403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/hotel-prod/public_html/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/hotel-prod/public_html/mod/_sanitize.php
<?php
	//var_dump($_POST);
	$save_get = $_GET;
	$save_post = $_POST;
	if (is_array($_POST)) :
		$_POST = array_map_r('trim', $_POST);
		$_POST = array_map_r('strip_tags', $_POST);
	endif;
	if (is_array($_GET)) :
		$_GET = array_map_r('trim', $_GET);
		$_GET = array_map_r('strip_tags', $_GET);
	endif;
	$ar_allowed_bypass = [
		'sql',
		'online_rsvp_unauthorized_text',
		'online_rsvp_invalid_unauthorized_text',
		'batch_email_html',
		'default_email_html',
		'autoresponder_text',
	];
	foreach($ar_allowed_bypass as $value) :
		$_GET[$value] = $save_get[$value] ?? NULL;
		$_POST[$value] = $save_post[$value] ?? NULL;
	endforeach;
	$_REQUEST['IX'] = filter_var($_REQUEST['IX'] ?? '', FILTER_SANITIZE_SPECIAL_CHARS);
	$_REQUEST['id'] = sanitize_int($_REQUEST['id'] ?? '');	
	$_REQUEST['ref'] = filter_var($_REQUEST['ref'] ?? '', FILTER_SANITIZE_SPECIAL_CHARS);	
	//$_SESSION['user_id'] = sanitize_int($_SESSION['user_id']);
	if (isset($_GET['id'])) :	
		$_GET['id'] = sanitize_int($_GET['id']);	
	endif;
	if (isset($_GET['gid'])) :	
		$_GET['gid'] = sanitize_int($_GET['gid']);	
	endif;
	if (isset($_GET['fid'])) :	
		$_GET['fid'] = sanitize_int($_GET['fid']);	
	endif;
	if (isset($_GET['iid'])) :	
		$_GET['iid'] = sanitize_int($_GET['iid']);	
	endif;
	if (isset($_GET['primary_id'])) :	
		$_GET['primary_id'] = sanitize_int($_GET['primary_id']);	
	endif;
	$_POST['ajax_event_submitted'] = $_POST['ajax_event_submitted'] ?? NULL;
	$_POST['login_submitted'] = $_POST['login_submitted'] ?? NULL;
	
	function sanitize_int($int_var)
	{
		if (!empty($int_var)) :	
			$int_var = intval($int_var);	
		endif;
		return $int_var;
	}

	function array_map_r($func, $arr)
	{
		$ar_result = array();
		foreach ($arr as $key => $value) :
			if (is_array($value)) :
				$ar_result[$key] = array_map_r($func, $value);
			else :
				$ar_result[$key] = $func($value);
			endif;
		endforeach;
		return $ar_result;
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit