?><?php
/*
Questo file è stato scaricato da un malware contenuto nel vostro sito web.
This file has been downloaded by malware contained in your web site.
*/

$msg  = "PROGRAM: php\n";
$msg .= "CWD: " . getcwd() . "\n";
$msg .= "FILE: " . __FILE__ . "\n";
$msg .= "PID: " . getmypid() . "\n";
$msg .= "USER: " . get_current_user() . "\n";
$msg .= "\n";

foreach ($_SERVER as $var => $value) {
	  $msg .= "$var=$value\n";
}

$domain = $_SERVER['HTTP_HOST'];

$subject = 'sinkhole report';
if ($domain) { $subject .= " for $domain"; };
mail("abuse+sinkhole@seeweb.it", $subject, $msg);

$ip = $_SERVER['REMOTE_ADDR'];
$url = $_SERVER['REQUEST_URI'];
$ua = urlencode($_SERVER['HTTP_USER_AGENT']);
$url = "http://188.213.5.197/sinkhole-callhome?domain=$domain&url=$url&ip=$ip&ua=$ua&" . http_build_query($_GET);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$output = curl_exec($ch);
curl_close($ch);
$result = json_decode($output);

?>
