<?php

$Live = $_GET['HLS'];

$ch = curl_init('https://thetvapp.to/tv/'.$Live.'-live-stream/');

curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch, CURLOPT_ENCODING, false);

curl_setopt($ch, CURLOPT_HEADER, true);

curl_setopt($ch, CURLOPT_HTTPHEADER, array(

'Host: thetvapp.to',

'Connection: keep-alive',

'Upgrade-Insecure-Requests: 1',

'User-Agent: NetSurf/2.0 (Linux; i686)',

'Accept: application/xml',

'Accept-Encoding: gzip, deflate',

'Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7',

));

$site = curl_exec($ch);

curl_close ($ch);

$site = str_replace(';','"',$site);

preg_match('#XSRF-TOKEN=(.*?)"#',$site,$icerik);

$Xsrf = $icerik[1];

preg_match('#thetvapp_session=(.*?)"#',$site,$icerik);

$sesID = $icerik[1];

preg_match('#"csrf-token" content="(.*?)"#',$site,$icerik);

$Csrf = $icerik[1];

preg_match('#data="(.*?)"#',$site,$icerik);

$Data = $icerik[1];


$TVApp = '{"CaWidunPmRdUvSproCeSM: "fbnsPufFyhCLsFcOeISuSvD"}';

$ch1 = curl_init('https://thetvapp.to'.$Data.'');

curl_setopt($ch1, CURLOPT_SSL_VERIFYHOST, false);

curl_setopt($ch1, CURLOPT_SSL_VERIFYPEER, false);

curl_setopt($ch1, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch1, CURLOPT_ENCODING, false);

curl_setopt($ch1, CURLOPT_POST, true);

curl_setopt($ch1, CURLOPT_POSTFIELDS, $TVApp);

curl_setopt($ch1, CURLOPT_HTTPHEADER, array(

'Host: thetvapp.to',

'Connection: keep-alive',

"X-CSRF-TOKEN: $Csrf",

'User-Agent: NetSurf/2.0 (Linux; i686)',

'Content-Type: application/json',

'Accept: */*',

'Origin: https://thetvapp.to',

"Referer: https://thetvapp.to/tv/$Live-live-stream/",

'Accept-Encoding: gzip, deflate',

'Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7',

"Cookie: XSRF-TOKEN=$Xsrf; thetvapp_session=$sesID;",

));

$site1 = curl_exec($ch1);

curl_close ($ch1);

$site1 = str_replace('\\','',$site1);

preg_match('#"(.*?)"#',$site1,$icerik);

$Link = $icerik[1];

header ("Location: $Link");

?>