⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.177
Server IP:
50.6.168.112
Server:
Linux server-617809.webnetzimbabwe.com 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.4.10
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
opt
/
remi
/
nf-php74
/
root
/
usr
/
share
/
doc
/
pecl
/
apcu
/
View File Name :
apc.php
| | Rasmus Lerdorf
| | Ilia Alshanetsky
| +----------------------------------------------------------------------+ All other licensing and usage conditions are those of the PHP Group. */ ////////// READ OPTIONAL CONFIGURATION FILE //////////// if (file_exists("apc.conf.php")) include("apc.conf.php"); //////////////////////////////////////////////////////// ////////// BEGIN OF DEFAULT CONFIG AREA /////////////////////////////////////////////////////////// defaults('USE_AUTHENTICATION',1); // Use (internal) authentication - best choice if // no other authentication is available // If set to 0: // There will be no further authentication. You // will have to handle this by yourself! // If set to 1: // You need to change ADMIN_PASSWORD to make // this work! defaults('ADMIN_USERNAME','apc'); // Admin Username defaults('ADMIN_PASSWORD','password'); // Admin Password - CHANGE THIS TO ENABLE!!! // (beckerr) I'm using a clear text password here, because I've no good idea how to let // users generate a md5 or crypt password in a easy way to fill it in above //defaults('DATE_FORMAT', "d.m.Y H:i:s"); // German defaults('DATE_FORMAT', 'Y/m/d H:i:s'); // US defaults('GRAPH_SIZE',200); // Image size //defaults('PROXY', 'tcp://127.0.0.1:8080'); ////////// END OF DEFAULT CONFIG AREA ///////////////////////////////////////////////////////////// // "define if not defined" function defaults($d,$v) { if (!defined($d)) define($d,$v); // or just @define(...) } // rewrite $PHP_SELF to block XSS attacks // $PHP_SELF= isset($_SERVER['PHP_SELF']) ? htmlentities(strip_tags($_SERVER['PHP_SELF'],''), ENT_QUOTES, 'UTF-8') : ''; $time = time(); $host = php_uname('n'); if($host) { $host = '('.$host.')'; } if (isset($_SERVER['SERVER_ADDR'])) { $host .= ' ('.$_SERVER['SERVER_ADDR'].')'; } // operation constants define('OB_HOST_STATS',1); define('OB_USER_CACHE',2); define('OB_VERSION_CHECK',3); // check validity of input variables $vardom=array( 'OB' => '/^\d+$/', // operational mode switch 'CC' => '/^[01]$/', // clear cache requested 'DU' => '/^.*$/', // Delete User Key 'SH' => '/^[a-z0-9]+$/', // shared object description 'IMG' => '/^[123]$/', // image to generate 'LO' => '/^1$/', // login requested 'COUNT' => '/^\d+$/', // number of line displayed in list 'SCOPE' => '/^[AD]$/', // list view scope 'SORT1' => '/^[AHSMCDTZ]$/', // first sort key 'SORT2' => '/^[DA]$/', // second sort key 'AGGR' => '/^\d+$/', // aggregation by dir level 'SEARCH' => '/^.*$/' // search regex ); // cache scope $scope_list=array( 'A' => 'cache_list', 'D' => 'deleted_list' ); // handle POST and GET requests if (empty($_REQUEST)) { if (!empty($_GET) && !empty($_POST)) { $_REQUEST = array_merge($_GET, $_POST); } else if (!empty($_GET)) { $_REQUEST = $_GET; } else if (!empty($_POST)) { $_REQUEST = $_POST; } else { $_REQUEST = array(); } } // check parameter syntax foreach($vardom as $var => $dom) { if (!isset($_REQUEST[$var])) { $MYREQUEST[$var]=null; } else if (!is_array($_REQUEST[$var]) && preg_match($dom.'D',$_REQUEST[$var])) { $MYREQUEST[$var]=$_REQUEST[$var]; } else { $MYREQUEST[$var]=$_REQUEST[$var]=null; } } // check parameter semantics if (empty($MYREQUEST['SCOPE'])) $MYREQUEST['SCOPE']="A"; if (empty($MYREQUEST['SORT1'])) $MYREQUEST['SORT1']="H"; if (empty($MYREQUEST['SORT2'])) $MYREQUEST['SORT2']="D"; if (empty($MYREQUEST['OB'])) $MYREQUEST['OB']=OB_HOST_STATS; if (!isset($MYREQUEST['COUNT'])) $MYREQUEST['COUNT']=20; if (!isset($scope_list[$MYREQUEST['SCOPE']])) $MYREQUEST['SCOPE']='A'; $MY_SELF= "$PHP_SELF". "?SCOPE=".$MYREQUEST['SCOPE']. "&SORT1=".$MYREQUEST['SORT1']. "&SORT2=".$MYREQUEST['SORT2']. "&COUNT=".$MYREQUEST['COUNT']; $MY_SELF_WO_SORT= "$PHP_SELF". "?SCOPE=".$MYREQUEST['SCOPE']. "&COUNT=".$MYREQUEST['COUNT']; // authentication needed? // if (!USE_AUTHENTICATION) { $AUTHENTICATED=1; } else { $AUTHENTICATED=0; if (ADMIN_PASSWORD!='password' && ($MYREQUEST['LO'] == 1 || isset($_SERVER['PHP_AUTH_USER']))) { if (!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW']) || $_SERVER['PHP_AUTH_USER'] != ADMIN_USERNAME || $_SERVER['PHP_AUTH_PW'] != ADMIN_PASSWORD) { Header("WWW-Authenticate: Basic realm=\"APC Login\""); Header("HTTP/1.0 401 Unauthorized"); echo <<
Rejected!
Wrong Username or Password!
Continue...