��ѧۧݧ�ӧ�� ާ֧ߧ֧էا֧�

��ѧۧݧ�ӧ�� ާ֧ߧ֧էا֧� - ��֧էѧܧ�ڧ��ӧѧ�� - /home/alphpwcp/public_html/us/alphachat/lib/core/lhcore/lhsys.php

��ѧ٧ѧ�
<?php #[\AllowDynamicProperties] class CSCacheAPC { static private $m_objMem = NULL; public $cacheEngine = null; public $cacheGlobalKey = null; public $cacheGlobalKeyAppend = null; public $cacheKeys = array( 'site_version' // Global site version ); public function increaseImageManipulationCache() { $this->increaseCacheVersion('site_version'); } function setSession($identifier, $value, $useGlobalCache = false, $skipSession = false) { if ($skipSession == false){ $_SESSION[$identifier] = $value; } if ($useGlobalCache == true) { $GLOBALS[$identifier] = $value; } } function appendToArray($identifier, $value) { if (isset($_SESSION[$identifier]) && in_array($value, $_SESSION[$identifier])){ return ; } $_SESSION[$identifier][] = $value; } function removeFromArray($identifier, $value) { if (isset($_SESSION[$identifier]) && is_array($_SESSION[$identifier]) && ($index = array_search($value, $_SESSION[$identifier])) !== false){ unset($_SESSION[$identifier][$index]); } } function getArray($identifier) { if (isset($_SESSION[$identifier]) && is_array($_SESSION[$identifier])){ return $_SESSION[$identifier]; } return array(); } function getSession($identifier, $useGlobalCache = false) { if (isset($_SESSION[$identifier])){ return $_SESSION[$identifier]; } if ($useGlobalCache == true) { if (isset($GLOBALS[$identifier])) { return $GLOBALS[$identifier]; } } return false; } function restoreMulti($keys) { if ($this->cacheEngine != null) { return $this->cacheEngine->get($keys); } return array(); } function __construct() { $cacheEngineClassName = erConfigClassLhConfig::getInstance()->getSetting( 'cacheEngine', 'className' ); $this->cacheGlobalKey = erConfigClassLhConfig::getInstance()->getSetting( 'cacheEngine', 'cache_global_key' ) . $this->cacheGlobalKeyAppend; if ($cacheEngineClassName !== false) { $this->cacheEngine = new $cacheEngineClassName(); } } function __destruct() { } static function getMem() { if (self::$m_objMem == NULL) { self::$m_objMem = new CSCacheAPC(); } return self::$m_objMem; } function delete($key) { if (isset($GLOBALS[$key])) unset($GLOBALS[$key]); if ( $this->cacheEngine != null ) { $this->cacheEngine->set($this->cacheGlobalKey.$key,false,0); } } function restore($key) { if (isset($GLOBALS[$key]) && $GLOBALS[$key] !== false) return $GLOBALS[$key]; if ( $this->cacheEngine != null ) { $GLOBALS[$key] = $this->cacheEngine->get($this->cacheGlobalKey.$key); } else { $GLOBALS[$key] = false; } return $GLOBALS[$key]; } function getCacheVersion($cacheVariable, $valuedefault = 1, $ttl = 0) { if (isset($GLOBALS['CacheKeyVersion_'.$cacheVariable])) return $GLOBALS['CacheKeyVersion_'.$cacheVariable]; if ( $this->cacheEngine != null ) { if (($version = $this->cacheEngine->get($this->cacheGlobalKey.$cacheVariable)) == false){ $version = $valuedefault; $this->cacheEngine->set($this->cacheGlobalKey.$cacheVariable,$version,0,$ttl); $GLOBALS['CacheKeyVersion_'.$cacheVariable] = $valuedefault; } else $GLOBALS['CacheKeyVersion_'.$cacheVariable] = $version; } else { $version = $valuedefault; $GLOBALS['CacheKeyVersion_'.$cacheVariable] = $valuedefault; } return $version; } function increaseCacheVersion($cacheVariable, $valuedefault = 1, $ttl = 0) { if ( $this->cacheEngine != null ) { if (($version = $this->cacheEngine->get($this->cacheGlobalKey.$cacheVariable)) == false) { $this->cacheEngine->set($this->cacheGlobalKey.$cacheVariable,$valuedefault,0,$ttl); $GLOBALS['CacheKeyVersion_'.$cacheVariable] = $valuedefault; } else {$this->cacheEngine->increment($this->cacheGlobalKey.$cacheVariable,$version+1);$GLOBALS['CacheKeyVersion_'.$cacheVariable] = $version+1;} } else { $GLOBALS['CacheKeyVersion_'.$cacheVariable] = $valuedefault; } } function store($key, $value, $ttl = 720000) { if ( $this->cacheEngine != null ) { $GLOBALS[$key] = $value; $this->cacheEngine->set($this->cacheGlobalKey.$key,$value,0,$ttl); } else { $GLOBALS[$key] = $value; } } } #[\AllowDynamicProperties] class erLhcoreClassSystem{ protected $Params; public function __construct(){ $this->Params = array( 'PHP_OS' => PHP_OS, 'DIRECTORY_SEPARATOR' => DIRECTORY_SEPARATOR, 'PATH_SEPARATOR' => PATH_SEPARATOR, '_SERVER' => $_SERVER, ); if ( isset( $this->Params['_SERVER']['REQUEST_TIME'] ) ) { // REQUEST_TIME is a float and includes microseconds in PHP > 5.4.0 // It should be casted to int in order to keep BC $this->Params['_SERVER']['REQUEST_TIME'] = (int)$this->Params['_SERVER']['REQUEST_TIME']; } $this->Attributes = array( 'magickQuotes' => true, 'hostname' => true ); $this->FileSeparator = $this->Params['DIRECTORY_SEPARATOR']; $this->EnvSeparator = $this->Params['PATH_SEPARATOR']; // Determine OS specific settings if ( $this->Params['PHP_OS'] === 'WINNT' ) { $this->OSType = "win32"; $this->OS = "windows"; $this->FileSystemType = "win32"; $this->LineSeparator = "\r\n"; $this->ShellEscapeCharacter = '"'; $this->BackupFilename = '.bak'; } else { $this->OSType = 'unix'; if ( $this->Params['PHP_OS'] === 'Linux' ) { $this->OS = 'linux'; } else if ( $this->Params['PHP_OS'] === 'FreeBSD' ) { $this->OS = 'freebsd'; } else if ( $this->Params['PHP_OS'] === 'Darwin' ) { $this->OS = 'darwin'; } else { $this->OS = false; } $this->FileSystemType = "unix"; $this->LineSeparator = "\n"; $this->ShellEscapeCharacter = "'"; $this->BackupFilename = '~'; } } public static function autoload($className) { if (strpos($className,'LiveHelperChatExtension\\') !== false) { $className = str_replace('LiveHelperChatExtension\\','',$className); $file = '.' . DIRECTORY_SEPARATOR . 'extension' . DIRECTORY_SEPARATOR . str_replace('\\',DIRECTORY_SEPARATOR, $className) . '.php'; } else { $file = '.' . DIRECTORY_SEPARATOR . 'lib' . DIRECTORY_SEPARATOR . 'vendor_lhc' . DIRECTORY_SEPARATOR . str_replace('\\',DIRECTORY_SEPARATOR, $className) . '.php'; } if (file_exists($file)) { require_once $file; } return false; } public static function instance() { if ( is_null( self::$instance ) ) { self::$instance = new erLhcoreClassSystem(); } return self::$instance; } /** * Generate wwwdir from phpSelf if valid accoring to scriptFileName * and return null if invalid and false if there is no index in phpSelf * * @param string $phpSelf * @param string $scriptFileName * @param string $index * @return string\|null\|false String in form 'path/path2' if valid, null if not * and false if $index is not part of phpself / protected static function getValidwwwDir( $phpSelf, $scriptFileName, $index ) { if ( !isset( $phpSelf[1] ) \|\| strpos( $phpSelf, $index ) === false ) return false; // validate $index straight away if ( strpos( $scriptFileName, $index ) === false ) return null; // optimize '/index.php' pattern if ( $phpSelf === "/{$index}" ) return ''; $phpSelfParts = explode( $index, $phpSelf ); $validateDir = $phpSelfParts[0]; // remove first path if home dir if ( $phpSelf[1] === '~' ) { $uri = explode( '/', ltrim( $validateDir, '/' ) ); array_shift( $uri ); $validateDir = '/' . implode( '/', $uri ); } // validate direclty with phpself part if ( strpos( $scriptFileName, $validateDir ) !== false ) return trim( $phpSelfParts[0], '/' ); // validate with windows path if ( strpos( $scriptFileName, str_replace( '/', '\\', $validateDir ) ) !== false ) return trim( $phpSelfParts[0], '/' ); return null; } / * Vulnerability: SC-1628 * Name: SSL cookie without secure flag set * Type: Web Servers * Asset Group: Network Segment * * URI: /index.php/chat/startchat * Other Info: PHPSESSID=4fqbt1u2k5ci475ieiku4aaie0; path=/; HttpOnly * * Source: SureCloud */ // https://bugs.php.net/bug.php?id=49184 // https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730094 private static function setSecureCookieIfRequired() { if ( (!empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') \|\| ((!empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') \|\| (!empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on'))){ @ini_set('session.cookie_secure',1); self::$httpsMode = true; } } static function init() { $index = 'index.php'; $forceVirtualHost = null; $instance = erLhcoreClassSystem::instance(); $instance = self::instance(); $server = $instance->Params['_SERVER']; $phpSelf = $server['PHP_SELF']; $requestUri = $server['REQUEST_URI']; $scriptFileName = $server['SCRIPT_FILENAME']; $siteDir = rtrim( str_replace( $index, '', $scriptFileName ), '\/' ) . '/'; $wwwDir = ''; $IndexFile = ''; $queryString = ''; $cfg = erConfigClassLhConfig::getInstance(); $lhcForceVirtualHost = $cfg->getSetting( 'site', 'force_virtual_host', false); self::$proxyMode = $cfg->getSetting( 'site', 'proxy_mode', false); // see if we can use phpSelf to determin wwwdir $tempwwwDir = self::getValidwwwDir( $phpSelf, $scriptFileName, $index ); if ( $tempwwwDir !== null && $tempwwwDir !== false ) { // Force virual host or Auto detect IIS vh mode & Apache .htaccess mode if ( $forceVirtualHost \|\| ( isset( $server['IIS_WasUrlRewritten'] ) && $server['IIS_WasUrlRewritten'] ) \|\| ( isset( $server['REDIRECT_URL'] ) && isset( $server['REDIRECT_STATUS'] ) && $server['REDIRECT_STATUS'] == '200' ) ) { if ( $tempwwwDir ) { $wwwDir = '/' . $tempwwwDir; $wwwDirPos = strpos( $requestUri, $wwwDir ); if ( $wwwDirPos !== false ) { $requestUri = substr( $requestUri, $wwwDirPos + strlen($wwwDir) ); } } } else // Non virtual host mode, use $tempwwwDir to figgure out paths { $indexDir = $index; if ( $tempwwwDir ) { $wwwDir = '/' . $tempwwwDir; $indexDir = $wwwDir . '/' . $indexDir; } $IndexFile = '/' . $index; // remove sub path from requestUri $indexDirPos = strpos( $requestUri, $indexDir ); if ( $indexDirPos !== false ) { if ($lhcForceVirtualHost === false) { $requestUri = substr( $requestUri, $indexDirPos + strlen($indexDir) ); } } elseif ( $wwwDir ) { $wwwDirPos = strpos( $requestUri, $wwwDir ); if ( $wwwDirPos !== false ) { $requestUri = substr( $requestUri, $wwwDirPos + strlen($wwwDir) ); } } } } // remove url and hash parameters if ( isset( $requestUri[1] ) && $requestUri !== '/' ) { $uriGetPos = strpos( $requestUri, '?' ); if ( $uriGetPos !== false ) { $queryString = substr( $requestUri, $uriGetPos ); if ( $uriGetPos === 0 ) $requestUri = ''; else $requestUri = substr( $requestUri, 0, $uriGetPos ); } $uriHashPos = strpos( $requestUri, '#' ); if ( $uriHashPos === 0 ) $requestUri = ''; elseif ( $uriHashPos !== false ) $requestUri = substr( $requestUri, 0, $uriHashPos ); } // normalize slash use and url decode url if needed if ( $requestUri === '/' \|\| $requestUri === '' ) { $requestUri = ''; } else { $requestUri = '/' . urldecode( trim( $requestUri, '/ ' ) ); } if ( ($pos = strpos($requestUri,'index.php')) !== false ) { $requestUri = substr($requestUri,$pos+9); } $instance->SiteDir = $siteDir; $instance->WWWDirImages = $instance->WWWDir = $wwwDir; $instance->IndexFile = $lhcForceVirtualHost === false ? '/index.php' : ''; $instance->RequestURI = str_replace('//','/',$requestUri); $instance->QueryString = $queryString; $instance->WWWDirLang = ''; self::setSecureCookieIfRequired(); } public static function setSiteAccess($siteaccess) { $cfgSite = erConfigClassLhConfig::getInstance(); $availableSiteaccess = $cfgSite->getSetting( 'site', 'available_site_access' ); $defaultSiteAccess = $cfgSite->getSetting( 'site', 'default_site_access' ); if ($defaultSiteAccess != $siteaccess && in_array($siteaccess, $availableSiteaccess)) { $optionsSiteAccess = $cfgSite->getSetting('site_access_options',$siteaccess); erLhcoreClassSystem::instance()->Language = $optionsSiteAccess['locale']; erLhcoreClassSystem::instance()->ThemeSite = $optionsSiteAccess['theme']; erLhcoreClassSystem::instance()->ContentLanguage = $optionsSiteAccess['content_language']; erLhcoreClassSystem::instance()->WWWDirLang = '/'.$siteaccess; erLhcoreClassSystem::instance()->SiteAccess = $siteaccess; } else { $optionsSiteAccess = $cfgSite->getSetting('site_access_options',$defaultSiteAccess); erLhcoreClassSystem::instance()->SiteAccess = $defaultSiteAccess; erLhcoreClassSystem::instance()->Language = $optionsSiteAccess['locale']; erLhcoreClassSystem::instance()->ThemeSite = $optionsSiteAccess['theme']; erLhcoreClassSystem::instance()->WWWDirLang = ''; erLhcoreClassSystem::instance()->ContentLanguage = $optionsSiteAccess['content_language']; } erTranslationClassLhTranslation::getInstance()->initLanguage(); } public static function setSiteAccessByLocale($locale) { $cfgSite = erConfigClassLhConfig::getInstance(); $site_languages = $cfgSite->getSetting( 'site', 'available_site_access'); foreach ($site_languages as $siteaccess) { $siteAccessOptions = $cfgSite->getSetting( 'site_access_options', $siteaccess); if ($siteAccessOptions['locale'] == $locale) { self::setSiteAccess($siteaccess); break; } } } public static function validHttpHost($host) { return substr_count($host, '.') <= 100 && substr_count($host, ':') <= 100 && preg_match('/^\[?(?:[a-zA-Z0-9-:\]_]+\.?)+$/', $host) && self::isTrustedHost($host); } // Borrowed from Drupal public static function isTrustedHost($host) { $trusted_host_patterns = erConfigClassLhConfig::getInstance()->getSetting( 'site', 'trusted_host_patterns', false); if (PHP_SAPI !== 'cli' && is_array($trusted_host_patterns) && !empty($trusted_host_patterns)) { foreach ($trusted_host_patterns as $pattern) { $pattern = sprintf('{%s}i', str_replace('}', '\\}', $pattern)); if (preg_match($pattern, $host)) { return true; } } return false; } return false; } public static function getHost() { static $site_address = null; if ($site_address !== null) { return $site_address; } if (isset($_SERVER['HTTP_HOST']) && self::validHttpHost($_SERVER['HTTP_HOST'])) { $site_address = (erLhcoreClassSystem::$httpsMode == true \|\| erLhcoreClassModelChatConfig::fetch('explicit_http_mode')->current_value == 'https:' ? 'https:' : 'http:') . '//' . $_SERVER['HTTP_HOST'] ; } else if (class_exists('erLhcoreClassInstance')) { $site_address = 'https://' . erLhcoreClassInstance::$instanceChat->address . '.' . erConfigClassLhConfig::getInstance()->getSetting( 'site', 'seller_domain'); } else if (($site_address = erConfigClassLhConfig::getInstance()->getSetting( 'site', 'site_address', false)) && $site_address != '') { return $site_address; } elseif (isset($_SERVER['HTTP_HOST']) && (!is_array(erConfigClassLhConfig::getInstance()->getSetting( 'site', 'trusted_host_patterns', false)) \|\| count(erConfigClassLhConfig::getInstance()->getSetting( 'site', 'trusted_host_patterns', false)) == 0)) { $site_address = (erLhcoreClassSystem::$httpsMode == true \|\| erLhcoreClassModelChatConfig::fetch('explicit_http_mode')->current_value == 'https:' ? 'https:' : 'http:') . '//' . $_SERVER['HTTP_HOST'] ; // trust only if match array not set } else if (class_exists('erLhcoreClassExtensionLhcphpresque')) { $site_address = erLhcoreClassModule::getExtensionInstance('erLhcoreClassExtensionLhcphpresque')->settings['site_address']; } else { $site_address = 'http://localhost'; // We could not determine any valid host } return $site_address; } function wwwDir() { return (self::$prependDomain ? (self::$httpsMode == true ? 'https:' : '') . '//' . $_SERVER['HTTP_HOST'] : '') . $this->WWWDir; } function wwwImagesDir() { return $this->WWWDirImages; } public static $prependDomain = false; public static $httpsMode = false; public static $proxyMode = false; public $backgroundMode = false; /// The path to where all the code resides public $SiteDir; /// The access path of the current site view /// The relative directory path of the vhless setup public $WWWDir; public $WWWDirImages; // The www dir used in links formating public $WWWDirLang; /// The filepath for the index public $IndexFile; /// The uri which is used for parsing module/view information from, may differ from $_SERVER['REQUEST_URI'] public $RequestURI; /// The type of filesystem, is either win32 or unix. This often used to determine os specific paths. /// Current language public $Language; // Content language public $ContentLanguage; /// Theme site public $ThemeSite; public $SiteAccess; public $MobileDevice = false; private static $instance = null; } ?>

| ver. 1.4 | Github | . | PHP 8.2.30 | ��֧ߧ֧�ѧ�ڧ� ��ѧߧڧ��: 0 | proxy | phpinfo | ��ѧ��ۧܧ�