🔓 Ultimate Webshell - Penetration Testing Tool

📖 File Reader

<?php
namespace app\admin\controller;
use app\admin\common\Common_config;
use app\BaseController;
use think\facade\View;
use think\facade\Db;
use think\facade\Session;

class Login extends BaseController
{
    public function login()
    {
        $config = Common_config::config("'name','url'");
        if ($_POST) {
            $user_name = input("param.user_name");
            $admin_info = db::name("admin")->where("user_name = '$user_name'")->find();
            if (empty($admin_info)){
                return $this->error_json('账号错误',201);
            }
            $password = base64_encode(input("param.password"));
            if ($password != $admin_info["password"]){
                return $this->error_json('密码错误',201);
            }
            $ip = $_SERVER['REMOTE_ADDR'];
            $time = time();
            $info_login = [
                'admin_id'=>$admin_info["admin_id"],
                'ip'=>$ip,
                'time_add'=>$time,
            ];
            db::name("admin_login_log")->insertGetId($info_login);
            session("admin_id",$admin_info["admin_id"]);
            session("admin_login_time",$time);
            return $this->succeed_json('正在登录~');
        }else{
            View::assign([
                'config'=>$config,
            ]);
            return View::fetch();
        }
    }

    /**
     * 退出登录
     */
    public function out()
    {
        session("admin_id",null);
        return redirect('/admin/Login/login');
    }
}