Using Default Login.\n"; } else $default_acc = false; if (empty($_REQUEST['action']) || $_REQUEST['action'] != 'FORM') { echo "\n"; echo "\n"; echo "\n"; echo "

Login*
Password*

You can set it as default in ".basename(__FILE__)."*

\n\n"; } else { $login = $not_done = false; $domain = 'keep2share.cc'; $referer = "https://$domain/"; // Login echo "\n

\n\n"; $cookie = array('use_new_design' => 0); if (!empty($_REQUEST['up_login']) && !empty($_REQUEST['up_pass'])) { if (!empty($_REQUEST['A_encrypted'])) { $_REQUEST['up_login'] = decrypt(urldecode($_REQUEST['up_login'])); $_REQUEST['up_pass'] = decrypt(urldecode($_REQUEST['up_pass'])); unset($_REQUEST['A_encrypted']); } CookieLogin($_REQUEST['up_login'], $_REQUEST['up_pass']); $login = true; } else html_error('Login failed: User/Password empty.'); // Retrive upload ID echo "\n

Retrieving upload ID

\n"; $uploadData = k2s_apireq('getUploadFormData'); k2s_checkErrors($uploadData, 'Pre-Upload Error'); // Uploading echo "\n"; $url = parse_url($uploadData['form_action']); $upfiles = upfile($url['host'], defport($url), $url['path'].(!empty($url['query']) ? '?'.$url['query'] : ''), $referer, 0, $uploadData['form_data'], $lfile, $lname, $uploadData['file_field'], '', $_GET['proxy'], $pauth, 0, $url['scheme']); // Upload Finished echo "\n"; is_page($upfiles); $status = intval(substr($upfiles, 9, 3)); $ulResult = ($status >= 500) ? array('status' => 'fail', 'code' => $status, 'message' => "HTTP Error $status.") : Get_Reply($upfiles); k2s_checkErrors($ulResult, $prefix = 'Upload error'); if (empty($ulResult['user_file_id'])) html_error('Download link not found.'); $download_link = 'https://k2s.cc/file/'.$ulResult['user_file_id']; } // Edited For upload.php usage. function EnterCaptcha($captchaImg, $inputs, $captchaSize = '5', $sname = 'Enter Captcha', $iname = 'captcha') { echo "\n\n\n"; } // Edited For upload.php usage. function reCAPTCHA($publicKey, $inputs, $sname = 'Upload File') { global $cookie, $domain, $referer, $pauth; if (empty($publicKey) || preg_match('/[^\w\.\-]/', $publicKey)) html_error('Invalid reCAPTCHA public key.'); if (!is_array($inputs)) html_error('Error parsing captcha post data.'); // Check for a global recaptcha key $page = geturl('www.google.com', 0, '/recaptcha/api/challenge?k=' . $publicKey, 'http://fakedomain.tld/fakepath', 0, 0, 0, $_GET['proxy'], $pauth);is_page($page); if (substr($page, 9, 3) != '200') html_error('Invalid or deleted reCAPTCHA public key.'); if (strpos($page, 'Invalid referer') === false) { // Embed captcha echo "\n\n\n\n"; } else { // Download captcha $page = geturl('www.google.com', 0, '/recaptcha/api/challenge?k=' . $publicKey, $referer, 0, 0, 0, $_GET['proxy'], $pauth);is_page($page); if (!preg_match('@[\{,\s]challenge\s*:\s*[\'\"]([\w\-]+)[\'\"]@', $page, $challenge)) html_error('Error getting reCAPTCHA challenge.'); $inputs['recaptcha_challenge_field'] = $challenge = $challenge[1]; $imgReq = geturl('www.google.com', 0, '/recaptcha/api/image?c=' . $challenge, $referer, 0, 0, 0, $_GET['proxy'], $pauth);is_page($imgReq); list($headers, $imgBody) = explode("\r\n\r\n", $imgReq, 2); unset($imgReq); if (substr($headers, 9, 3) != '200') html_error('Error downloading captcha img.'); $mimetype = (preg_match('@image/[\w+]+@', $headers, $mimetype) ? $mimetype[0] : 'image/jpeg'); EnterCaptcha("data:$mimetype;base64,".base64_encode($imgBody), $inputs, 20, $sname, 'recaptcha_response_field'); } exit; } function Login($user, $pass) { global $cookie, $domain, $referer, $pauth, $default_acc; $post = array(); $post['LoginForm%5Busername%5D'] = urlencode($user); $post['LoginForm%5Bpassword%5D'] = urlencode($pass); $post['LoginForm%5BrememberMe%5D'] = 1; if (empty($_POST['step']) || !in_array($_POST['step'], array('1', '2'))) { $page = geturl($domain, 0, '/login.html', $referer, 0, $post, 0, $_GET['proxy'], $pauth, 0, 'https');is_page($page); $cookie = GetCookiesArr($page); if (stripos($page, 'The verification code is incorrect.') !== false) { $data = array(); $data['cookie'] = urlencode(encrypt(CookiesToStr($cookie))); $data['action'] = 'FORM'; if (!$default_acc) { $data['A_encrypted'] = 'true'; $data['up_login'] = urlencode(encrypt($user)); // encrypt() will keep this safe. $data['up_pass'] = urlencode(encrypt($pass)); // And this too. } if (preg_match('@https?://(?:[^/]+\.)?(?:(?:google\.com/recaptcha/api)|(?:recaptcha\.net))/(?:(?:challenge)|(?:noscript))\?k=([\w\.\-]+)@i', $page, $cpid)) { $data['step'] = '1'; reCAPTCHA($pid[1], $data, 'Login'); } elseif (preg_match('@\W(auth/captcha\.html\?v=\w+)@i', $page, $cpid)) { $data['step'] = '2'; $imgReq = geturl($domain, 0, '/' . $cpid[1], $referer, $cookie, 0, 0, $_GET['proxy'], $pauth, 0, 'https');is_page($imgReq); list($headers, $imgBody) = explode("\r\n\r\n", $imgReq, 2); unset($imgReq); if (substr($headers, 9, 3) != '200') html_error('Error downloading captcha img.'); $mimetype = (preg_match('@image/[\w+]+@', $headers, $mimetype) ? $mimetype[0] : 'image/png'); EnterCaptcha("data:$mimetype;base64,".base64_encode($imgBody), $data, 20, 'Login'); } else html_error('Login CAPTCHA not found.'); exit; } is_present($page, 'Incorrect username or password', 'Login Failed: Email/Password incorrect.'); is_present($page, 'You logged in from different country IP', 'Login Failed: Your account was locked for security reasons, to unlock your account check your email.'); if (empty($cookie['c903aeaf0da94d1b365099298d28f38f'])) html_error('Login Cookie Not Found.'); if (empty($cookie['sessid'])) html_error('Session Cookie Not Found.'); $test = k2s_apireq('test'); if ($test['code'] != 403) k2s_checkErrors($test, 'Login error'); else { $page = geturl($domain, 0, '/', $referer.'login.html', $cookie, 0, 0, $_GET['proxy'], $pauth, 0, 'https');is_page($page); is_notpresent($page, '/auth/logout.html">Logout', 'Login Error.'); } SaveCookies($user, $pass); // Update cookies file return true; } if ($_POST['step'] == '1') { if (empty($_POST['recaptcha_response_field'])) html_error('You didn\'t enter the image verification code.'); $post['LoginForm%5BverifyCode%5D'] = ''; $post['recaptcha_challenge_field'] = urlencode($_POST['recaptcha_challenge_field']); $post['recaptcha_response_field'] = urlencode($_POST['recaptcha_response_field']); } else { if (empty($_POST['captcha'])) html_error('You didn\'t enter the image verification code.'); $post['LoginForm%5BverifyCode%5D'] = urlencode($_POST['captcha']); } $_POST['step'] = false; $cookie = StrToCookies(decrypt(urldecode($_POST['cookie']))); $page = geturl($domain, 0, '/login.html', $referer, $cookie, $post, 0, $_GET['proxy'], $pauth, 0, 'https');is_page($page); $cookie = GetCookiesArr($page, $cookie); is_present($page, 'The verification code is incorrect.'); is_present($page, 'Incorrect username or password', 'Login Failed: Email/Password incorrect'); is_present($page, 'You logged in from different country IP', 'Login Failed: Your account was locked for security reasons, to unlock your account check your email'); if (empty($cookie['c903aeaf0da94d1b365099298d28f38f'])) html_error('Login Cookie Not Found'); if (empty($cookie['sessid'])) html_error('Session Cookie Not Found'); $cookie['use_new_design'] = 0; $test = k2s_apireq('test'); if ($test['code'] != 403) k2s_checkErrors($test, 'Login Error'); else { $page = geturl($domain, 0, '/', $referer.'login.html', $cookie, 0, 0, $_GET['proxy'], $pauth, 0, 'https');is_page($page); is_notpresent($page, '/auth/logout.html">Logout', 'Login Error'); } SaveCookies($user, $pass); // Update cookies file return true; } function IWillNameItLater($cookie, $decrypt=true) { if (!is_array($cookie)) { if (!empty($cookie)) return $decrypt ? decrypt(urldecode($cookie)) : urlencode(encrypt($cookie)); return ''; } if (count($cookie) < 1) return $cookie; $keys = array_keys($cookie); $values = array_values($cookie); $keys = $decrypt ? array_map('decrypt', array_map('urldecode', $keys)) : array_map('urlencode', array_map('encrypt', $keys)); $values = $decrypt ? array_map('decrypt', array_map('urldecode', $values)) : array_map('urlencode', array_map('encrypt', $values)); return array_combine($keys, $values); } function CookieLogin($user, $pass) { global $domain, $referer, $secretkey, $pauth; if (empty($user) || empty($pass)) html_error('Login Failed: User or Password is empty.'); $user = strtolower($user); $filename = 'keep2share_ul.php'; if (!defined('DOWNLOAD_DIR')) { if (substr($GLOBALS['options']['download_dir'], -1) != '/') $GLOBALS['options']['download_dir'] .= '/'; define('DOWNLOAD_DIR', (substr($GLOBALS['options']['download_dir'], 0, 6) == 'ftp://' ? '' : $GLOBALS['options']['download_dir'])); } $filename = DOWNLOAD_DIR.basename($filename); if (!file_exists($filename)) return Login($user, $pass); $file = file($filename); $savedcookies = unserialize($file[1]); unset($file); $hash = hash('crc32b', $user.':'.$pass); if (is_array($savedcookies) && array_key_exists($hash, $savedcookies)) { $_secretkey = $secretkey; $secretkey = hash('crc32b', $pass).sha1($user.':'.$pass).hash('crc32b', $user); // A 56 char key should be safer. :D $testCookie = (decrypt(urldecode($savedcookies[$hash]['enc'])) == 'OK') ? IWillNameItLater($savedcookies[$hash]['cookie']) : false; $secretkey = $_secretkey; if (empty($testCookie) || (is_array($testCookie) && count($testCookie) < 1)) return Login($user, $pass); $testCookie['use_new_design'] = 0; $test = k2s_apireq('test', array('auth_token' => urldecode($testCookie['sessid']))); if ($test['code'] != 403) k2s_checkErrors($test, 'Login error'); else { // If session is expired, try to get a updated one from the site with the cookies $page = geturl($domain, 0, '/', $referer.'login.html', $testCookie, 0, 0, $_GET['proxy'], $pauth, 0, 'https');is_page($page); $testCookie = GetCookiesArr($page, $testCookie); if (stripos($page, '/auth/logout.html">Logout') === false || empty($testCookie['sessid'])) return Login($user, $pass); // Test possibly updated session $test2 = k2s_apireq('test', array('auth_token' => urldecode($testCookie['sessid']))); if ($test2['code'] == 403) return Login($user, $pass); k2s_checkErrors($test2, 'Login error'); } $GLOBALS['cookie'] = $testCookie; // Update cookies SaveCookies($user, $pass); // Update cookies file return true; } return Login($user, $pass); } function SaveCookies($user, $pass) { global $secretkey; $maxdays = 31; // Max days to keep cookies saved $filename = 'keep2share_ul.php'; $filename = DOWNLOAD_DIR.basename($filename); if (file_exists($filename)) { $file = file($filename); $savedcookies = unserialize($file[1]); unset($file); // Remove old cookies foreach ($savedcookies as $k => $v) if (time() - $v['time'] >= ($maxdays * 86400)) unset($savedcookies[$k]); } else $savedcookies = array(); $hash = hash('crc32b', $user.':'.$pass); $_secretkey = $secretkey; $secretkey = hash('crc32b', $pass).sha1($user.':'.$pass).hash('crc32b', $user); // A 56 char key should be safer. :D $savedcookies[$hash] = array('time' => time(), 'enc' => urlencode(encrypt('OK')), 'cookie' => IWillNameItLater($GLOBALS['cookie'], false)); $secretkey = $_secretkey; write_file($filename, "\r\n" . serialize($savedcookies)); } function Get_Reply($content) { if (!function_exists('json_decode')) html_error('Error: Please enable JSON in PHP.'); $content = ltrim($content); if (($pos = strpos($content, "\r\n\r\n")) > 0) $content = trim(substr($content, $pos + 4)); $cb_pos = strpos($content, '{'); $sb_pos = strpos($content, '['); if ($cb_pos === false && $sb_pos === false) html_error('JSON start braces not found.'); $sb = ($cb_pos === false || $sb_pos < $cb_pos) ? true : false; $content = substr($content, strpos($content, ($sb ? '[' : '{')));$content = substr($content, 0, strrpos($content, ($sb ? ']' : '}')) + 1); if (empty($content)) html_error('No JSON content.'); $rply = json_decode($content, true); if ($rply === NULL) html_error('Error reading JSON.'); return $rply; } function k2s_checkErrors($reply, $prefix = 'Error') { if (strtolower($reply['status']) != 'fail') return; switch ($reply['code']) { default: $msg = ($reply['message'] ? $reply['message'] : '*No message for this error*');break; case 429: $msg = 'Too many requests to the API, please try again later';break; case 500: $msg = 'Server error while processing your request, please try again later';break; case 503: $msg = 'API temporarily not available, please try again later';break; } html_error("$prefix: [{$reply['code']}] $msg."); } function k2s_apireq($actionPath, $post = array()) { if (!function_exists('json_encode')) html_error('Error: Please enable JSON in PHP.'); if (!is_array($post)) html_error('k2s_apireq: Parameter 2 must be passed as an array.'); $post['auth_token'] = (!empty($post['auth_token']) ? $post['auth_token'] : (!empty($GLOBALS['cookie']['sessid']) ? urldecode($GLOBALS['cookie']['sessid']) : false)); $page = geturl($GLOBALS['domain'], 0, '/api/v1/'.$actionPath, $GLOBALS['referer'], 0, json_encode($post), 0, $_GET['proxy'], $GLOBALS['pauth'], 0, 'https'); is_page($page); $status = intval(substr($page, 9, 3)); if ($status >= 500) return array('status' => 'fail', 'code' => $status, 'message' => "k2s_apireq: HTTP Error $status."); return Get_Reply($page); } //[31-7-2014] Written by Th3-822. //[04-4-2017] Switched to https and added cookie to avoid site's new design. - Th3-822

" . lang(301) . " " . lang(302) . ": \n\t\t\n\t