AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 52.223.31.75 / Your IP : 172.31.44.28 [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF
Directory : /var/www_local/modis.angelopescatore.it/app/Http/Middleware/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www_local/modis.angelopescatore.it/app/Http/Middleware/PutCandidate.php

<?php

namespace App\Http\Middleware;

use App\Http\Controllers\CandidatesController;
use App\Http\Controllers\FileController;
use App\Http\Controllers\ProfessionalProfileSkillsController;
use App\Http\Controllers\SkillsController;
use App\Models\Candidate;
use App\Models\ProfessionalProfileSkills;
use Closure;
use Facade\FlareClient\Http\Response;
use Firebase\JWT\JWT;
use Illuminate\Http\Request;

class PutCandidate
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */

    public function handle(Request $request, Closure $next)
    {
        // We initiate the controllers
        $skillController = new ProfessionalProfileSkillsController();
        $candidateController = new CandidatesController;
        $fileController = new FileController();

        // we initiate empy request objects
        $insert_candidate = new Request();
        $insert_Skills = new Request();
        $insertFiles = new Request();

        //merge candidate data into insert_candidate
        $insert_candidate->merge([
            'email' => $request->input('email'),
            'name' => $request->input('name'),
            'surname' => $request->input('surname'),
            'phone' => $request->input('phone'),
            'cellular' => $request->input('cellular'),
            'geographic_zone' => $request->input('geographic_zone'),
            'gdpr' => $request->input('gdpr'),
            'cdf' => $request->input('cdf'),
            'birth_date' => $request->input('birth_date'),
            'id_birth_city' => $request->input('id_birth_city'),
            'id_residence_city' => $request->input('id_residence_city'),
            'residence_address' => $request->input('residence_address'),
            'other_city' => $request->input('other_city'),
            'id_residence_state' => $request->input('id_residence_state'),
            'id_birth_state' => $request->input('id_birth_state'),
            'piva' => $request->input('piva'),
            'pec' => $request->input('pec'),
            'marketing_consent' => $request->input('marketing_consent'),
            'lat' => $request->input('lat'),
            'long' => $request->input('lat'),
            'languages' => $request->input('languages'),
            'id_professional_profile' => $request->input('id_professional_profile'),
            'date_time' => now(),
            'type_interview' => $request->input('type_interview'),
            'password' => $request->input('password'),
            'email_user_insert' => $request->input('email_user_insert')
        ]);
        //store candidate data in database
        $candidate = $candidateController->store($insert_candidate);
        
        // insert candidate skills
        $skills = $request->input("skills");

        for($i = 0; $i < count($skills); $i ++){
             $insert_Skills->merge([
                "id_candidate" => $candidate["id_candidate"],
                "id_skills"=>$skills[$i]["id_skills"],
                "sector"=>$skills[$i]["sector"],
                "rating"=>$skills[$i]["rating"],
                "validate_rating"=>$skills[$i]["validate_rating"],
                "note"=>$skills[$i]["note"],
                "user_validate_rating"=>$skills[$i]["user_validate_rating"]
            ]);
            $skillController->store($insert_Skills);
        }
 
        $files = $request->input("files");
         for($i = 0; $i < count($files); $i ++){

            $insertFiles->merge([
                "id_candidate"=>$candidate["id_candidate"],
                "content"=>$files[$i]["content"], 
                "name"=>$files[$i]["name"],
            ]);
            $parsed = explode( "," ,$insertFiles["content"]);
            
            $file = $fileController->convertBase64toFile($parsed[1]); 

            //$fileController->saveFileToFolder($file,$insertFiles["name"]);
                      
            $pdf = fopen($insertFiles["name"],"w");

            fwrite($pdf,$file);

            fclose($pdf);

            $fileController->store($insertFiles);
 
        }
        return Response()->json(["status"=> true, "message"=>"saved"],200);

    }


    protected function getData($request) {

        $tok = $request->header('Authorization');
        $onlyData =explode('Bearer ', $tok );
        $token = $onlyData[1];
        try{
            $from_env_key = env("JWT_SECRET");

            $dec=JWT::decode($token, $from_env_key, ['algorithm' => 'HS256']);

            return $dec;
        } catch (ExpiredSignatureException $e) {
            // header('HTTP/1.0 401 Unauthorized');
            // header('Content-Type: application/json');
            // print( json_encode(
            //     array('message' => 'Token scaduto!', 'status' => false, 'token_invalid' => true, 'debug' => print_r($e,true))
            // ) );
            // die();
            return false;
        } catch (Exception $e){
            // header('HTTP/1.0 401 Unauthorized');
            // header('Content-Type: application/json');
            // print( json_encode(
            //     array('message' => 'Token non valido!', 'status' => false, 'token_invalid' => true, 'debug' => print_r($e,true))
            // ) );
            // die();
            return false;
        }
    }

}

Anon7 - 2022
AnonSec Team