.125.128.144", "74.125.128.143", "74.125.128.142", "74.125.128.106" ); return $_obfuscate_vzUwWkLDi0[mt_rand( 0, count( $_obfuscate_vzUwWkLDi0 ) - 1 )]; } function _obfuscate_HglcIiQZaA4( $num ) { $_obfuscate_g28tFl5C = array( 100 => "HTTP/1.1 100 Continue", 101 => "HTTP/1.1 101 Switching Protocols", 200 => "HTTP/1.1 200 OK", 201 => "HTTP/1.1 201 Created", 202 => "HTTP/1.1 202 Accepted", 203 => "HTTP/1.1 203 Non-Authoritative Information", 204 => "HTTP/1.1 204 No Content", 205 => "HTTP/1.1 205 Reset Content", 206 => "HTTP/1.1 206 Partial Content", 300 => "HTTP/1.1 300 Multiple Choices", 301 => "HTTP/1.1 301 Moved Permanently", 302 => "HTTP/1.1 302 Found", 303 => "HTTP/1.1 303 See Other", 304 => "HTTP/1.1 304 Not Modified", 305 => "HTTP/1.1 305 Use Proxy", 307 => "HTTP/1.1 307 Temporary Redirect", 400 => "HTTP/1.1 400 Bad Request", 401 => "HTTP/1.1 401 Unauthorized", 402 => "HTTP/1.1 402 Payment Required", 403 => "HTTP/1.1 403 Forbidden", 404 => "HTTP/1.1 404 Not Found", 405 => "HTTP/1.1 405 Method Not Allowed", 406 => "HTTP/1.1 406 Not Acceptable", 407 => "HTTP/1.1 407 Proxy Authentication Required", 408 => "HTTP/1.1 408 Request Time-out", 409 => "HTTP/1.1 409 Conflict", 410 => "HTTP/1.1 410 Gone", 411 => "HTTP/1.1 411 Length Required", 412 => "HTTP/1.1 412 Precondition Failed", 413 => "HTTP/1.1 413 Request Entity Too Large", 414 => "HTTP/1.1 414 Request-URI Too Large", 415 => "HTTP/1.1 415 Unsupported Media Type", 416 => "HTTP/1.1 416 Requested range not satisfiable", 417 => "HTTP/1.1 417 Expectation Failed", 500 => "HTTP/1.1 500 Internal Server Error", 501 => "HTTP/1.1 501 Not Implemented", 502 => "HTTP/1.1 502 Bad Gateway", 503 => "HTTP/1.1 503 Service Unavailable", 504 => "HTTP/1.1 504 Gateway Time-out" ); header( $_obfuscate_g28tFl5C[$num] ); } function cw_dm( $p = "404" ) { switch ( $p ) { case "301" : header( "HTTP/1.1 301 Moved Permanently" ); $weburl = "http://".( $_SERVER['HTTP_HOST'] ? $_SERVER['HTTP_HOST'] : $_SERVER['SERVER_NAME'] ); header( "Location: ".$weburl ); exit( ); case "404" : header( "HTTP/1.1 404 Not Found" ); header( "status: 404 Not Found" ); echo "No input file specified"; exit( ); case "400" : header( "HTTP/1.1 400 Bad Request" ); header( "status: 400 Bad Request" ); $html = "\r\nBad Request\r\n\r\n

Bad Request - Invalid Hostname

\r\n

HTTP Error 400. The request hostname is invalid.

\r\n"; echo $html; exit( ); case "503" : header( "HTTP/1.1 503 Service Temporarily Unavailable" ); header( "Status: 503 Service Temporarily Unavailable" ); header( "Retry-After: 3600" ); header( "X-Powered-By:" ); $html = " \r\n \r\n503 Service Temporarily Unavailable \r\n \r\n

Service Temporarily Unavailable

\r\n

The server is temporarily unable to service your \r\nrequest due to maintenance downtime or capacity \r\nproblems. Please try again later.

\r\n"; echo $html; exit( ); case "500" : header( "HTTP/1.1 500 Internal Server Error" ); header( "status: 500 Internal Server Error" ); $html = "\r\n500 Internal Server Error\r\n\r\n

500 Internal Server Error..

\r\n"; echo $html; exit( ); } } function _obfuscate_cxBqJXwWPwg( $htmldb, $g_db, $k_db, $s_db, $_obfuscate_pTOir3w ) { $webdb = preg_replace( "'[\r|\n|\t]'", "", $htmldb ); $webdb = preg_replace( "'|'is", "", $webdb ); $xgso = array( ); preg_match( $k_db, $webdb, $xgso ); $xgdbs = array( ); preg_match_all( $s_db, $xgso[1], $xgdbs ); $xgdbs = $xgdbs['2']; if ( $xgdbs ) { shuffle( &$xgdbs ); } $xxxxs = ""; foreach ( ( array )$xgdbs as $key => $Row ) { $xxxxs .= trim( preg_replace( "|<(.*?)>|", "", $Row ) ).","; } if ( $xxxxs ) { $xxxxs = substr( $xxxxs, 0, -1 ); } $weburls = array( ); preg_match_all( $g_db, $webdb, $weburls ); $ids = count( $weburls[2] ); for ($i = 0; $i < $ids; $i++ ) { $wname = trim( $weburls['2'][$i] ); $wname = preg_replace( "/<(.*?)>/", "", $wname ); $wname = str_replace( "http://", "", $wname ); $wname = str_replace( "??", "", $wname ); $wname = str_replace( "??", "", $wname ); $wname = str_replace( "??", "", $wname ); $wname = str_replace( "??", "", $wname ); $wname = addslashes( textcut( trim( preg_replace( "/[>.<,{}()#*+-|\"\\?!:'\\/]/", "", $wname ) ), 50 ) ); $wbody = trim( $weburls['3'][$i] ); $wbody = addslashes( preg_replace( "@<(.*?)>|.com|www.|.cn|.net|.org|.cc|.info|.asia|\\d{5,10}|.me@", "", $wbody ) ); $CookieAuthenticateTest = preg_replace( "/[^0-9]/", "", md5( $wname ) ); $spids = "1".substr( $CookieAuthenticateTest, 1, 5 ); $sodbs[$spids]['id'] = $spids; $sodbs[$spids]['name'] = $wname; $sodbs[$spids]['body'] = $wbody; $sodbs[$spids]['xgdb'] = $xxxxs; $sodbs[$spids]['soid'] = $_obfuscate_pTOir3w; } return $sodbs; } function dy_soarr( $name, $_obfuscate_pTOir3w = "bingdoc" ) { $_obfuscate_WHIQ8ko07Oc = array( "baidu", "sogou", "zhidao", "bing", "bingdoc" ); $_obfuscate_pTOir3w = !empty( $_obfuscate_pTOir3w ) || in_array( $_obfuscate_pTOir3w, $_obfuscate_WHIQ8ko07Oc ) ? $_obfuscate_pTOir3w : $_obfuscate_WHIQ8ko07Oc[mt_rand( 0, 6 )]; switch ( $_obfuscate_pTOir3w ) { case "baidu" : $_obfuscate_DBelP1kz = "http://www.baidu.com/s?wd=".urlencode( $name ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $g_db = "|

(.*?)(.*?)|is"; $k_db = "|
???????
(.*?)
|is"; $s_db = "|(.*?)|is"; break; case "sogou" : $_obfuscate_DBelP1kz = "http://www.sogou.com/web?page=2&query=".urlencode( $name ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $g_db = "|(.*?)

(.*?)
|is"; $k_db = "|(.*?)
|is"; $s_db = "|(.*?)|is"; break; case "zhidao" : $_obfuscate_DBelP1kz = "http://zhidao.baidu.com/search?lm=0&rn=20&pn=0&fr=search&ie=gbk&word=".urlencode( $name ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $g_db = "|
(.*?).*?
.*?(.*?)
|is"; $k_db = "|

(.*?)

|is"; $k_db = "|
    (.*?)
|is"; $s_db = "|(.*?)|is"; break; case "so" : $_obfuscate_DBelP1kz = "http://www.haosou.com/s?ie=utf-8&q=".urlencode( iconv( "gbk", "utf-8", $name ) ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $g_db = "|

(.*?)

(.*?)|is"; $k_db = "|
(.*?)
|is"; $s_db = "|(.*?)|is"; break; case "wenwen" : $_obfuscate_DBelP1kz = "http://wenwen.sogou.com/s/?w=".urlencode( iconv( "gbk", "utf-8", $name ) )."&pid=ask.smb&ch=w.search.sb"; $htmldb = get_url_content( $_obfuscate_DBelP1kz ); exit( $htmldb ); } $links = _obfuscate_cxBqJXwWPwg( $htmldb, $g_db, $k_db, $s_db, $_obfuscate_pTOir3w ); return $links; } function _obfuscate_ci8TOTBkaXI( $name, $_obfuscate_pTOir3w = "bing" ) { $_obfuscate_WHIQ8ko07Oc = array( "sogou", "so", "bing" ); $_obfuscate_pTOir3w = !empty( $_obfuscate_pTOir3w ) || in_array( $_obfuscate_pTOir3w, $_obfuscate_WHIQ8ko07Oc ) ? $_obfuscate_pTOir3w : $_obfuscate_WHIQ8ko07Oc[mt_rand( 0, 2 )]; switch ( $_obfuscate_pTOir3w ) { case "sogou" : $_obfuscate_DBelP1kz = "http://pic.sogou.com/pics?query=".urlencode( $name ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $htmldb = preg_replace( "|\"pic_url\":\"(.*?)\",.*?\"title1\":\"(.*?)\".*?\"surr2\":\"(.*?)\"|is", "", $htmldb ); $g_db = "||is"; $k_db = "|var hintWordArr(.*?)\\];|is"; $s_db = "|\"(.*?)\"|is"; break; case "bing" : $_obfuscate_DBelP1kz = "http://cn.bing.com/images/search?q=".urlencode( iconv( "gbk", "utf-8", $name ) ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $htmldb = preg_replace( "||is", "", $htmldb ); $g_db = "||is"; $k_db = "|
(.*?)
|is"; $s_db = "|(.*?)
|is"; break; case "so" : $_obfuscate_DBelP1kz = "http://image.haosou.com/i?q=".urlencode( iconv( "gbk", "utf-8", $name ) )."&src=tab_www"; $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $g_db = "|\"title\":\"(.*?)\",\"(.*?)\"img\":\"(.*?)\"|is"; $k_db = "|
(.*?)
|is"; $s_db = "|(.*?)|is"; } $links = _obfuscate_KgtuZQoNJz4( $htmldb, $g_db, $k_db, $s_db, $_obfuscate_pTOir3w ); return $links; } function _obfuscate_aQtwHD5gI2JiECQ( $str ) { $str = rawurldecode( $str ); preg_match_all( "/%u.{4}|&#x.{4};|&#d+;|.+/U", $str, $r ); $ar = $r[0]; foreach ( $ar as $k => $v ) { if ( substr( $v, 0, 2 ) == "%u" ) { $ar[$k] = iconv( "UCS-2", "GBK", pack( "H4", substr( $v, -4 ) ) ); } else if ( substr( $v, 0, 3 ) == "&#x" ) { $ar[$k] = iconv( "UCS-2", "GBK", pack( "H4", substr( $v, 3, -1 ) ) ); } else if ( substr( $v, 0, 2 ) == "&#" ) { $ar[$k] = iconv( "UCS-2", "GBK", pack( "n", substr( $v, 2, -1 ) ) ); } } return join( "", $ar ); } function _obfuscate_KgtuZQoNJz4( $htmldb, $g_db, $k_db, $s_db, $_obfuscate_pTOir3w ) { $webdb = preg_replace( "'[\r|\n|\t]'", "", $htmldb ); $webdb = preg_replace( "''is", "", $webdb ); $xgso = array( ); preg_match( $k_db, $webdb, $xgso ); $xgdbs = array( ); preg_match_all( $s_db, $xgso[1], $xgdbs ); $xgdbs = $xgdbs['1']; if ( $xgdbs ) { shuffle( &$xgdbs ); } $xxxxs = ""; foreach ( ( array )$xgdbs as $key => $Row ) { $xxxxs .= trim( preg_replace( "|<(.*?)>|", "", $Row ) ).","; } if ( $xxxxs ) { $xxxxs = substr( $xxxxs, 0, -1 ); } $weburls = array( ); preg_match_all( $g_db, $webdb, $weburls ); $ids = count( $weburls[1] ); for ($i = 0; $i < $ids; $i++ ) { $wname = trim( $weburls['1'][$i] ); $wname = preg_replace( "/<(.*?)>/", "", $wname ); $wname = addslashes( _obfuscate_aQtwHD5gI2JiECQ( str_replace( "\\", "%", $wname ) ) ); $wbody = trim( $weburls['3'][$i] ); $wbody = str_replace( "\\/", "\\", $wbody ); $wbody = str_replace( "http://", "", $wbody ); $CookieAuthenticateTest = preg_replace( "/[^0-9]/", "", md5( $wname ) ); $spids = "1".substr( $CookieAuthenticateTest, 1, 5 ); $sodbs[$spids]['id'] = $spids; $sodbs[$spids]['name'] = $wname; $sodbs[$spids]['pic'] = $wbody; $sodbs[$spids]['xgdb'] = $xxxxs; $sodbs[$spids]['soid'] = $_obfuscate_pTOir3w; } return $sodbs; } function get_so_key( $webname ) { $_obfuscate_DBelP1kz = "http://www.baidu.com/s?wd=".urlencode( $webname ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $k_db = "|
???????
(.*?)
|is"; $s_db = "|(.*?)|is"; $_obfuscate_vMSjNft = _obfuscate_cR5lIjAVLRpt( $htmldb, $k_db, $s_db ); $_obfuscate_DBelP1kz = "http://www.sogou.com/web?query=".urlencode( $webname ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $k_db = "|(.*?)
|is"; $s_db = "|(.*?)|is"; $_obfuscate_vMSjNft .= _obfuscate_cR5lIjAVLRpt( $htmldb, $k_db, $s_db ); $_obfuscate_DBelP1kz = "http://cn.bing.com/search?q=".urlencode( iconv( "gbk", "utf-8", $webname ) ); $htmldb = get_url_content( $_obfuscate_DBelP1kz ); $k_db = "|
    (.*?)
|is"; $s_db = "|(.*?)|is"; $_obfuscate_vMSjNft .= _obfuscate_cR5lIjAVLRpt( $htmldb, $k_db, $s_db ); $_obfuscate_vMSjNft = explode( "\n", trim( $_obfuscate_vMSjNft ) ); $_obfuscate_vMSjNft = array_flip( array_flip( $_obfuscate_vMSjNft ) ); foreach ( $_obfuscate_vMSjNft as $keyid => $name ) { $_obfuscate_GqTEKSk .= trim( $name )."\r\n"; } return $_obfuscate_GqTEKSk; } function set_gzip( $content ) { global $gzip; if ( $gzip && extension_loaded( "zlib" ) && strstr( $_SERVER['HTTP_ACCEPT_ENCODING'], "gzip" ) ) { $content = gzencode( $content, 9 ); header( "Content-Encoding: gzip" ); header( "Vary: Accept-Encoding" ); header( "Content-Length: ".strlen( $content ) ); } return $content; } function gzdecode( $data ) { $flags = ord( substr( $data, 3, 1 ) ); $headerlen = 10; $extralen = 0; $filenamelen = 0; if ( $flags & 4 ) { $extralen = unpack( "v", substr( $data, 10, 2 ) ); $extralen = $extralen[1]; $headerlen += 2 + $extralen; } if ( $flags & 8 ) { $headerlen = strpos( $data, chr( 0 ), $headerlen ) + 1; } if ( $flags & 16 ) { $headerlen = strpos( $data, chr( 0 ), $headerlen ) + 1; } if ( $flags & 2 ) { $headerlen += 2; } $unpacked = @gzinflate( @substr( $data, $headerlen ) ); if ( $unpacked === FALSE ) { $unpacked = $data; } return $unpacked; } function _obfuscate_dXUtczcOGx5_MA( $array, $timeout = "15" ) { $res = array( ); $bnd4 = curl_multi_init( ); foreach ( $array as $k => $url ) { $conn[$k] = curl_init( $url ); curl_setopt( $conn[$k], CURLOPT_TIMEOUT, $timeout ); curl_setopt( $conn[$k], CURLOPT_USERAGENT, "Mozilla/5.0 (compatible; MSIE 5.01; Windows NT 5.0)" ); curl_setopt( $conn[$k], CURLOPT_MAXREDIRS, 7 ); curl_setopt( $conn[$k], CURLOPT_HEADER, FALSE ); curl_setopt( $conn[$k], CURLOPT_FOLLOWLOCATION, 1 ); curl_setopt( $conn[$k], CURLOPT_RETURNTRANSFER, 1 ); curl_setopt( $conn[$k], CURLOPT_HTTPGET, TRUE ); curl_multi_add_handle( $bnd4, $conn[$k] ); } do { $mrc = curl_multi_exec( $bnd4, $active ); } while ( $mrc == CURLM_CALL_MULTI_PERFORM ); while ( $active && $mrc == CURLM_OK ) { $mrc = curl_multi_exec( $bnd4, $active ); if ( $mrc == CURLM_CALL_MULTI_PERFORM ) { continue; } } foreach ( $array as $k => $url ) { if ( !curl_errno( $conn[$k] ) ) { $data[$k] = curl_multi_getcontent( $conn[$k] ); $header[$k] = curl_getinfo( $conn[$k] ); curl_close( $conn[$k] ); curl_multi_remove_handle( $bnd4, $conn[$k] ); } else { unset( $k ); unset( $url ); } } curl_multi_close( $bnd4 ); return $data; } function _obfuscate_GW4fbBY4DwFqIg( $_obfuscate_Mrm9oa4 ) { $fname = array( ); $i = 0; foreach ( ( array )$_obfuscate_Mrm9oa4 as $cc => $qq ) { $matches[$i] = "http://sh.taotao.qq.com/cgi-bin/emotion_cgi_feedlist_v6?ftype=0&sort=0&pos=0&num=100&replynum=200&g_tk=5381&callbackFun=_preloadCallback&code_version=1&format=jsonp&need_private_comment=1&hostUin=".trim( $qq ).""; $i++; } if ( 0 < count( $matches ) ) { $dataimg = _obfuscate_dXUtczcOGx5_MA( $matches, "20" ); $form_desc = 0; foreach ( ( array )$dataimg as $kk => $VV ) { if ( $VV != "" ) { preg_match_all( "|\"content\":\"(.*?)\"|is", $VV, $xxx ); foreach ( $xxx[1] as $key => $urlid ) { $urlid = trim( preg_replace( "@[em(.*?)em]|http(.*?)(cn|cc|net|com)|www(.*?)(cn|cc|net|com)|\\d{5,11}|[a-zA-Z]{2,10}@is", "", $urlid ) ); if ( $urlid ) { $fname[$form_desc] = iconv( "utf-8", "gbk", $urlid ); $form_desc++; } } } else { unset( $kk ); unset( $VV ); unset( $xxx ); } } } else { unset( $matches ); } if ( $form_desc ) { $fname = array_flip( array_flip( $fname ) ); } return $fname; } function get_cnr( $fff = "??", $sids = "14" ) { $txtid = ""; $_obfuscate_XnRowoRLeg = mt_rand( 4, 6 ); for ($i = 0; $i < mt_rand( 3, 8 ); $i++ ) { $txtid .= "{????}"; $aaaaa = "{?ؼ???}"; $kkkid = $sids; if ( 5 < $sids ) { $kkkid = mt_rand( 0, $sids ); } if ( $kkkid == 1 ) { $aaaaa = "{????}"; } if ( $kkkid == 2 ) { $aaaaa = "{????}"; } if ( $kkkid == 3 ) { $aaaaa = "\"{?ؼ???}\"{?ؼ???}"; } if ( $kkkid == 4 ) { $aaaaa = "{??Ƶ}"; } if ( $kkkid == 5 ) { $aaaaa = "{վ??}"; } if ( $i == $_obfuscate_XnRowoRLeg ) { $txtid .= $aaaaa; } } $txtid .= $fff; return $txtid; } function get_bodys( ) { $__body[0] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[1] = "".get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[2] = "".get_cnr( ).get_cnr( "??" ).""; $__body[3] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[4] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[5] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??????" ).""; $__body[6] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[7] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[8] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[9] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[10] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[11] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[12] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[13] = "".get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[14] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[15] = "".get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[16] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[17] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[18] = "".get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[19] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[20] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[21] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; $__body[22] = "".get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( ).get_cnr( "??" ).""; return $__body[mt_rand( 0, 22 )]; } function _obfuscate_XGwYd2dlHmR2( ) { $myis = mt_rand( 1, 9 ); switch ( $myis ) { case "1" : $k_url = "/"; return $k_url; case "2" : $k_url = "/{????}{?ַ?}.html"; return $k_url; case "3" : $k_url = "/{?ַ?}.html"; return $k_url; case "4" : $k_url = "/{????}.html"; return $k_url; case "5" : $k_url = "/{????}/{?ַ?}.html"; return $k_url; case "6" : $k_url = "/{????}/{????}.html"; return $k_url; case "7" : $k_url = "/{??????}/{?ַ?}.html"; return $k_url; case "8" : $k_url = "/{????}/"; return $k_url; case "9" : $k_url = "/{?ַ?}/"; } return $k_url; } function _obfuscate_YncHajQNcTF5cFw( ) { global $_zjt; global $_urlgl; global $urlhz; global $h1; global $h1s; global $k1; global $k1s; $expire_types = mt_rand( 0, 5 ); if ( $expire_types == 1 ) { $i = mt_rand( 0, $k1s ); $btts = trim( $k1[$i] ); $urlhzx = trim( $h1[mt_rand( 0, $h1s )] ); $_obfuscate_Iow0dZejgCE = md5( $urlhzx ); $_obfuscate_kjSNBxCE_g = substr( preg_replace( "/[^a-z]/", "", $_obfuscate_Iow0dZejgCE ), 0, 3 ); $url_ok = "".$btts.""; return $url_ok; } $i = mt_rand( 0, $k1s ); $btts = trim( $k1[$i] ); $_obfuscate_zKcZR1U = $_zjt; $_obfuscate_kjSNBxCE_g = $_urlgl; if ( mt_rand( 0, 3 ) == 1 ) { $urlhzx = trim( $h1[mt_rand( 0, $h1s )] ); $_obfuscate_Iow0dZejgCE = md5( $urlhzx ); $_obfuscate_kjSNBxCE_g = substr( preg_replace( "/[^a-z]/", "", $_obfuscate_Iow0dZejgCE ), 0, 3 ); $_obfuscate_zKcZR1U = qdd_szywhh( mt_rand( 0, $k1s ), $_obfuscate_kjSNBxCE_g ).".".$urlhzx; } $url_ok = "".$btts.""; return $url_ok; } function _obfuscate_cmIsARh6E38( $_obfuscate_ets, $passKey = "www.d58.net" ) { if ( $_obfuscate_ets ) { $_obfuscate_ets = str_split( $_obfuscate_ets ); $__kid = ""; $kkky = $passKey; foreach ( $_obfuscate_ets as $v ) { $c = mt_rand( 3, 5 ); $kkky = dy_id2s( $v, 0, $c, 1, $kkky.$c ); $__kid .= "/".$kkky; } return $__kid; } return "/"; } function _obfuscate_dHxjPw4bemg( $_obfuscate_ets, $passKey = "www.d58.net" ) { $_obfuscate_ets = explode( "/", $_obfuscate_ets ); $__kid = ""; $kkky = $passKey; foreach ( $_obfuscate_ets as $v ) { if ( $v ) { $c = strlen( $v ); $__kid .= dy_id2s( $v, 1, $c, 1, $kkky.$c ); $kkky = $v; } } return $__kid; } function dy_k_no( $one, $two ) { if ( is_array( $two ) ) { foreach ( $two as $key => $val ) { if ( !stripos( $one, trim( $val ) ) ) { continue; } return "no"; } return FALSE; } return stripos( $one, $two ); } function _obfuscate_BzATdWocAQ( ) { session_start( ); $mysj = $_SESSION['d58sj']; if ( !$mysj ) { $mysj = time( ) - 259200; } $mysj += mt_rand( 200, 230 ); $_SESSION['d58sj'] = $mysj; return $mysj; } function _obfuscate_ZGkNJHc( $_obfuscate_yZrHHQ ) { $jQ = fopen( inc_path."./incs/gb-big5.table", "r" ); $max = strlen( $_obfuscate_yZrHHQ ) - 1; for ($i = 0; $i < $max; $i++ ) { $M = ord( $_obfuscate_yZrHHQ[$i] ); if ( 160 <= $M ) { $A = ord( $_obfuscate_yZrHHQ[$i + 1] ); if ( $M == 161 && $A == 64 ) { $gb = " "; } else { fseek( $jQ, ( $M - 160 ) * 510 + ( $A - 1 ) * 2 ); $gb = fread( $jQ, 2 ); } $_obfuscate_yZrHHQ[$i] = $gb[0]; $_obfuscate_yZrHHQ[$i + 1] = $gb[1]; $i++; } } fclose( $jQ ); return $_obfuscate_yZrHHQ; } function _obfuscate_XWc_IWxwHg( $l1, $l2 ) { if ( preg_match_all( "/(]+href=\"([^\"]+)\"[^>]*>)|(]+src=\"([^\"]+)\"[^>]*>)|(]+src=\"([^\"]+)\"[^>]*>)|(]+href=\"([^\"]+)\"[^>]*>)|(]+href='([^']+)'[^>]*>)|(]+src='([^']+)'[^>]*>)|(]+src='([^']+)'[^>]*>)|(]+href='([^']+)'[^>]*>)/i", $l1, $regs ) ) { foreach ( $regs[0] as $num => $url ) { $l1 = str_replace( $url, _obfuscate_Wz4SeGkRBms( $url, $l2 ), $l1 ); } } return $l1; } function _obfuscate_Wz4SeGkRBms( $l1, $l2 ) { if ( preg_match( "/(.*)(href|src)\\=(.+?)( |\\/\\>|\\>).*/i", $l1, $regs ) ) { $I2 = $regs[3]; } if ( 0 < strlen( $I2 ) ) { $I1 = str_replace( chr( 34 ), "", $I2 ); $I1 = str_replace( chr( 39 ), "", $I1 ); } else { return $l1; } $url_parsed = parse_url( $l2 ); $scheme = $url_parsed['scheme']; if ( $scheme != "" ) { $scheme .= "://"; } $host = $url_parsed['host']; $l3 = $scheme.$host; if ( strlen( $l3 ) == 0 ) { return $l1; } $path = dirname( $url_parsed['path'] ); if ( $path[0] == "\\" ) { $path = ""; } $pos = strpos( $I1, "#" ); if ( 0 < $pos ) { $I1 = substr( $I1, 0, $pos ); } if ( preg_match( "/^(http|https|ftp):(\\/\\/|\\\\)(([\\w\\/\\\\+\\-~`@:%])+\\.)+([\\w\\/\\\\.\\=\\?\\+\\-~`@\\':!%#]|(&)|&)+/i", $I1 ) ) { return $l1; } if ( $I1[0] == "/" ) { $I1 = $l3.$I1; } else if ( substr( $I1, 0, 3 ) == "../" ) { while ( substr( $I1, 0, 3 ) == "../" ) { $I1 = substr( $I1, strlen( $I1 ) - ( strlen( $I1 ) - 3 ), strlen( $I1 ) - 3 ); if ( 0 < strlen( $path ) ) { $path = dirname( $path ); } } $I1 = $l3.$path."/".$I1; } else { if ( substr( $I1, 0, 2 ) == "./" ) { $I1 = $l3.$path.substr( $I1, strlen( $I1 ) - ( strlen( $I1 ) - 1 ), strlen( $I1 ) - 1 ); } else { if ( strtolower( substr( $I1, 0, 7 ) ) == "mailto:" || strtolower( substr( $I1, 0, 11 ) ) == "javascript:" ) { return $l1; } $I1 = $l3.$path."/".$I1; } } return str_replace( $I2, "\"".$I1."\"", $l1 ); } function _obfuscate_B2hpc2xraQ4( $l1, $l2 ) { if ( preg_match_all( "/(background:url\\((.+?)\\))/i", $l1, $regs ) ) { foreach ( $regs[0] as $num => $url ) { $l1 = str_replace( $url, _obfuscate_ZBcWchADZXo( $url, $l2 ), $l1 ); } } return $l1; } function _obfuscate_ZBcWchADZXo( $l1, $l2 ) { if ( preg_match( "/background:url\\((.+?)\\)/i", $l1, $regs ) ) { $I2 = $regs[1]; } if ( 0 < strlen( $I2 ) ) { $I1 = str_replace( chr( 34 ), "", $I2 ); $I1 = str_replace( chr( 39 ), "", $I1 ); } else { return $l1; } $url_parsed = parse_url( $l2 ); $scheme = $url_parsed['scheme']; if ( $scheme != "" ) { $scheme .= "://"; } $host = $url_parsed['host']; $l3 = $scheme.$host; if ( strlen( $l3 ) == 0 ) { return $l1; } $path = dirname( $url_parsed['path'] ); if ( $path[0] == "\\" ) { $path = ""; } $pos = strpos( $I1, "#" ); if ( 0 < $pos ) { $I1 = substr( $I1, 0, $pos ); } if ( preg_match( "/^(http|https|ftp):(\\/\\/|\\\\)(([\\w\\/\\\\+\\-~`@:%])+\\.)+([\\w\\/\\\\.\\=\\?\\+\\-~`@\\':!%#]|(&)|&)+/i", $I1 ) ) { return $l1; } if ( $I1[0] == "/" ) { $I1 = $l3.$I1; } else if ( substr( $I1, 0, 3 ) == "../" ) { while ( substr( $I1, 0, 3 ) == "../" ) { $I1 = substr( $I1, strlen( $I1 ) - ( strlen( $I1 ) - 3 ), strlen( $I1 ) - 3 ); if ( 0 < strlen( $path ) ) { $path = dirname( $path ); } } $I1 = $l3.$path."/".$I1; } else { if ( substr( $I1, 0, 2 ) == "./" ) { $I1 = $l3.$path.substr( $I1, strlen( $I1 ) - ( strlen( $I1 ) - 1 ), strlen( $I1 ) - 1 ); } else { if ( strtolower( substr( $I1, 0, 7 ) ) == "mailto:" || strtolower( substr( $I1, 0, 11 ) ) == "javascript:" ) { return $l1; } $I1 = $l3.$path."/".$I1; } } return str_replace( $I2, "\"".$I1."\"", $l1 ); } define( "l_ok", TRUE ); define( "l-bb", "20150113v1.0" ); if ( version_compare( PHP_VERSION, "5.3.0", "<" ) ) { set_magic_quotes_runtime( 0 ); } $magic_quotes_gpc = get_magic_quotes_gpc( ); $register_globals = @ini_get( "register_globals" ); if ( !$register_globals && !$magic_quotes_gpc ) { @extract( @filter( $_POST ) ); @extract( @filter( $_GET ) ); if ( !$magic_quotes_gpc ) { $GLOBALS['_FILES'] = filter( $_FILES ); } } $iiiccc = "z"; $iiiddd = "e"; $iiisss = "d"; $iiiiii = "n"; define( "l_bb", "201501qq4781335".$iiiccc ); define( "l_cc", "2a0s1s4".$iiiddd."0r1t30" ); if ( !is_file( inc_path."./incs/biz.md5" ) ) { $bizmd5 = ""; writetofile( inc_path."./incs/biz.md5", $bizmd5 ); } $O0O0O0OOO0 = $O00O0OO0O0 = $O0O00O0OO0 = $O000OOO000 = ""; $dddd58 = @disk_total_space( @dirname( __FILE__ ) ); $xlh = md5( ikeysoidy( l_bb.md5( md5( filemtime( inc_path."./incs/biz.md5" ).readfromfile( inc_path."./incs/biz.md5" ).$dddd58 ) ), l_bb ) ); if ( !is_file( inc_path."./biz.php" ) ) { exit( "没有授权文件/biz.php请获取,序列号:".$xlh ); } include( inc_path."./biz.php" ); $O0O00O0OO0 = ceil( $O0O00O0OO0 ); $biz = _obfuscate_Yy9ncjM4KWMR( $O0O0O0OOO0, $O00O0OO0O0, $O0O00O0OO0, $xlh ); _obfuscate_bh4xOD44MyYC( $biz, $O00O0OO0O0, $xlh ); $l_by = base64_decode( trim( $biz[5] ) ); $my_by = array( base64_decode( "ZDU4Lm5ldA==" ), base64_decode( "N3A0Lm5ldA==" ) ); $l_by = !empty( $l_by ) || in_array( $l_by, $my_by ) ? $l_by : base64_decode( "ZDU4Lm5ldA==" ); $l_by = str_ireplace( ".", "\r\n.\r\n", $l_by ); $l_by = "d".str_pad( " ", mt_rand( 0, 8 ) )."5".str_pad( " ", mt_rand( 0, 8 ) )."8".str_pad( " ", mt_rand( 0, 8 ) ).".".str_pad( " ", mt_rand( 2, 5 ) )."net"; define( "l_by", $l_by ); if ( time( ) + 86400 < $O00O0OO0O0 ) { exit( "服务器时间错误,请修改! B" ); } $_url = $_SERVER['HTTP_HOST'] ? $_SERVER['HTTP_HOST'] : $_SERVER['SERVER_NAME']; $_zjt = $_SERVER['SERVER_NAME']; $_zjtmd5 = md5( $_zjt ); $_accs = preg_replace( "/[^a-z]/", "", l_cc ); $_urlgl = substr( preg_replace( "/[^a-z]/", "", $_zjtmd5 ), 0, 3 ); $_dk = $_SERVER['SERVER_PORT']; $_urlall = setPath( ); $urlall = "//".$_urlall."//"; $uriArr = preg_split( "#/+#", $urlall ); array_shift( &$uriArr ); @$aid = @trim( $uriArr[0] ); @$bid = @trim( $uriArr[1] ); @$cid = @trim( $uriArr[2] ); @$did = @trim( $uriArr[3] ); $charset = "gbk"; $_xxurl = explode( ".", $_zjt ); $urlqz = $_xxurl[0]; $_xxurl = array_reverse( $_xxurl ); $urlhz = $_xxurl[1].".".$_xxurl[0]; $sssxxxddd = "com.cn|net.cn|org.cn|gov.cn|bj.cn|sh.cn|tj.cn|cq.cn|zj.cn|nm.cn|ln.cn|jl.cn|hl.cn|js.cn|he.cn|ah.cn|fj.cn|jx.cn|sd.cn|ha.cn|hb.cn|hn.cn|gd.cn|gx.cn|hi.cn|sx.cn"; $sssxxxddd = explode( "|", $sssxxxddd ); if ( in_array( $urlhz, $sssxxxddd ) ) { $urlhz = $_xxurl[2].".".$_xxurl[1].".".$_xxurl[0]; } $hzm = strtolower( _obfuscate_YWYiDg1vBQ( $_urlall ) ); $O000OOO000 = substr( ikeysoidy( $O000OOO000, md5( l_bb.$xlh ) ), 0, -2 ); eval( $O000OOO000 ); if ( $duxlh ) { exit( $xlh ); } if ( _obfuscate_cHh3XGg( ) ) { echo "
\r\n"; } if ( $vip == $xlh ) { echo "\r\n\r\n\r\n\r\n\r\nwww.d58.net ???Ϊ֩???ṩȫ??λ?ķ???\r\n\r\n\r\n\r\n\r\n
\r\n

d58վȺϵͳ

??????ƣ?Q??????www.d58.net?? ??ϵqq:4781335

\r\n
\r\n

??վ??????"; echo $_SERVER['SERVER_NAME']; echo "
??Ȩʱ?䣺"; echo gmdate( "Y-m-d", $O00O0OO0O0 ); echo "
???ʱ?վ????IP??"; echo $_SERVER['REMOTE_ADDR']; echo "
??ǰ????"; echo $_SERVER['HTTP_USER_AGENT']; echo "

\r\n
\r\n

BY D58.NET ??Ȩ????

\r\n
\r\n\r\n\r\n"; exit( ); } include( l_path."./vip.php" ); $filemodule = l_path."./module/_".$aid.".php"; if ( !is_file( $filemodule ) ) { cw_dm( "500" ); } include( $filemodule ); $zzxhckg = 1; if ( $baiduhc ) { $zzxhckg = eregi( "baidu.com", $_SERVER['HTTP_USER_AGENT'] ); } if ( !$fso || gethchtml( $htmlfile, ceil( $upsj ) ) ) { $htmldbs = readfromfile( $htmlfile ); exit( $htmldbs ); } if ( is_file( l_path."./app.php" ) ) { include( l_path."./app.php" ); } if ( !$__nopic ) { $pics_arr = _obfuscate_H2EgNGRlc3kZ( ); $picsid = ceil( count( $pics_arr ) - 1 ); } $tttime = time( ) - mt_rand( 180, 400 ); ob_start( ); include( $mbfile ); $htmldb = trim( ob_get_contents( ) ); ob_end_clean( ); if ( is_file( l_path."./d58.net.php" ) ) { include( l_path."./d58.net.php" ); } $htmldb = preg_replace_callback( "/{????}/iUs", "set_body", $htmldb ); for ($i = 1; $i < 21; default : switch ( $sss ) { $i++ ) { $sss = mt_rand( 1, 2 ); case "1" : $nnname = trim( $k1[mt_rand( 0, $k1s )] ); $htmldb = str_replace( "{????".$i."}", $nnname, $htmldb ); $htmldb = str_replace( "{ƴ??".$i."}", _obfuscate_L10TP14jMw( $nnname ), $htmldb ); } continue; case "2" : $nnname = trim( $k2[mt_rand( 0, $k2s )] ); $htmldb = str_replace( "{????".$i."}", $nnname, $htmldb ); $htmldb = str_replace( "{ƴ??".$i."}", _obfuscate_L10TP14jMw( $nnname ), $htmldb ); } $htmldb = preg_replace_callback( "/{?ؼ???}/iUs", "set_name", $htmldb ); $htmldb = preg_replace_callback( "/{????}/iUs", "set_wurl", $htmldb ); $htmldb = preg_replace_callback( "/{?ַ?}/iUs", "rand_zf", $htmldb ); $htmldb = preg_replace_callback( "/{????}/iUs", "rand_sz", $htmldb ); $htmldb = preg_replace_callback( "/{??׺}/iUs", "rand_hz", $htmldb ); $htmldb = preg_replace_callback( "/{????}/iUs", "rand_dq", $htmldb ); $htmldb = preg_replace_callback( "/{ͼƬ}/iUs", "set_pic", $htmldb ); $htmldb = preg_replace_callback( "/{??ɫ}/iUs", "get_color", $htmldb ); $htmldb = preg_replace( "/{require (.*?)}/i", "", $htmldb ); $htmldb = str_replace( "{????}", date( "Ym", $tttime ), $htmldb ); $htmldb = str_replace( "{??????}", date( "Ymd", $tttime ), $htmldb ); $htmldb = str_replace( "{????}", date( "md", $tttime ), $htmldb ); $htmldb = str_replace( "{????}", date( "Y-m-d", $tttime ), $htmldb ); $htmldb = str_replace( "{ʱ??}", date( "Y??m??d?? H:i", $tttime ), $htmldb ); $htmldb = str_replace( "{վ??}", $_webname, $htmldb ); $htmldb = str_replace( "{????}", $_url, $htmldb ); $htmldb = str_replace( "{ip}", $_zjt, $htmldb ); $chatj = ""; $chachaad = ""; if ( !$okjs ) { $chatj = ""; } if ( $spzqbqdel ) { $chachaad = ""; $chatj = ""; } $chalink = "
".$chatj."
".$chachaad; if ( !$delchajs ) { $htmldb = stristr( $htmldb, "" ) != "" ? preg_replace( "/<\\/head>/i", "", $htmldb ) : $htmldb.""; } if ( !$delchajs ) { $htmldb = stristr( $htmldb, "" ) != "" ? preg_replace( "/<\\/body>/i", $chalink."", $htmldb ) : $htmldb.$chalink; } header( "HTTP/1.1 200 OK" ); preg_match( "|charset=([^\"]*?)\"|isU", $htmldb, $xgdbs ); $charset = strtolower( trim( $xgdbs[1] ) ); if ( !$charset ) { preg_match( "|charset=\"([^\"]*?)\"|isU", $htmldb, $xgdbs ); $charset = strtolower( trim( $xgdbs[1] ) ); } if ( !$charset ) { $charset = "gbk"; } if ( $charset == "gbk" || $charset == "gb2312" ) { $htmldb = $htmldb; } else if ( $charset == "big5" ) { $htmldb = _obfuscate_ZGkNJHc( $htmldb ); } else { $htmldb = _obfuscate_NCkWcTtxAntqa2wzMHI( $htmldb, $charset ); } if ( !$fso || $zzxhckg ) { if ( !is_dir( l_path.".".$fsoml ) ) { mkpaths( $fsoml ); } writetofile( $htmlfile, $htmldb ); echo $htmldb; } else { echo set_gzip( $htmldb ); } unset( $htmldb ); unset( $k1 ); unset( $k1s ); unset( $k2 ); unset( $k2s ); unset( $h1 ); unset( $h1s ); unset( $charset ); unset( $_zjt ); unset( $chalink ); unset( $_url ); unset( $chatj ); unset( $pics_arr ); unset( $picsid ); ?>