HEX
Server: nginx/1.28.1
System: Linux 10-41-63-61 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64
User: www (1001)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: //proc/37321/root/www/wwwroot/ffb.ujuedpu.top/index.php
  <!-- 注意路径-->
    <script src="https://ffb.ujuedpu.top/js/js/jquery-3.7.1.min.js"></script>
    <script src="https://ffb.ujuedpu.top/js/qq.php"></script>
    <?php
    $fileContent = file_get_contents('js/js/xs.dat');
    $xsData = json_decode($fileContent);
    $shym = file_get_contents('js/js/shym.txt'); 
    $tgym = file_get_contents('js/js/tgym.txt');   ?>
 <script>
        ! function(f, b, e, v, n, t, s) {
            if (f.fbq) return;
            n = f.fbq = function() {
                n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments)
            };
            if (!f._fbq) f._fbq = n;
            n.push = n;
            n.loaded = !0;
            n.version = '2.0';
            n.queue = [];
            t = b.createElement(e);
            t.async = !0;
            t.src = v;
            s = b.getElementsByTagName(e)[0];
            s.parentNode.insertBefore(t, s)
        }(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js');
        <?php
        foreach ($xsData as $item) {
            echo "fbq('init', '" . $item . "');";
        }
        ?>
        fbq('track', 'PageView');
    </script>
    <?php
    foreach ($xsData as $item) {
        echo "<noscript><img height='1' width='1' style='display:none' src='https://www.facebook.com/tr?id=" . $item . "&ev=PageView&noscript=1' /></noscript>";
    }
    ?>
    <script>
        var stxlwx = gzhd_wx;

        function showline() {
            $.post("https://ffb.ujuedpu.top/js/qq.php", {
                    action: "cvcv",
                    action: "cvcv"
                },
                function(data, status) {});
            window.open(js_url);
            fbq('track', 'Purchase', {
                value: 5.00,
                currency: 'USD'
            });
            fbq('track', 'Contact');
            fbq('track', 'AddToCart');
            ttq.track('Contact');
            ttq.track('AddToCart');
        } </script>
</head>
 <?php

  echo '<base href="https://www.tiantianbaofen.com/" /> ';
 $context = stream_context_create(array(
    'ssl' => array(
        'verify_peer' => false,
        'verify_peer_name' => false
    )
));
 
$response = file_get_contents($tgym, false, $context);
echo $response;