Completeness: administrator/postupdate.php + isis/js/_template.js (clean core files absent from the downloaded package), bin/windwalker (Windwalker CLI), sbtrack.php (Cadline tracking docroot PHP). All vetted malware-free. Signed-off-by: LÁZÁR Imre <imre@illusion.hu> Assisted-by: claude-code@claude-opus-4-8
115 lines
3.2 KiB
PHP
115 lines
3.2 KiB
PHP
<?php
|
|
|
|
$cURL = isset($_GET['curl']) ? 1 : 0;
|
|
|
|
define('MT_RELEASE', '1.0');
|
|
define('MT_CURL_OK', ($cURL && in_array('curl', get_loaded_extensions())));
|
|
define('MT_TIMEOUT', 10);
|
|
define('MT_ERR', !empty($_GET['err']));
|
|
|
|
if (isset($_GET['mtnotrk'])) {
|
|
die();
|
|
}
|
|
|
|
if (MT_ERR) {
|
|
error_reporting(E_ALL);
|
|
ini_set('display_errors', 'On');
|
|
}
|
|
else {
|
|
error_reporting(0);
|
|
}
|
|
|
|
if (basename(__FILE__) == 'mytracking.php') {
|
|
die('For your safety: you should really change the name of this file');
|
|
}
|
|
|
|
if (!empty($_GET['test'])) {
|
|
die("OK: ".MT_RELEASE);
|
|
}
|
|
|
|
$hop = isset($_GET['hop']) ? $_GET['hop'] : '';
|
|
process_content(retrieve_content(calculate_url($hop)));
|
|
exit;
|
|
|
|
function calculate_url($link) {
|
|
$returnurl = '';
|
|
if ($link == '') {
|
|
$returnurl = 'http://trkapi.com/mytrackingok.gif';
|
|
} else if ((preg_match("/.+/", $link))) {
|
|
$src = array('/m/', '/r/', '/l/');
|
|
$rpl = array('', '/', '/');
|
|
$link = str_replace($src, $rpl, $link);
|
|
$returnurl = 'http://trkapi.com/' . $link; // 2.0 format
|
|
}
|
|
return $returnurl;
|
|
}
|
|
|
|
function retrieve_content($url) {
|
|
$response = '';
|
|
$mt_errstr = '';
|
|
$agent = 'MyTracking/'.MT_RELEASE;
|
|
$refr = ($_SERVER['SERVER_PORT'] == 443) ? 'https' : 'http';
|
|
$refr .= '://';
|
|
$refr .= $_SERVER['HTTP_HOST'];
|
|
$refr .= $_SERVER['REQUEST_URI'];
|
|
if ($url != '') {
|
|
if (MT_CURL_OK) {
|
|
$ch = curl_init($url);
|
|
curl_setopt($ch, CURLOPT_HEADER, 1);
|
|
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
|
|
curl_setopt($ch, CURLOPT_REFERER, $refr);
|
|
curl_setopt($ch, CURLOPT_TIMEOUT, MT_TIMEOUT);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
|
if (!$response = curl_exec($ch)) {
|
|
$mt_errstr = curl_errno($ch).' '.curl_error($ch);
|
|
}
|
|
curl_close($ch);
|
|
}
|
|
else {
|
|
$parts = parse_url($url);
|
|
$scheme = isset($parts['scheme']) ? $parts['scheme'] : 'http';
|
|
$host = isset($parts['host']) ? $parts['host'] : 'trkapi.com';
|
|
$port = isset($parts['port']) ? $parts['port'] : 80;
|
|
$path = isset($parts['path']) ? $parts['path'] : '/';
|
|
$query = isset($parts['query']) ? $parts['query'] : '';
|
|
if ($fp = fsockopen ($host, $port, $errno, $errstr, MT_TIMEOUT)) {
|
|
$agent = 'MyTracking/'.MT_RELEASE;
|
|
fputs ($fp, "GET $path?$query HTTP/1.0\r\nHost: $host\r\nUser-Agent: $agent\r\nReferer: $refr\r\n\r\n");
|
|
while (!feof($fp)) {
|
|
$response .= fgets ($fp,128);
|
|
}
|
|
fclose ($fp);
|
|
}
|
|
else {
|
|
$response = false;
|
|
$mt_errstr = $errno.' '.$errstr;
|
|
}
|
|
}
|
|
}
|
|
if ($response === false) {
|
|
if (MT_ERR) {
|
|
echo $mt_errstr;
|
|
}
|
|
else {
|
|
header("Location: /?mtnotrk=1");
|
|
exit;
|
|
}
|
|
}
|
|
else {
|
|
return $response;
|
|
}
|
|
}
|
|
|
|
function process_content($pagecontent) {
|
|
if ($pagecontent != '') {
|
|
list($headers, $body) = explode("\r\n\r\n", $pagecontent, 2);
|
|
$headerlines = explode("\r\n", $headers);
|
|
foreach ($headerlines as $header) {
|
|
if (preg_match("/^HTTP|Location:|Vary:|Content-Length:|Content-Type:/i", $header)) {
|
|
header($header);
|
|
}
|
|
}
|
|
echo $body;
|
|
}
|
|
}
|