🔓 Ultimate Webshell - Penetration Testing Tool

📖 File Reader

<?php
namespace app\api\controller;
use app\BaseController;
use app\api\common\Common_user;
use think\facade\Db;
use think\facade\View;

class Base extends BaseController
{
    protected $base64_user_miyao = '';//会员请求秘钥
    protected $user_id = 0;//会员id
    protected $user_miyao = 0;//会员秘钥
    protected $user_info = [];//会员信息
    protected $page = 1;//默认页数
    protected $limit = 20;//默认条数
    // 初始化
    protected function initialize()
    {
        $this->page = input('page')?:$this->page;
        $this->limit = input('limit')?:$this->limit;
        $this->login_dispose(input("param.user_miyao"));
    }

    /**
     * 会员登录验证
     * @param $base64_user_miyao 秘钥
     * @return void
     */
    public function login_dispose($base64_user_miyao='')
    {
        if (empty($base64_user_miyao)){$this->error_json("请先登录",300);exit();}
        $analysis_data = explode('&',base64_decode($base64_user_miyao));
        if (count($analysis_data) < 2){
            $this->error_json("登录数据错误",300);exit();
        }
        $user_miyao =  $analysis_data['0'];
        $time_login =  $analysis_data['1'];
        $user_info = db::name("user")->where("user_miyao = '$user_miyao'")->find();
        if (empty($user_info)){
            $this->error_json("会员不存在",300);exit();
        }
        $user_log_time = db::name("user_login_log")->where("user_id = $user_info[user_id]")->order("id desc")->value("time_add");
        if ($user_log_time > $time_login){
            //$this->error_json("本次登录已失效,本账号已在其它设备登录!(如非本人操作建议修改本账号密码。)",303);exit();
        }
        $this->base64_user_miyao = $base64_user_miyao;
        $this->user_id = $user_info["user_id"];
        $this->user_miyao = $user_info["user_miyao"];
        $this->user_info = $user_info;
        return $user_miyao;
    }
}