shell bypass 403
UnknownSec Shell
:
/
usr
/
local
/
lsws
/
admin
/
html
/
classes
/
ws
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
ConfValidation.php
<?php class ConfValidation extends CValidation { protected function validatePostTbl($tbl, &$d) { $isValid = parent::validatePostTbl($tbl, $d); if ($tbl->_id == 'VH_SECHL') { $res = $this->chkPostTbl_VH_SECHL($d); $this->setValid($isValid, $res); } return $isValid; } protected function chkPostTbl_VH_SECHL(&$d) { $isValid = 1; if ( $d['enableHotlinkCtrl']->GetVal() == '0' ) { if ( isset($d['suffixes']) && !$d['suffixes']->HasVal() ) { $d['suffixes']->SetErr(null); } if ( isset($d['allowDirectAccess']) && !$d['allowDirectAccess']->HasVal() ) { $d['allowDirectAccess']->SetErr(null); } if ( isset($d['onlySelf']) && !$d['onlySelf']->HasVal() ) { $d['onlySelf']->SetErr(null); } $isValid = 2; } else { if ( $d['onlySelf']->GetVal() == '0' && !$d['allowedHosts']->HasVal() ) { $d['allowedHosts']->SetErr('Must be specified if "Only Self Reference" is set to No'); $isValid = -1; } } return $isValid; } }
© 2024 UnknownSec