. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell
AnonSec Shell
Server IP : 94.23.64.18  /  Your IP : 216.73.216.185   [ Reverse IP ]
Web Server : Apache
System : Linux webm005.cluster107.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : villadal ( 6036)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
Domains : 2 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/villadal/www/old/booked/Pages/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home/villadal/www/old/booked/Pages/SecurePage.php
<?php
/**
Copyright 2011-2014 Nick Korbel

This file is part of Booked Scheduler.

Booked Scheduler is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

Booked Scheduler is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with Booked Scheduler.  If not, see <http://www.gnu.org/licenses/>.
*/

require_once(ROOT_DIR . 'Pages/Page.php');
require_once(ROOT_DIR . 'Pages/ActionPage.php');
require_once(ROOT_DIR . 'lib/Config/namespace.php');

abstract class SecurePage extends Page
{
	public function __construct($titleKey = '', $pageDepth = 0)
	{
		parent::__construct($titleKey, $pageDepth);

		if (!$this->IsAuthenticated())
		{
			$this->RedirectResume($this->GetResumeUrl());
			die();
		}
	}

	protected function GetResumeUrl()
	{
		return sprintf("%s%s?%s=%s", $this->path, Pages::LOGIN, QueryStringKeys::REDIRECT, urlencode($this->server->GetUrl()));
	}
}

class SecureActionPageDecorator extends ActionPage
{
	/**
	 * @var ActionPage
	 */
	private $page;

	public function __construct(ActionPage $page)
	{
		$this->page = $page;

		if (!$this->page->IsAuthenticated())
		{
			$this->RedirectResume($this->GetResumeUrl());
			die();
		}
	}

	public function ProcessAction()
	{
		$this->page->ProcessAction();
	}

	public function ProcessDataRequest($dataRequest)
	{
		$this->page->ProcessDataRequest($dataRequest);
	}

	public function PageLoad()
	{
		$this->page->PageLoad();
	}

	protected function GetResumeUrl()
	{
		return sprintf("%s%s?%s=%s", $this->page->path, Pages::LOGIN, QueryStringKeys::REDIRECT, urlencode($this->page->server->GetUrl()));
	}

	public function TakingAction()
	{
		return $this->page->TakingAction();
	}

	public function RequestingData()
	{
		return $this->page->RequestingData();
	}

	public function GetAction()
	{
		return $this->page->GetAction();
	}

	public function GetDataRequest()
	{
		return $this->page->GetDataRequest();
	}

	public function IsValid()
	{
		return $this->page->IsValid();
	}

	public function Redirect($url)
	{
		$this->page->Redirect($url);
	}

	public function RedirectToError($errorMessageId = ErrorMessages::UNKNOWN_ERROR, $lastPage = '')
	{
		$this->page->RedirectToError($errorMessageId, $lastPage);
	}

	public function GetLastPage($defaultPage = '')
	{
		return $this->page->GetLastPage($defaultPage);
	}

	public function IsPostBack()
	{
		return $this->page->IsPostBack();
	}

	public function RegisterValidator($validatorId, $validator)
	{
		$this->page->RegisterValidator($validatorId, $validator);
	}

	/**
	 * @return void
	 */
	public function ProcessPageLoad()
	{
		$this->page->ProcessPageLoad();
	}
}

class RoleRestrictedPageDecorator extends SecureActionPageDecorator
{
	public function __construct(ActionPage $page, $allowedRoles = array())
	{
		parent::__construct($page);

		$user = ServiceLocator::GetServer()->GetUserSession();
		$isAllowed = empty($allowedRoles);

		foreach ($allowedRoles as $roleId)
		{
			if ($user->IsAdmin)
			{
				$isAllowed = true;
			}
			if ($roleId == RoleLevel::GROUP_ADMIN && $user->IsGroupAdmin)
			{
				$isAllowed = true;
			}
			if ($roleId == RoleLevel::RESOURCE_ADMIN && $user->IsResourceAdmin)
			{
				$isAllowed = true;
			}
			if ($roleId == RoleLevel::SCHEDULE_ADMIN && $user->IsScheduleAdmin)
			{
				$isAllowed = true;
			}
		}

		if (!$isAllowed)
		{
			$this->RedirectResume($this->GetResumeUrl());
			die();
		}
	}
}

class SecurePageDecorator extends Page implements IPage
{
	/**
	 * @var Page
	 */
	private $page;

	public function __construct(Page $page)
	{
		$this->page = $page;

		if (!$this->page->IsAuthenticated())
		{
			$this->RedirectResume($this->GetResumeUrl());
			die();
		}
	}

	public function PageLoad()
	{
		$this->page->PageLoad();
	}

	public function Redirect($url)
	{
		$this->page->Redirect($url);
	}

	public function RedirectToError($errorMessageId = ErrorMessages::UNKNOWN_ERROR, $lastPage = '')
	{
		$this->page->RedirectToError($errorMessageId, $lastPage);
	}

	public function IsPostBack()
	{
		return $this->page->IsPostBack();
	}

	public function IsValid()
	{
		return $this->page->IsValid();
	}

	public function GetLastPage()
	{
		return $this->page->GetLastPage();
	}

	public function RegisterValidator($validatorId, $validator)
	{
		$this->page->RegisterValidator($validatorId, $validator);
	}

	protected function GetResumeUrl()
	{
		return sprintf("%s%s?%s=%s", $this->page->path, Pages::LOGIN, QueryStringKeys::REDIRECT, urlencode($this->page->server->GetUrl()));
	}
}
?>

Anon7 - 2022
AnonSec Team