编辑文件 - HackingLog.fnc.php

✏️ 正在编辑: HackingLog.fnc.php

路径: /home/eblama1/sms.karnplayinland.com/ProgramFunctions/HackingLog.fnc.php
提示: 您可以编辑任何文件（包括二进制文件），但请注意不当修改可能导致文件损坏。

<?php
/**
 * Log Hacking attempt function
 *
 * @package RosarioSIS
 * @subpackage ProgramFunctions
 */

/**
 * Log Hacking attempt
 * Send email if `$RosarioNotifyAddress` or `$RosarioErrorsAddress` set
 *
 * @global string $RosarioNotifyAddress or $RosarioErrorsAddress email set in config.inc.php file
 * @since 4.0 Uses ErrorSendEmail() & "« Back" link to Portal or automatic redirection if has just logged in.
 * @since 4.1 Redirect automatically to Portal after 5 seconds.
 * @since 4.3 Reload menu now so it does not contain links to disallowed programs.
 * @since 6.4.1 Only send email and redirect to Portal without displaying error.
 * @since 9.0 Logout after 10 Hacking attempts within 1 minute.
 * @since 10.0 Log "RosarioSIS HACKING ATTEMPT" into Apache error.log
 * @since 10.0 Force URL & menu reloading, always use JS to redirect
 */
function HackingLog()
{
	global $error;

$redirect_url = 'Modules.php?modname=misc/Portal.php';

// Log Hacking time in session.
	$_SESSION['HackingLog'][] = time();

$attempts_within_one_minute = 0;

if ( count( $_SESSION['HackingLog'] ) >= 10 )
	{
		$one_minute_ago = time() - 60;

foreach ( $_SESSION['HackingLog'] as $i => $time )
		{
			if ( $time >= $one_minute_ago )
			{
				$attempts_within_one_minute++;

continue;
			}

unset( $_SESSION['HackingLog'][ $i ] );
		}

if ( $attempts_within_one_minute >= 10 )
		{
			// Logout after 10 Hacking attempts within 1 minute.
			$redirect_url = 'index.php?modfunc=logout&token=' . $_SESSION['token'];
		}
	}

/**
	 * Log "RosarioSIS HACKING ATTEMPT" into Apache error.log
	 * So you can ban IP using a custom fail2ban jail
	 */
	error_log( 'RosarioSIS HACKING ATTEMPT' );

if ( $attempts_within_one_minute < 10
		&& ! empty( $_SERVER['HTTP_REFERER'] )
		&& mb_strpos( $_SERVER['HTTP_REFERER'], '&redirect_to=' ) !== false )
	{
		// If User has just logged in, take him back to Portal without sending email!
		?>
		<script>
			window.location.href = <?php echo json_encode( $redirect_url ); ?>;
		</script>
		<?php

exit;
	}

$error[] = _( 'You\'re not allowed to use this program!' );

ErrorSendEmail( $error, 'HACKING ATTEMPT' );

if ( $attempts_within_one_minute >= 10 )
	{
		// Destroy session now: some clients do not follow redirection.
		session_unset();

session_destroy();
	}

// Redirect automatically to Portal or Logout.
	?>
	<script>
		window.location.href = <?php echo json_encode( $redirect_url ); ?>;
	</script>
	<?php

exit;
}

← 返回文件管理器