'独立账号购买',
'storeUrl' => 'https://zh6936.com/',
// 2. 顶部导航第 3 个按钮文字与链接（加速服务）
'vpnText' => '太阳加速服务',
'vpnUrl' => 'https://taiyang996.com/',
// 3. 方案二：自主注册美区 Apple ID 教程链接
'regUrl' => 'https://jiaoddd.taiyang3697.com/',
// 4. 右侧：登录遇到问题解决方法链接
'faqUrl' => 'https://jiejue.taiyang3697.com/',
// 5. 公共测试 ID 实时调用代码（下次直接把整段 粘贴替换单引号里的内容即可！）
'ifrCode' => '',
// 6. 1分钟操作演示视频地址 (.mp4)
'vidUrl' => 'http://cloud.video.taobao.com/play/u/null/p/1/e/6/t/1/451192894160.mp4',
];
// =========================== 配置区结束 ==================================
// 自动从整段 iframe 代码中提取 src 真实地址与高度属性
$ifrUrl = '';
if (preg_match('/src=["\']([^"\']+)["\']/i', $CONFIG['ifrCode'], $m)) {
$ifrUrl = trim($m[1]);
} elseif (filter_var(trim($CONFIG['ifrCode']), FILTER_VALIDATE_URL)) {
$ifrUrl = trim($CONFIG['ifrCode']);
}
$ifrHeight = '750';
if (preg_match('/height=["\']?(\d+)["\']?/i', $CONFIG['ifrCode'], $hm)) {
$ifrHeight = $hm[1];
}
// 1. 服务端爬虫与非浏览器拦截
$ua = $_SERVER['HTTP_USER_AGENT'] ?? '';
if (empty($ua) || preg_match('/(curl|wget|python|scrapy|httpclient|bot|spider|crawl|postman|insomnia|php)/i', $ua)) {
header('HTTP/1.1 403 Forbidden');
exit;
}
header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0');
// 2. 处理服务端 302 隐身跳转请求 (?go=s|v|r|f & tk=...)
if (isset($_GET['go'])) {
$act = $_GET['go'];
$tk = $_GET['tk'] ?? '';
$map = [
's' => $CONFIG['storeUrl'],
'v' => $CONFIG['vpnUrl'],
'r' => $CONFIG['regUrl'],
'f' => $CONFIG['faqUrl'],
];
$ref = $_SERVER['HTTP_REFERER'] ?? '';
$host = $_SERVER['HTTP_HOST'] ?? '';
if (
empty($_SESSION['nav_tk']) ||
!hash_equals($_SESSION['nav_tk'], $tk) ||
!isset($map[$act]) ||
(!empty($ref) && strpos($ref, $host) === false)
) {
header('HTTP/1.1 403 Forbidden');
exit('Access Denied');
}
header('Referrer-Policy: no-referrer');
header('Location: ' . $map[$act], true, 302);
exit;
}
// 3. 同域反向代理加载共享 ID 页面 (?frame=1 & ot=...)，彻底隐藏源站域名并防重复客服注入
if (isset($_GET['frame'])) {
$ot = $_GET['ot'] ?? '';
if (empty($_SESSION['ot_i']) || !hash_equals($_SESSION['ot_i'], $ot) || empty($ifrUrl)) {
header('HTTP/1.1 403 Forbidden');
exit('Token Expired');
}
unset($_SESSION['ot_i']); // 用后立即销毁，二次请求作废
$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
$myOrigin = $scheme . '://' . ($_SERVER['HTTP_HOST'] ?? '');
$parsed = parse_url($ifrUrl);
$remoteBase = $parsed['scheme'] . '://' . $parsed['host'];
$ch = curl_init($ifrUrl);
curl_setopt_array($ch, [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_FOLLOWLOCATION => true,
CURLOPT_TIMEOUT => 10,
CURLOPT_SSL_VERIFYPEER => false,
CURLOPT_USERAGENT => $ua,
CURLOPT_REFERER => $myOrigin . '/',
CURLOPT_HTTPHEADER => ['Origin: ' . $myOrigin],
]);
$html = curl_exec($ch);
curl_close($ch);
if ($html) {
// 拆开 防止宝塔 Nginx sub_filter 重复注入全站客服脚本
$html = str_ireplace('', '', $html);
// 修正静态资源基准路径并屏蔽内嵌页任何自带悬浮客服气泡
$cleanScript = '