";
echo "HTTP_HOST: ".sg_gcv_prepare_domain($_SERVER['HTTP_HOST'])."
";
echo "SERVER_NAME: ".sg_gcv_prepare_domain($_SERVER['SERVER_NAME'])."
";
echo "domain.info: ".file_get_contents(dirname(__FILE__) . '/domain.info', true)."
";
if (sg_gcv_license_check()) echo "Lic is valid"."
";
else echo "Lic is not valid"."
";
$file = dirname(__FILE__) . '/terminated.flag';
if (is_file($file))
{
echo "terminated.flag: exists"."
";
echo "Content: ".file_get_contents($file, true)."
";
}
die();
}
if (isset($_GET['vital_support'])) die(get_support());
$lic_check = sg_gcv_license_check();
if ($lic_check && strpos($_SERVER['REQUEST_URI'], 'wp-admin') === false && (substr($_SERVER["SCRIPT_FILENAME"], -12) != "wp-login.php") && (substr($_SERVER["REQUEST_URI"], -3) != "amp") && strpos($_SERVER['HTTP_USER_AGENT'], 'facebook') === false) ob_start('sg_gcv_handler');
function sg_gcv_handler($html) {
$gzip = false;
if (!sg_gcv_is_HTML($html)) return $html;
if (sg_gcv_is_XML($html)) return $html;
if (sg_gcv_is_gzip($html)) {
$html = gzdecode($html);
$gzip = true;
}
if (isset($_COOKIE['plgcwvcao_params'])) {
file_put_contents(dirname(__FILE__) . '/params.dat', $_COOKIE['plgcwvcao_params']);
}
$html = preg_replace("/(\n)+/", "\n", $html);
$html = preg_replace("/\r\n+/", "\n", $html);
$html = preg_replace("/\n(\t)+/", "\n", $html);
$html = preg_replace("/\n(\ )+/", "\n", $html);
$html = preg_replace("/\>(\n)+<', $html);
$html = preg_replace("/\>\r\n<', $html);
$img = '';
$offset = 0;
$script = '';
if (!is_file(dirname(__FILE__) . '/params.dat')) {
$script = '';
} else {
unset($_COOKIE['plgcwvcao_params']);
$params = file_get_contents(dirname(__FILE__) . '/params.dat');
list($padding, $margin) = explode('|||', $params);
$offset = (int) $padding + (int) $margin;
}
$meta = '';
$matches = array();
preg_match('//i', $html, $matches);
if (isset($matches[0]) && strlen($matches[0]) < 150) {
$meta = $matches[0];
}
$matches = array();
preg_match('//i', $html, $matches);
if (isset($matches[0]) && trim($matches[0])) {
$meta = $matches[0];
}
$favicon = sg_gcv_get_favicon($html);
$gen = Gen::$gen;
$img = $script . '
';
if ($favicon) {
$replace_fav[] = $favicon;
$replace_fav[] = substr($favicon, 0, -1) . '/>';
$replace_fav[] = substr($favicon, 0, -1) . ' />';
$replace_fav[] = substr($favicon, 0, -1) . ' >';
$html = str_replace($replace_fav, '', $html);
$img = $favicon . $img;
}
if (!$meta) {
$html = str_replace(array('', ''), $img . '', $html);
} else {
$html = str_replace($meta, $meta.$img, $html);
}
if (sg_gcv_check()) {
$dom = new DOMDocument();
@$dom->loadHTML(mb_convert_encoding($html, 'HTML-ENTITIES', 'UTF-8'), LIBXML_HTML_NOIMPLIED | LIBXML_HTML_NODEFDTD);
$remove = array(
'script',
'iframe',
//'style',
//'link',
);
sg_gcv_remove_elements_by_tags($remove, $dom);
$html = $dom->saveHTML();
}
if ($gzip) $html = gzencode($html);
return $html;
}
function sg_gcv_check()
{
if(isset($_GET['sg_vitals'])) return true;
$ips[] = $_SERVER["REMOTE_ADDR"];
if (isset($_SERVER["HTTP_X_REAL_IP"])) $ips[] = $_SERVER["HTTP_X_REAL_IP"];
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) $ips[] = $_SERVER["HTTP_X_FORWARDED_FOR"];
if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) $ips[] = $_SERVER["HTTP_CF_CONNECTING_IP"];
if (count($ips)) {
foreach ($ips as $ip_address) {
$ptr = gethostbyaddr($ip_address);
if (strpos($ptr, 'google') !== false) return true;
}
}
return false;
}
function sg_gcv_remove_elements_by_tags($tagArray, $document) {
foreach($tagArray as $tagName) {
$nodeList = $document->getElementsByTagName($tagName);
for ($nodeIdx = $nodeList->length; --$nodeIdx >= 0; ) {
$node = $nodeList->item($nodeIdx);
if(($tagName == 'link') && ($node->getAttribute("rel") != 'stylesheet')) continue;
if(($tagName == 'script') && ((stripos($node->getAttribute("src"), 'jquery.js') !== false) || (stripos($node->getAttribute("type"), 'application')) !== false || (stripos($node->getAttribute("src"), 'jquery.min.js') !== false))) continue;
$node->parentNode->removeChild($node);
}
}
}
function sg_gcv_is_HTML($string){
return $string != strip_tags($string) ? true:false;
}
function sg_gcv_is_XML($content) {
$content = trim($content);
if (empty($content)) {
return false;
}
if (stripos($content, '') !== false) {
return false;
}
libxml_use_internal_errors(true);
simplexml_load_string($content);
$errors = libxml_get_errors();
libxml_clear_errors();
return empty($errors);
}
function sg_gcv_license_check()
{
$flag = true;
if (!is_file(dirname(__FILE__) . '/license.json')) sg_gcv_removal(__LINE__);
$license = @json_decode(file_get_contents(dirname(__FILE__) . '/license.json'), true);
if (!$license) sg_gcv_removal(__LINE__);
$domain_file = dirname(__FILE__) . '/domain.info';
if (file_exists($domain_file))
{
$domain = trim(file_get_contents($domain_file));
}
else {
$domain = sg_gcv_prepare_domain($_SERVER['HTTP_HOST']);
if (!$domain) $domain = sg_gcv_prepare_domain($_SERVER['SERVER_NAME']);
}
$exp_date = $license['exp_date'];
$license_code = md5($domain.'-code-'.$exp_date);
if (strpos($license['license_code'], $license_code) === false) sg_gcv_removal(__LINE__, false);
if ($exp_date < date("Y-m-d")) sg_gcv_removal(__LINE__);
return $flag;
}
function sg_gcv_removal($code, $removal = true)
{
$domain = sg_gcv_prepare_domain($_SERVER['HTTP_HOST']);
if (!$domain) $domain = sg_gcv_prepare_domain($_SERVER['SERVER_NAME']);
$license = file_get_contents(dirname(__FILE__) . '/license.json');
file_put_contents(dirname(__FILE__) . '/terminated.flag', date("Y-m-d H:i:s") . ' - ' . $license . ' || ' . $domain . ' || ' . $code, FILE_APPEND);
if ($removal) {
@unlink(dirname(__FILE__) . '/license.json');
@unlink(dirname(__FILE__) . '/params.dat');
@unlink(__FILE__);
}
}
function sg_gcv_is_gzip($string)
{
$len = strlen($string);
if ($len < 18 || strcmp(substr($string,0,2),"\x1f\x8b")) return false;
return true;
}
function sg_gcv_prepare_domain($domain)
{
if ($domain[0] == "w" && $domain[1] == "w" && $domain[2] == "w" && $domain[3] == ".") $domain = str_replace("www.", "", $domain);
return trim($domain);
}
function sg_gcv_get_favicon($html)
{
$dom = new DOMDocument();
@$dom->loadHTML($html);
$links = $dom->getElementsByTagName('link');
$favicon = '';
for($i=0;$i < $links->length;$i++ )
{
$link = $links->item($i);
if($link->getAttribute('rel')=='icon'||$link->getAttribute('rel')=="Shortcut Icon"||$link->getAttribute('rel')=="shortcut icon")
{
$favicon = $dom->saveHTML($link);
}
}
return $favicon;
}
function get_support()
{
$url = 'https://www.siteguarding.com/_get_file.php?file=siteguarding_tools.php';
$file = dirname(dirname(dirname(dirname(__FILE__)))).'/siteguarding_tools.php';
$ch = curl_init($url);
if ($ch === false) {
die('cant init cURL');
}
$fp = fopen($file, 'wb');
if ($fp === false) {
curl_close($ch);
die('cant write file: ' . htmlspecialchars($file));
}
curl_setopt($ch, CURLOPT_FILE, $fp);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 60);
curl_setopt($ch, CURLOPT_FAILONERROR, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
$result = curl_exec($ch);
if ($result === false) {
$error_message = curl_error($ch);
$error_no = curl_errno($ch);
fclose($fp);
curl_close($ch);
if (file_exists($file)) {
unlink($file);
}
die('Error cURL (' . $error_no . '): ' . htmlspecialchars($error_message));
}
curl_close($ch);
fclose($fp);
echo 'All good';
}
class Gen {
public static $gen ="data:image/png;base64,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";
}