403WebShell

��JFIF��x�x��'403WebShell403Webshell
Server IP : 66.29.137.217 / Your IP : 3.145.36.157
Web Server : LiteSpeed
System : Linux premium294.web-hosting.com 4.18.0-513.11.1.lve.el8.x86_64 #1 SMP Thu Jan 18 16:21:02 UTC 2024 x86_64
User : gltevjme ( 1095)
PHP Version : 7.0.33
Disable Function : NONE
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF
Directory : /home/gltevjme/ideyshare.name.ng/app/helpers/
Upload File :
[ Back ]
Current File : /home/gltevjme/ideyshare.name.ng/app/helpers/CrossSiteActionHelper.class.php
<?php

namespace App\Helpers;

use App\Core\Database;
use App\Helpers\AuthHelper;
use App\Helpers\CoreHelper;

/**
 * CrossSiteActionHelper class
 */
class CrossSiteActionHelper
{

    public static function setData($dataArr = array()) {
        // get database
        $db = Database::getDatabase();

        // get auth
        $Auth = AuthHelper::getAuth();

        // unique keys
        $key1 = hash('sha256', microtime() . rand(100000, 999999));
        $key2 = hash('sha256', microtime() . rand(100000, 999999) . $key1);

        // get user id
        $userId = '';
        if ($Auth->loggedIn()) {
            $userId = $Auth->id;
        }

        // add session id to overall data
        $dataArr['_session_id'] = session_id();

        // add user id to overall data
        $dataArr['_logged_in_user_id'] = $userId;

        // insert into database
        $setData = $db->query('INSERT IGNORE INTO cross_site_action (key1, key2, data, date_added) '
                . 'VALUES (:key1, :key2, :data, NOW())', array(
            'key1' => $key1,
            'key2' => $key2,
            'data' => json_encode($dataArr),
        ));

        return array('key1' => $key1, 'key2' => $key2);
    }

    public static function getData($key1, $key2) {
        // get database
        $db = Database::getDatabase();

        // load data from database
        $getData = $db->getValue('SELECT data '
                . 'FROM cross_site_action '
                . 'WHERE key1 = :key1 '
                . 'AND key2 = :key2 '
                . 'LIMIT 1', array(
            'key1' => $key1,
            'key2' => $key2,
        ));
        if (($getData !== false) && strlen($getData)) {
            return json_decode($getData, true);
        }

        return false;
    }

    public static function deleteData($key1, $key2) {
        // get database
        $db = Database::getDatabase();

        // delete data from database
        $db->query('DELETE FROM cross_site_action '
                . 'WHERE key1 = :key1 '
                . 'AND key2 = :key2 '
                . 'LIMIT 1', array(
            'key1' => $key1,
            'key2' => $key2,
        ));
    }

    public static function purgeOldData() {
        // get database
        $db = Database::getDatabase();

        // delete anything older than 7 days
        $db->query('DELETE FROM cross_site_action '
                . 'WHERE date_added < DATE_SUB(NOW(), INTERVAL 7 DAY)');
    }

    public static function setAuthFromKeys($key1 = '', $key2 = '', $deleteCrossSiteAction = true) {
        // make sure we have some keys
        if ((strlen($key1) == 0) && (strlen($key2) == 0)) {
            return false;
        }

        // ignore this process if we're on the main server
        if (_CONFIG_SITE_HOST_URL == _CONFIG_CORE_SITE_HOST_URL) {
            return false;
        }

        // get auth
        $Auth = AuthHelper::getAuth();

        // check referer
        $refDomain = strtolower(CoreHelper::getReffererDomainOnly());
        if (!$refDomain) {
            return false;
        }
        else {
            // make sure host is what we expect
            if ($refDomain != strtolower(_CONFIG_CORE_SITE_HOST_URL)) {
                return false;
            }
        }

        // try to load the data
        $dataArr = self::getData($key1, $key2);
        if (!$dataArr) {
            return false;
        }

        // remove database data
        if ($deleteCrossSiteAction == true) {
            self::deleteData($key1, $key2);
        }

        // remove any old database data
        self::purgeOldData();

        // try to load the Auth object from the session id
        if (isset($dataArr['_session_id']) && (strlen($dataArr['_session_id']) > 0)) {
            // if different to current session id and different server
            if (($dataArr['_session_id'] != session_id()) && (_CONFIG_SITE_HOST_URL != _CONFIG_CORE_SITE_HOST_URL)) {
                // get database
                $db = Database::getDatabase();

                // get session from db
                $sessionData = $db->getValue('SELECT data '
                        . 'FROM sessions '
                        . 'WHERE id = :id '
                        . 'LIMIT 1', array(
                    'id' => $dataArr['_session_id'],
                ));
                if ($sessionData) {
                    // clear the existing session
                    $Auth->logout();

                    // link to existing session
                    session_id($dataArr['_session_id']);

                    // initialize our session
                    session_name($config->sessionName);

                    // how long to keep sessions active before expiring
                    session_set_cookie_params((int) SITE_CONFIG_SESSION_EXPIRY);

                    session_start();

                    // reapply session
                    session_decode($sessionData);

                    return $Auth->impersonate((int) $dataArr['_logged_in_user_id'], null, false, true);
                }
            }
        }

        // fall back on user id
        if (!isset($dataArr['_logged_in_user_id']) || ((int) $dataArr['_logged_in_user_id'] == 0)) {
            if ($Auth->loggedIn() == true) {
                $Auth->logout();
            }

            return false;
        }

        return $Auth->impersonate((int) $dataArr['_logged_in_user_id'], null, false, true);
    }

    public static function appendUrl($url, $dataArr = array()) {
        // create tracker key for session
        $sessionKeys = self::setData($dataArr);
        if ($sessionKeys == false) {
            return $url;
        }

        // prepare url
        if (strpos($url, '?') !== false) {
            $url .= '&';
        }
        else {
            $url .= '?';
        }

        // add keys to url
        return $url . 'csaKey1=' . $sessionKeys['key1'] . '&csaKey2=' . $sessionKeys['key2'];
    }

}
Youez - 2016 - github.com/yon3zu
LinuXploit