| Server IP : 217.18.85.50 / Your IP : 3.133.147.193 Web Server : LiteSpeed System : Linux server50.tr85.dhs.com.tr 3.10.0-962.3.2.lve1.5.85.el7.x86_64 #1 SMP Thu Apr 18 15:18:36 UTC 2024 x86_64 User : ferhatgenc ( ) PHP Version : 7.2.34 Disable Function : restore_ini,mail,openbasedir,f_open,system,dl,array_compare,array_user_key_compare,passthru,cat,exec,popen,proc_close,proc_get_status,proc_nice,proc_open,escapeshellcmd,escapeshellarg,show_source,posix_mkfifo,ini_restore,mysql_list_dbs,getmyuid,pconnect,link,symlink,fin,passthruexec,fileread,shell_exec,pcntl_exec,ini_alter,leak,apache_child_terminate,chown,posix_kill,posix_setpgid,posix_setsid,posix_setuid,proc_terminate,syslog,allow_url_fopen,fpassthru,execute,shell,chgrp,passthru,socket_select,socket_create,socket_create_listen,socket_create_pair,socket_listen,socket_accept,socket_bind,foreach,socket_strerror,pcntl_fork,pcntl_signal,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,openlog,apache_get_version,apache_getenv,apache_note,apache_setenv,virtualal MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /var/softaculous/bbpress/ |
Upload File : |
<?php
@unlink(__FILE__);
// Validate if the request is from Softaculous
if($_REQUEST['pass'] != '[[autopass]]'){
die("Unauthorized Access");
}
// Dummy plugin dir so that no plugins are loaded as they conflict with our login process
define('WPMU_PLUGIN_DIR', '[[softpath]]/[[autopass]]');
define('WP_PLUGIN_DIR', '[[softpath]]/[[autopass]]');
define('WP_USE_THEMES', false);
// Some themes check the current login script name
$_SERVER['SCRIPT_NAME'] = '/wp-login.php';
require('wp-blog-header.php');
require('wp-includes/pluggable.php');
// If the user is already logged in simply redirect to admin page
if(!is_user_logged_in()){
$signon_user = '[[signon_username]]';
//Backword compatibility ($__setting['signon_username'] won't be there in previous versions <= 5.2.3)
if(!empty($signon_user) && !preg_match('/^\[\[(.*?)\]\]$/is', $signon_user)){
$user = get_user_by('login', $signon_user);
}else{
$user_info = get_userdata(1);
// Try to find an admin if we do not have any admin with ID => 1
if(empty($user_info) || empty($user_info->user_login)){
$admin_id = get_users(array('role__in' => array('administrator'), 'number' => 1, 'fields' => array('ID')));
$user_info = get_userdata($admin_id[0]->ID);
}
$username = $user_info->user_login;
$user = get_user_by('login', $username);
}
// Create the session
if(!is_wp_error($user)){
wp_clear_auth_cookie();
wp_set_current_user($user->ID);
wp_set_auth_cookie($user->ID);
// Create a session for wp-simple-firewall plugin
if(file_exists(dirname(__FILE__).'/wp-content/plugins/wp-simple-firewall')){
try{
global $wpdb;
$wpsf_session_id = md5(uniqid('icwp-wpsf'));
$wpdb->insert($wpdb->prefix."icwp_wpsf_sessions", array(
"session_id" => $wpsf_session_id,
"wp_username" => $user->user_login,
"ip" => $_SERVER['REMOTE_ADDR'],
"browser" => md5($_SERVER['HTTP_USER_AGENT']),
"last_activity_uri" => "/wp-login.php",
"logged_in_at" => time(),
"last_activity_at" => time(),
"login_intent_expires_at" => 0,
"secadmin_at" => 0,
"created_at" => time(),
"deleted_at" => 0,
));
setcookie("wp-icwp-wpsf", $wpsf_session_id, time()+ DAY_IN_SECONDS * 30);
} catch(Exception $e){
}
}
}
}
// Redirect to admin page
$redirect_to = admin_url();
wp_safe_redirect( $redirect_to );
exit();