BlueLotus_XSSReceiver/util.php

<?php
require_once("aes.php");

function getIP()
{
	if(isset($_SERVER['HTTP_CLIENT_IP'])) {
		$ip = $_SERVER['HTTP_CLIENT_IP'];
	}
	elseif(isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
		$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
	}
	elseif(isset($_SERVER['HTTP_X_FORWARDED'])) {
		$ip = $_SERVER['HTTP_X_FORWARDED'];
	}
	elseif(isset($_SERVER['HTTP_FORWARDED_FOR'])) {
		$ip = $_SERVER['HTTP_FORWARDED_FOR'];
	}
	elseif(isset($_SERVER['HTTP_FORWARDED'])) {
		$ip = $_SERVER['HTTP_FORWARDED']; 
	}
	else {
		$ip = isset($_SERVER['REMOTE_ADDR'])?$_SERVER['REMOTE_ADDR']:"unknown";
	}
	return $ip;
}

if (!function_exists('getallheaders')) {
    function getallheaders() {
        foreach ($_SERVER as $name => $value) {
            if (substr($name, 0, 5) == 'HTTP_') {
                $headers[str_replace(' ', '-', ucwords(strtolower(str_replace('_', ' ', substr($name, 5)))))] = $value;
            }
        }
        return $headers;
    }
}

function stripStr($str){
	if(get_magic_quotes_gpc())
		$str=stripslashes($str);
	return addslashes(htmlspecialchars($str,ENT_QUOTES));
}

function stripArr($arr){
	$new_arr=array();
	foreach($arr as $k => $v) {
		$new_arr[stripStr($k)] = stripStr($v);
	}
	return $new_arr;
}

function tryBase64Decode($arr) 
{
	if(isset($arr)&&count($arr)>0)
	{
		$isChanged=0;
		
		$new_arr = array();
		foreach($arr as $k => $v) {
			if(isBase64Formatted($v)) {
				$v=base64_decode($v);
				$isChanged=1;
			}
			$new_arr[$k]=$v;
		}
		
		if($isChanged)
			return $new_arr;
		else
			return false;
	}
	else
		return false;
}

function isBase64Formatted($str)
{
	if(preg_match('/^[A-Za-z0-9+\/=]+$/',$str))
		if ($str == base64_encode(base64_decode($str))) 
			if(preg_match('/^[A-Za-z0-9\x00-\x80~!@#$%&_+-=:";\'<>,\/"\[\]\\\^\.\|\?\*\+\(\)\{\}\s]+$/',base64_decode($str)))
				return true;
    return false;
}

function encrypt($info,$encryptPass) 
{
	return AESEncryptCtr($info,$encryptPass);
}

function decrypt($info,$encryptPass) 
{
	return AESDecryptCtr($info,$encryptPass);
}


?>