One Hat Cyber Team

Your IP : 3.138.245.185

Server IP : 50.28.103.30

Server : Linux host.jcukjv-lwsites.com 4.18.0-553.22.1.el8_10.x86_64 #1 SMP Tue Sep 24 05:16:59 EDT 2024 x86_64

Server Software : nginx/1.24.0

PHP Version : 8.3.12

Buat File | Buat Folder

Dir : ~/www/wwwroot/globify.live/fns/update/

Edit File: firewall.php

<?php
use Medoo\Medoo;

$noerror = true;
$result = array();
$result['success'] = false;
$result['error_message'] = Registry::load('strings')->something_went_wrong;
$result['error_key'] = 'something_went_wrong';

$blacklist = '';
$user_id = 0;

if (!isset($data['ban_user_id']) && !isset($data['unban_user_id'])) {

if (role(['permissions' => ['super_privileges' => 'firewall']])) {
        $result['error_message'] = Registry::load('strings')->invalid_value;
        $result['error_key'] = 'invalid_value';
        $result['error_variables'] = [];

$status = ["enable", "disable"];

if (!isset($data['status']) || empty($data['status'])) {
            $result['error_variables'][] = ['status'];
            $noerror = false;
        } else if (!in_array($data['status'], $status)) {
            $result['error_variables'][] = ['status'];
            $noerror = false;
        }
    } else {
        $noerror = false;
    }
} else if (!$force_request) {
    if (isset($data['ban_user_id']) && !role(['permissions' => ['site_users' => 'ban_ip_addresses']])) {
        $noerror = false;
    } else if (isset($data['unban_user_id']) && !role(['permissions' => ['site_users' => 'unban_ip_addresses']])) {
        $noerror = false;
    }
}

if ($noerror) {

if (isset($data['ban_user_id'])) {
        $user_id = filter_var($data['ban_user_id'], FILTER_SANITIZE_NUMBER_INT);
    } else if (isset($data['unban_user_id'])) {
        $user_id = filter_var($data['unban_user_id'], FILTER_SANITIZE_NUMBER_INT);
    }

if (!empty($user_id)) {

$columns = $join = $where = null;
        $sql_statement = '(SELECT <site_role_attribute> FROM <site_roles> WHERE <site_role_id> = <site_users.site_role_id> LIMIT 1)';
        $sql_role_hierarchy = '(SELECT <role_hierarchy> FROM <site_roles> WHERE <site_role_id> = <site_users.site_role_id> LIMIT 1)';
        $columns = [
            'site_users.user_id', 'site_users.site_role_id',
            'site_users_device_logs.ip_address'
        ];
        $columns['site_role_attribute'] = Medoo::raw($sql_statement);
        $columns['role_hierarchy'] = Medoo::raw($sql_role_hierarchy);
        $join["[>]site_users"] = ["site_users_device_logs.user_id" => "user_id"];
        $where["site_users_device_logs.user_id"] = $user_id;
        $user_ip_addresses = DB::connect()->select('site_users_device_logs', $join, $columns, $where);

$data['blacklist'] = array();

foreach ($user_ip_addresses as $user_ip_address) {
            $site_user = $user_ip_address;
            $skip_user_id = false;

if (!$force_request && Registry::load('current_user')->site_role_attribute !== 'administrators') {
                if ((int)$site_user['role_hierarchy'] >= (int)Registry::load('current_user')->role_hierarchy) {
                    $skip_user_id = true;
                    $result['error_message'] = Registry::load('strings')->permission_denied;
                    $result['error_key'] = 'permission_denied';
                    return;
                }
            }

if ($force_request || $site_user['site_role_attribute'] !== 'administrators' || (int)$site_user['site_role_id'] !== (int)Registry::load('current_user')->site_role) {
                if (!$skip_user_id) {
                    $data['blacklist'][] = $user_ip_address['ip_address'];
                }
            }
        }

if (isset($data['ban_user_id'])) {
            $data['append_ip_address'] = true;
        } else if (isset($data['unban_user_id'])) {

$ip_blacklist = array();
            include('assets/cache/ip_blacklist.cache');
            $data['blacklist'] = array_diff($ip_blacklist, $data['blacklist']);
        }
    }

if (isset($data['blacklist']) && !empty($data['blacklist'])) {
        $blacklist = "<?php \n";
        $blacklist .= 'array_push($ip_blacklist,';

if (is_array($data['blacklist'])) {
            $ip_addresses = $data['blacklist'];
        } else {
            $ip_addresses = preg_split("/\r\n|\n|\r/", $data['blacklist']);
        }

if (!empty ($ip_addresses)) {
            $ip_addresses = array_map(function($string) {
                return trim(str_replace(['\'', '"'], '', $string));
            }, $ip_addresses);
        }

if (isset($data['append_ip_address']) && $data['append_ip_address']) {
            $ip_blacklist = array();
            include('assets/cache/ip_blacklist.cache');
            $ip_addresses = array_merge($ip_addresses, $ip_blacklist);
        }

$ip_addresses = array_unique($ip_addresses);

$total_ip_addresses = count($ip_addresses);
        $ip_index = 1;

foreach ($ip_addresses as $ip_address) {

$ip_address = strip_tags($ip_address);

if (!empty(trim($ip_address))) {
                $blacklist .= "\n".'"'.addslashes($ip_address).'"';
                if ($total_ip_addresses !== $ip_index) {
                    $blacklist .= ',';
                }
            }
            $ip_index = $ip_index+1;
        }

$blacklist .= "\n);";
    }

$build = fopen("assets/cache/ip_blacklist.cache", "w");
    fwrite($build, $blacklist);
    fclose($build);

if (!isset($data['ban_user_id']) && !isset($data['unban_user_id'])) {

$rebuild_cache = false;

if ($data['status'] !== Registry::load('settings')->firewall) {
            DB::connect()->update("settings", ["value" => $data['status'], "updated_on" => Registry::load('current_user')->time_stamp], ["setting" => 'firewall']);
            $rebuild_cache = true;
        }

if ($data['fingerprint_module'] !== Registry::load('settings')->fingerprint_module) {
            DB::connect()->update("settings", ["value" => $data['fingerprint_module'], "updated_on" => Registry::load('current_user')->time_stamp], ["setting" => 'fingerprint_module']);
            $rebuild_cache = true;
        }

if ($rebuild_cache) {
            cache(['rebuild' => 'settings']);
        }
    }

$result = array();
    $result['success'] = true;
    $result['todo'] = 'refresh';
    $result['on_refresh'] = [
        'attributes' => [
            'class' => 'load_form',
            'form' => 'firewall',
        ]
    ];
}

?>