| Server IP : 217.18.85.50 / Your IP : 3.141.32.252 Web Server : LiteSpeed System : Linux server50.tr85.dhs.com.tr 3.10.0-962.3.2.lve1.5.85.el7.x86_64 #1 SMP Thu Apr 18 15:18:36 UTC 2024 x86_64 User : ferhatgenc ( ) PHP Version : 7.2.34 Disable Function : restore_ini,mail,openbasedir,f_open,system,dl,array_compare,array_user_key_compare,passthru,cat,exec,popen,proc_close,proc_get_status,proc_nice,proc_open,escapeshellcmd,escapeshellarg,show_source,posix_mkfifo,ini_restore,mysql_list_dbs,getmyuid,pconnect,link,symlink,fin,passthruexec,fileread,shell_exec,pcntl_exec,ini_alter,leak,apache_child_terminate,chown,posix_kill,posix_setpgid,posix_setsid,posix_setuid,proc_terminate,syslog,allow_url_fopen,fpassthru,execute,shell,chgrp,passthru,socket_select,socket_create,socket_create_listen,socket_create_pair,socket_listen,socket_accept,socket_bind,foreach,socket_strerror,pcntl_fork,pcntl_signal,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,openlog,apache_get_version,apache_getenv,apache_note,apache_setenv,virtualal MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /opt/imunify360-webshield/nginx/lua/ |
Upload File : |
local template = require 'resty.template'
local digest = require('openssl').digest
local splashscreen_sessions = ngx.shared.splashscreen_sessions
local function make_temp_uid()
local user_agent = ngx.var.http_user_agent or 'missing_agent'
local user_data = ngx.var.remote_addr .. user_agent .. tostring(ngx.now())
local hashsum = digest.digest('sha1', user_data, false)
return hashsum
end
local function generate(seq)
local function split(data)
local buffer = {}
for i in data:gmatch("%w") do
table.insert(buffer, tonumber(i))
end
return buffer
end
local digits = split(seq)
local ready = {}
for i, v in ipairs(digits) do
local buffer = {"("}
local item = "+!![]"
if v == 0 then
table.insert(buffer, "+![]")
elseif v == 1 then
table.insert(buffer, "+!+[]")
else
table.insert(buffer, "+!+[]")
for i = 1, v - 1 do
table.insert(buffer, item)
end
end
if i % 2 == 0 then
table.insert(buffer, "+[]")
end
table.insert(buffer, ")")
table.insert(ready, table.concat(buffer, ""))
end
return "+(" .. table.concat(ready, "+") .. ")"
end
local function prepare_data()
local uri = ngx.var.request_uri
local uri_parts = {ngx.var.scheme, '://', ngx.var.host}
local destination_port = ngx.var.destination_port
if destination_port ~= '80' and destination_port ~= '443' then
table.insert(uri_parts, ':' .. destination_port)
end
if uri ~= '' and uri ~= '/' then
table.insert(uri_parts, uri)
end
local userid = make_temp_uid() -- generate temporary UID (SHA1 hashsum)
local _start = tonumber(userid:sub(0, 6), 16) -- take first six symbols and last six ones and
local _stop = tonumber(userid:sub(-6), 16) -- convert them to decimal
local _w = generate(tostring(_start)) -- generate 2 JS check sequences from the decimals
local _e = generate(tostring(_stop))
local sum = _start + _stop -- Find the sum of the decimals and convert it to hex
local xsum = string.format("%X", sum)
-- place original URI to shared dictionary with the hex sum as key
splashscreen_sessions:set(xsum, table.concat(uri_parts), 60)
return {
westval=_w,
eastval=_e
}
end
local accept = ngx.var.http_accept
if accept ~= nil and string.find(string.lower(accept), "json") ~= nil then
ngx.header["Content-Type"] = "application/json"
ngx.say('{"message": "Access denied by Imunify360 bot-protection. IPs used for automation should be whitelisted"}')
elseif accept ~= nil and string.find(accept, "text/") == nil and accept ~= "*/*" then
ngx.status = 415 -- return custom error code
ngx.say("")
else
local vars = prepare_data()
template.render('index.html', vars, 'splashscreen')
end