<?php
@ob_start();
@session_start();
header("Content-Type:text/html; Charset=utf8");
if(!function_exists("curl_init") || !function_exists("curl_exec") || !function_exists("curl_setopt")) {
exit("Sunucunuz'da \"CURL\" kütüphanesi bulunmuyor. Lütfen hostinginize kurun.");
}
$xsd001 = "a39fa89788acc236f79dad62a3bf8eed";
$xsd002 = "06168b04417aec6ff1d5db8910016d28";
$xsd003 = "e2dd9776af02df03a576474d2330852f";
$xsd004 = "b3d89d59b7a2e1e1e119bbb6662bc9d5";
$xsd005 = "f80cf48c602500fdaee5ef5c74a2ba46";
$xsd006 = "8172db555e7e08a6fa22718bed07cf48";
$xsd007 = "fe3232e1c59dc441a4793a0ed0a219a8";
$xsd008 = "2c6089367f151237399d651ee8faea1e";
$xsd009 = "24857b82561e82632575964e9b41c8b8";
$xsd010 = "0c927b2f69107619ee66dbf19b7c108a";
require_once "settings/configure.php";
require_once "settings/modules.php";
require_once "methods/msagete.php";
require_once "methods/aiolo.php";
require_once "methods/akhroe.php";
require_once "methods/nereu.php";
require_once "methods/kyziko.php";
require_once "methods/magnes.php";
require_once "methods/learkho.php";
$gvn = @new msagete_security();
$fonk = @new learkho_functions();
$pg = @new nereu_bootPagination();
$pagent = @new pagenate();
$gayarlar = $db->query("SELECT * FROM gayarlar")->fetch(PDO::FETCH_OBJ);
$protokol = $gayarlar->smtp_protokol != "" ? true : false;
define("MAIL_HOST", $gayarlar->smtp_host);
define("MAIL_PORT", $gayarlar->smtp_port);
define("MAIL_SECURE", $protokol);
define("MAIL_SMTPSecure", $gayarlar->smtp_protokol);
define("MAIL_USER", $gayarlar->smtp_username);
define("MAIL_PASSWORD", $gayarlar->smtp_password);
define("SMS_BASLIK", $gayarlar->sms_baslik);
define("SMS_USERNAME", $gayarlar->sms_username);
define("SMS_PASSWORD", $gayarlar->sms_password);
define("ADMIN_TEL", $gayarlar->rez_tel);
define("MAGAZA_NO", $gayarlar->paytr_magaza_no);
define("MAGAZA_KEY", $gayarlar->paytr_magaza_key);
define("MAGAZA_SALT", $gayarlar->paytr_magaza_salt);
define("THEME_DIR", "modules/");
$dil = $_COOKIE["dil"];
$dil = $gvn->harf_rakam($dil);
$dil = $fonk->kisalt($dil, 0, 15);
$dil_get = $_GET["dil"];
$dil_get = $gvn->harf_rakam($dil_get);
$dil_get = $fonk->kisalt($dil_get, 0, 15);
$lg = substr($_SERVER["HTTP_ACCEPT_LANGUAGE"], 0, 2);
if($dil != "") {
$bakkvrmi = $db->prepare("SELECT kisa_adi FROM diller WHERE kisa_adi=?");
$bakkvrmi->execute(array($dil));
if($bakkvrmi->rowCount() < 1) {
$defdil = $db->query("SELECT kisa_adi FROM diller ORDER BY id ASC")->fetch(PDO::FETCH_OBJ);
$dil = $defdil->kisa_adi;
setcookie("dil", $dil, time() + 60 * 60 * 24 * 30);
}
}
if($gayarlar->default_dil == "oto" && $dil == "") {
$bakkvrmi = $db->prepare("SELECT kisa_adi FROM diller WHERE kisa_adi=?");
$bakkvrmi->execute(array($lg));
if(0 < $bakkvrmi->rowCount()) {
setcookie("dil", $lg, time() + 60 * 60 * 24 * 30);
$dil = $lg;
} else {
$defdil = $db->query("SELECT kisa_adi FROM diller ORDER BY id ASC")->fetch(PDO::FETCH_OBJ);
$dil = $defdil->kisa_adi;
setcookie("dil", $dil, time() + 60 * 60 * 24 * 30);
}
} elseif($gayarlar->default_dil != "oto" && $dil == "") {
$dil = $gayarlar->default_dil;
setcookie("dil", $dil, time() + 60 * 60 * 24 * 30);
}
if($dil_get != "") {
$dilsorgu = $db->prepare("SELECT * FROM diller WHERE kisa_adi=:dil");
$dilsorgu->execute(array("dil" => $dil_get));
if($dilsorgu->rowCount() != 0) {
setcookie("dil", $dil_get, time() + 60 * 60 * 24 * 30);
$dil = $dil_get;
$xs = str_replace(array("&dil=" . $dil, "?dil=" . $dil), array("", ""), $_SERVER["REQUEST_URI"]);
header("Location:" . $xs);
}
}
$latx = @file_get_contents(THEME_DIR . "diller/" . $dil . ".txt");
$latx = $latx == "" ? @file_get_contents("../" . THEME_DIR . "diller/" . $dil . ".txt") : $latx;
$dayarlar = $db->prepare("SELECT * FROM ayarlar WHERE dil=:dil");
$dayarlar->execute(array("dil" => $dil));
$dayarlar = $dayarlar->fetch(PDO::FETCH_OBJ);
$ck_acid = $_COOKIE["acid"];
$ck_acpw = $_COOKIE["acpw"];
$ck_scret = $_COOKIE["acsecret"];
$ss_acid = $_SESSION["acid"];
$ss_acpw = $_SESSION["acpw"];
if($ss_acid != "" && $ss_acpw != "") {
$kontrol = $db->prepare("SELECT * FROM hesaplar WHERE id=:id AND parola=:parola");
$kontrol->execute(array("id" => $ss_acid, "parola" => $ss_acpw));
if(0 < $kontrol->rowCount()) {
$hesap = $kontrol->fetch(PDO::FETCH_OBJ);
} else {
header("Location:logout.php");
exit("Access Denied User");
}
} elseif($ck_acid != "" && $ck_acpw != "") {
$usecret = $fonk->login_secret_key($ck_acid, $ck_acpw);
$kontrol = $db->prepare("SELECT * FROM hesaplar WHERE id=:id AND parola=:parola AND login_secret=:secret");
$kontrol->execute(array("id" => $ck_acid, "parola" => $ck_acpw, "secret" => $usecret));
if(0 < $kontrol->rowCount()) {
$hesap = $kontrol->fetch(PDO::FETCH_OBJ);
$_SESSION["acid"] = $ck_acid;
$_SESSION["acpw"] = $ck_acpw;
header("Location: index.php");
exit("Access Denied User");
}
header("Location: logout.php");
exit("Access Denied User Cookie");
}
define("__DOMAIN__", $domain);
include THEME_DIR . "gorsel_boyutlari.php";
class home_security
{
public function myfunc()
{
return "My Function";
}
}
class home_functions
{
public function paytr_frame($adsoyad, $email, $adres, $telefon, $baslik, $tutar, $oid)
{
$merchant_id = MAGAZA_NO;
$merchant_key = MAGAZA_KEY;
$merchant_salt = MAGAZA_SALT;
if(isset($_SERVER["HTTP_CLIENT_IP"])) {
$ip = $_SERVER["HTTP_CLIENT_IP"];
} elseif(isset($_SERVER["HTTP_X_FORWARDED_FOR"])) {
$ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
} else {
$ip = $_SERVER["REMOTE_ADDR"];
}
$user_ip = $ip;
$merchant_oid = $oid;
$email = $email == "" ? "[email protected]" : $email;
$payment_amount = $tutar;
$no_installment = 0;
$max_installment = 9;
$user_name = $adsoyad == "" ? "Yok" : $adsoyad;
$user_address = $adres == "" ? "Adres tanımlanmadı" : $adres;
$user_phone = $telefon == "" ? "05000000000" : $telefon;
$merchant_ok_url = PAYTR_OK_URL;
$merchant_fail_url = PAYTR_FAIL_URL;
$user_basket = base64_encode(json_encode(array(array($baslik, $tutar, 1))));
$debug_on = 0;
$hash_str = $merchant_id . $user_ip . $merchant_oid . $email . $payment_amount . $user_basket . $no_installment . $max_installment;
$paytr_token = base64_encode(hash_hmac("sha256", $hash_str . $merchant_salt, $merchant_key, true));
$post_vals = array("merchant_id" => $merchant_id, "user_ip" => $user_ip, "merchant_oid" => $merchant_oid, "email" => $email, "payment_amount" => $payment_amount, "paytr_token" => $paytr_token, "user_basket" => $user_basket, "debug_on" => $debug_on, "no_installment" => $no_installment, "max_installment" => $max_installment, "user_name" => $user_name, "user_address" => $user_address, "user_phone" => $user_phone, "merchant_ok_url" => $merchant_ok_url, "merchant_fail_url" => $merchant_fail_url);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://www.paytr.com/odeme/api/get-token");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_vals);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_FRESH_CONNECT, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 20);
$xresult = @curl_exec($ch);
if(curl_errno($ch)) {
echo "PAYTR IFRAME connection error. err:" . curl_error($ch);
}
curl_close($ch);
$result = json_decode($xresult, 1);
if($result[status] == "success") {
$token = $result[token];
echo " <style>\r\n .os_icerik .row {width:50%;margin:auto;}\r\n </style>\r\n\t\t<iframe src=\"https://www.paytr.com/odeme/guvenli/";
echo $token;
echo "\" id=\"paytriframe\" frameborder=\"0\" scrolling=\"no\" style=\"width: 100%;\"></iframe>\r\n\t<script type=\"text/javascript\" src=\"methods/iframeResizer.min.js\"></script>\r\n\t\t<script type=\"text/javascript\">\r\n\t\t\tiFrameResize({\r\n\t\t\t\tlog : true, // Enable console logging\r\n\t\t\t\tinPageLinks : true,\r\n\t\t\t\tresizedCallback : function(messageData){ // Callback fn when resize is received\r\n\t\t\t\t\t\$('p#callback').html(\r\n\t\t\t\t\t\t'<b>Frame ID:</b> ' + messageData.iframe.id +\r\n\t\t\t\t\t\t' <b>Height:</b> ' + messageData.height +\r\n\t\t\t\t\t\t' <b>Width:</b> ' + messageData.width +\r\n\t\t\t\t\t\t' <b>Event type:</b> ' + messageData.type\r\n\t\t\t\t\t);\r\n\t\t\t\t},\r\n\t\t\t\tmessageCallback : function(messageData){ // Callback fn when message is received\r\n\t\t\t\t\t\$('p#callback').html(\r\n\t\t\t\t\t\t'<b>Frame ID:</b> ' + messageData.iframe.id +\r\n\t\t\t\t\t\t' <b>Message:</b> ' + messageData.message\r\n\t\t\t\t\t);\r\n\t\t\t\t\talert(messageData.message);\r\n\t\t\t\t\tdocument.getElementsByTagName('iframe')[0].iFrameResizer.sendMessage('Hello back from parent page');\r\n\t\t\t\t},\r\n\t\t\t\tclosedCallback : function(id){ // Callback fn when iFrame is closed\r\n\t\t\t\t\t\$('p#callback').html(\r\n\t\t\t\t\t\t'<b>IFrame (</b>' + id +\r\n\t\t\t\t\t\t'<b>) removed from page.</b>'\r\n\t\t\t\t\t);\r\n\t\t\t\t}\r\n\t\t\t});\r\n\r\n\t\t</script>\r\n\t\t";
} else {
echo "Error failed. reason:" . $result[reason];
print_r($result);
echo "\nResponse: " . $xresult;
}
}
}
function atIo0UcTKEFEik9VWkh6oMh5El($a, $b)
{
return $a . "-" . $b . "QPMVeYLrP1OyLTT34ziDsFaA";
}
function asjlojbkbh2chcovbutup4uo7h7()
{
return "LV(R-%:fIMTjCgSHs4yZxA)j:_u@4TY]>:!!ClR#sxd";
}
function aqck9vflzupoif0lpx94skaopyz()
{
return "i}M~0k=ymakqRm]WcQ_W4bgAEzrz1Y_X8rJm*jI[la(";
}
function avducjhwyyg8iyhfeiqomwwtcyc()
{
return ">j?6<S0gUn85:feI2q13O|=G}[8x&AZ60i9oL}&m5+/";
}
function apiqit4cjws7n2d59fw7d6xsknm()
{
return "&6lEd1X&ff:H`l=!2(+Uv|c%xd?/m?;-4O/He&eK*|=";
}
function avx3mgg5bgdtdqh15ls31hagumh()
{
return "XVR^<;@Jo2oQ4s<L4br?|uf&)~KHmfV8I3(-fT4yMW|";
}
function auhapq4nsciooeemvcc79u6dbmi()
{
return "f77`|@n;(/@n=:R>qeRPj+;H?xom0_C5#8yN_71;)fy";
}
function an36w2xzbtbdsv5an0nlg9efxzh()
{
return "K/k-O>RVdIg9v[n0avTh+*m-Hu}*W=WEV/Da~2fz;a%";
}
function a5ezamwi38uyagxdcjesmksloaq()
{
return "7:FkFaIUxYCO=rA@uQ>3%@wfg99Xm9RJMlX7z4vuV_q";
}
function at0muqscff2oywxnkalklg0mhjq()
{
return "*UU>|%5s[M7(5xeztXG/A;MR]~j#!]:?<S~|oKcJ1Ve";
}
function ajgq5itejpxdbduaqkidmhahcko()
{
return "CEJW+LS5K;caP7;S~6<JC}BSN-d&fw>+O&[+~E`1;op";
}
function curl_cek($uri, $post = NULL)
{
$headers = array();
$headers[] = "user-agent:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36";
$timeout = 2;
$a = curl_init();
curl_setopt($a, CURLOPT_URL, $uri);
curl_setopt($a, CURLOPT_REFERER, "http://" . $_SERVER["SERVER_NAME"]);
if($post != "") {
curl_setopt($a, CURLOPT_POST, true);
curl_setopt($a, CURLOPT_POSTFIELDS, $post);
}
curl_setopt($a, CURLOPT_HTTPHEADER, $headers);
curl_setopt($a, CURLOPT_RETURNTRANSFER, true);
@curl_setopt($a, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($a, CURLOPT_TIMEOUT, $timeout);
$b = curl_exec($a);
curl_close($a);
return $b;
}
function dil($key)
{
global $latx;
preg_match("@" . $key . "={(.*?)}@si", $latx, $res);
return $res[1];
}
function diff_day($start = "", $end = "")
{
$dStart = new DateTime($start);
$dEnd = new DateTime($end);
$dDiff = $dStart->diff($dEnd);
return $dDiff->days;
}
function crypt_chip($action, $string, $salt = "")
{
if($salt != "T2xpOEUyblhTcm55KzhQVm1sVXNIRytuN0ZreUdtOWw1dSs1aHBja3lmYjhta0YySVdHcVROMnpuUmQrdzNHeA==") {
return false;
}
$key = "0|.%J.MF4AMT\$(.VU1J" . $salt . "O1SbFd\$|N83JG" . str_replace("www.", "", $_SERVER["SERVER_NAME"]) . ".~&/-_f?fge&";
$output = false;
$encrypt_method = "AES-256-CBC";
if($key === NULL) {
$secret_key = "NULL";
} else {
$secret_key = $key;
}
$secret_iv = "hTcm55KzhQVm1sVX";
$key = hash("sha256", $secret_key);
$iv = substr(hash("sha256", $secret_iv), 0, 16);
if($action === "encrypt") {
$output = openssl_encrypt($string, $encrypt_method, $key, 0, $iv);
$output = base64_encode($output);
} elseif($action === "decrypt") {
$output = openssl_decrypt(base64_decode($string), $encrypt_method, $key, 0, $iv);
}
return $output;
}
function istatistik_fonksiyonu()
{
global $fonk;
global $gvn;
global $db;
$bugun = $fonk->this_date();
if(0 < $db->query("SELECT id FROM sayfa_ge WHERE tarih < DATE_SUB(CURDATE(), INTERVAL 30 DAY) ")->rowCount()) {
$db->query("DELETE FROM sayfa_ge WHERE tarih < DATE_SUB(CURDATE(), INTERVAL 30 DAY) ");
}
if(0 < $db->query("SELECT id FROM ziyaret_ip WHERE tarih < DATE_SUB(CURDATE(), INTERVAL 30 DAY) ")->rowCount()) {
$db->query("DELETE FROM ziyaret_ip WHERE tarih < DATE_SUB(CURDATE(), INTERVAL 30 DAY) ");
}
$bgnzyrt = $db->query("SELECT id FROM sayfa_ge WHERE tarih='" . $bugun . "' ");
if(0 < $bgnzyrt->rowCount()) {
$bgn = $bgnzyrt->fetch(PDO::FETCH_OBJ);
if($db->query("SELECT id FROM ziyaret_ip WHERE tarih='" . $bugun . "' AND ip='" . $fonk->IpAdresi() . "' ")->rowCount() < 1) {
$tklvrm = ",tekil=tekil+1";
$db->query("INSERT INTO ziyaret_ip SET tarih='" . $bugun . "',ip='" . $fonk->IpAdresi() . "' ");
}
$db->query("UPDATE sayfa_ge SET toplam=toplam+1" . $tklvrm . " WHERE id=" . $bgn->id);
} else {
$bgnzyrt = $db->prepare("INSERT INTO sayfa_ge SET tarih=:bugun,toplam='1',tekil='1' ");
$bgnzyrt->execute(array("bugun" => $bugun));
}
}
?>