One Hat Cyber Team

Edit File: login1.php

<?php 
error_reporting(E_ALL|E_STRICT);
ini_set( 'display_errors', 1);
include("settings1.php");
$usecookies = true; /* sessions are no longer supported */
if(!isset($noboipcheck)) $noboipcheck = false;
if((sizeof($ipadresses) > 0) && (!checkIPs($ipadresses)) && (!isset($embedded) || !$noboipcheck ))
{ echo "You may not use this script from IP Adress: ".$_SERVER['REMOTE_ADDR']; exit();}
if (!function_exists('mysqli_connect'))
  die("Your server does not support the PHP MySQLi functions. Ask your hosting provider to add them to your installation! This is essential software - also for other applications.<br>If you control your own installation: remove the comment sign before the php_mysqli module in php.ini.");

date_default_timezone_set(@date_default_timezone_get()); // Suppress DateTime warnings
//  ini_set('date.timezone', @date_default_timezone_get());  //alternative: if(!ini_get('date.timezone')) {date_default_timezone_set('GMT');} 
$sname = str_replace(".","", $_SERVER['SERVER_NAME']);
if(!$usecookies)
{ session_id('t69'.$sname);
  if(!@is_writable(session_save_path()))
    $usecookies = true;
  else
    session_start();
}
connect_to_database();

$url = $_SERVER['REQUEST_URI'];
$validated = false;

if(isset($embedded))
{ check_logincount();
  if($usecookies)
  { $seed = get_seed();
//  $encseed = preg_replace('/'.preg_quote("\\", '\\').'/',"", convert_uuencode(base64_encode($seed)));  // some servers escape cookies
    $encseed = stripslashes(stripslashes(stripslashes(convert_uuencode(base64_encode($seed)))));  // some servers escape cookies
    if(isset($_COOKIE["tripleedit"]) && (stripslashes(stripslashes(stripslashes($_COOKIE["tripleedit"]))) == $encseed))
// Note: cookie may be replaced with localStorage.setItem('key', 'value') and localStorage.getItem('key'));
      $validated = true;
  } 
  else /* session */
  { if (isset($_SESSION['tripleedit']) && $_SESSION['tripleedit'] == 'open')
	  $validated = true;
  }	
  if (!$validated) 
  { header('Location: login1.php?url='.urlencode($url)); //Replace that if login1.php is somewhere else
  }
  reset_logincount();
}
else  /* when login1.php is called stand-alone ( = not from approve.php) */
{ if(isset($_POST['username']) && isset($_POST['pswd']))
  { $pswd = $_POST['pswd'];
	check_logincount();
    if(($_POST['username'] == $username) && (($md5hashed && (md5($pswd) == $password )) || (!$md5hashed && ($pswd == $password))))
    { if(!$usecookies)
  	  {	check_for_BOM();
	 	$_SESSION['tripleedit'] = 'open';
		session_write_close();
	  }
	  else
	  { $seed = get_seed();
		$encseed = stripslashes(stripslashes(stripslashes(convert_uuencode(base64_encode($seed)))));  // some servers escape cookies
		setcookie("tripleedit", $encseed,  time()+3600*24*365);
	  }
	  reset_logincount();
      if(isset($_GET['url']))
        header('Location: '.urldecode($_GET['url'])); //Replace index.php with what page you want to go to after succesful login
      else
        header('Location: product-edit.php'); //Replace index.php with what page you want to go to after succesful login
	  if(isset($_GET['url']))
	    echo "Redirection problem for ".$_GET['url'];
	  else 
	    echo "Redirection to edit pages is impossible.";
      exit;
    } 
	else 
	{ echo '<script type="text/javascript">
         alert(\'Wrong Username or Password, Please Try Again!\');
     </script>';
    }
  }

echo '<!DOCTYPE html> 
<html lang="en"><head><meta charset="utf-8">
<title>Prestools Login</title>
</head>
<body>'; 
  echo "<br/>";
  if($usecookies) echo "Cookie"; else echo "Session";
  $ip_address = $_SERVER['REMOTE_ADDR'];
  if($ip_address == $_SERVER['SERVER_ADDR'])
  { if(isset($_SERVER['HTTP_X-Forwarded-For'])) $ip_address = $_SERVER['HTTP_X-Forwarded-For'];
    else if(isset($_SERVER['HTTP_X-Client-IP'])) $ip_address = $_SERVER['HTTP_X-Client-IP'];
    else if(isset($_SERVER['HTTP_X_REAL_IP'])) $ip_address = $_SERVER['HTTP_X_REAL_IP'];
  }
  echo "<br/>IP address = ".$ip_address;
  if(!isset($_POST['username'])) $_POST['username'] = "";
  if(!isset($_POST['pswd'])) $_POST['pswd'] = "";
  echo '
<p/>&nbsp;<p/>&nbsp;<p/><p/><p/><p/>
<center>
<form method="post" action="">
<table>
<tr><td>User:</td><td><input type="input" name="username" value = "'.$_POST['username'].'"></td></tr>
<tr><td>Password:</td><td><input type="password" name="pswd" value = "'.$_POST['pswd'].'"></td></tr>
<tr><td>&nbsp;</td><td><input type="submit" name="login" value="Login"></td></tr>';
// echo '<tr><td colspan=2><br>User: demo@demo.com<br>Pw: demodemo</td></tr>';
echo '</table>
</form>
</center>
</body>
</html>';
}

function reset_logincount()
{ global $conn;
  $day = date("Ymd");
  $hour = date("H");
  $minute = date("i");
  $query = "UPDATE `". _DB_PREFIX_."configuration` SET value='".$day."_".$hour."_".$minute."_0_0_0' WHERE name='"._PRESTOOLS_PREFIX_."LOGIN_FREQUENCY'";
  $res = mysqli_query($conn, $query);
}

function get_seed()
{ $seed = "";
  if(isset($_SERVER['SERVER_SIGNATURE']))   $seed.=$_SERVER['SERVER_SIGNATURE'];
  if(isset($_SERVER['GATEWAY_INTERFACE']))  $seed.=$_SERVER['GATEWAY_INTERFACE'];
  if(isset($_SERVER['SERVER_ADMIN']))       $seed.=$_SERVER['SERVER_ADMIN'];
  return @date("m Y").$seed."random"._COOKIE_KEY_;
}

/* in PS 1.5 and 1.6 all constants are in config/settings.inc.php */
/* in PS 1.7 _PS_VERSION_ is in /config/autoload.php and the other constants are in app/config/parameters.php */
/* the file /modules/autoupgrade/classes/PrestashopConfiguration.php contains a function getPrestaShopVersion() that has solutions for the different versions */
function connect_to_database()
{ global $triplepath, $conn, $headermsgs, $localpath, $shoppath, $allow_accented_chars;
  if(file_exists("../error500.html"))
  { $triplepath = "../";
	$level = 1;
  }
  else if(file_exists("../../error500.html"))
  { $triplepath = "../../";
	$level = 2;
  }
  else if(file_exists("../../../error500.html")) /* this is a file in the root */
  { $triplepath = "../../../";
	$level = 3;
  }
  else if(file_exists("../../../../error500.html")) /* this is a file in the root */
  { $triplepath = "../../../../";
	$level = 4;
  }
  else if(file_exists("../../../../../error500.html")) /* this is a file in the root */
  { $triplepath = "../../../../../";
	$level = 5;
  }
  else
    die( "<p><b>Your files should be in a subdirectory of the admin directory of your shop!</b>");
  $localpath = realpath($triplepath);
  $localpath = str_replace("\\", "/", $localpath); /* windows */
  $selfs = explode("/",$_SERVER['PHP_SELF']);
  $shoppath = "/";
  for($i=1; $i<(sizeof($selfs)-$level-1); $i++)
	  $shoppath .= $selfs[$i]."/";

//  if(is_dir($triplepath."app/config/")) /* if version 1.7 */
/* note that in config/bootstrap.php on line 88 all fields have "str_replace('%%', '%' " */
  if(file_exists($triplepath."app/config/parameters.php")) /* if version 1.7 */
  { $config = require($triplepath."app/config/parameters.php");
    define('_DB_SERVER_', $config['parameters']['database_host']);
    define('_DB_NAME_', $config['parameters']['database_name']);
    define('_DB_USER_', $config['parameters']['database_user']);
    define('_DB_PASSWD_', str_replace('%%', '%', $config['parameters']['database_password']));
    define('_DB_PREFIX_',  $config['parameters']['database_prefix']);
    define('_COOKIE_KEY_',  $config['parameters']['cookie_key']);
	
    /* now get version */
    $data = file($triplepath."config/autoload.php");
    if(!$data) die("Error getting version number.");
    $version = "";
    foreach($data AS $line)
    { if(substr($line,0,22) == "define('_PS_VERSION_',")
	  { $subline = substr($line,22);
	    $version = preg_replace("/[\';\)\r\n ]*/", "", $subline);
	  }
    }
    if($version == "") die("Error analysing version number");
	if($version == "AppKernel::VERSION")
	{ $data = file($triplepath."app/AppKernel.php");
      if(!$data) die("Error getting version number.");
      $version = "";
      foreach($data AS $line)
      { $parts = explode("=",$line);
	    if((sizeof($parts) == 2) && (trim($parts[0]) == "const VERSION"))
		{ $tmp = trim($parts[1]);
		  $version = substr($tmp,1,strlen($tmp)-3);
		  break;
		}
      }
	}
	if(version_compare($version, "9.9", ">=") || version_compare($version, "1.6", "<"))
	{ die("Automatic determination of the Prestashop version failed (".$version."). Please alert the Prestools maintainer.");
	}
	define('_PS_VERSION_',$version);
	if (_PS_VERSION_ >= "8.1")
	  die("Prestashop 8.1 is not yet supported by Prestools.");
  }
  else /* version 1.5/1.6 */
  { if(!@include $triplepath."config/settings.inc.php")
      die("Error loading 1.5/1.6 config file!");
    if (_PS_VERSION_ < "1.5.0")
	  die("This version of Prestools Suite is for Prestashop 1.5, 1.6 and 1.7!<p>There is a separate 1.4 version available.");
    if (version_compare(_PS_VERSION_, "1.5.0.10", "<"))
	  die("Prestools doesn't work with versions lower than 1.5.0.10.");
  }

/* with mysqli_connect you cannot keep the socket in the first argument - 1and1 issue */
  if(substr(_DB_SERVER_,(strlen(_DB_SERVER_)-5)) == ".sock")
  { $parts = explode(":",_DB_SERVER_);
    $conn = mysqli_connect($parts[0], _DB_USER_, _DB_PASSWD_, _DB_NAME_, null, $parts[1]);
  }
  else
  { if (_PS_VERSION_ < "1.7")
    { $parts = explode(":",_DB_SERVER_);
	  $server = $parts[0];
	  if(isset($parts[1])) $port = $parts[1]; else $port = "";
	}
	else
	{ $server = $config['parameters']['database_host'];
	  $port = $config['parameters']['database_port'];
	}
    if($port != "")  /* port number specified? */
      $conn = mysqli_connect($server, _DB_USER_, _DB_PASSWD_, _DB_NAME_,$port);
    else
	{ $conn = mysqli_connect($server, _DB_USER_, _DB_PASSWD_, _DB_NAME_);
	}
  }
  if(!$conn)
  { echo "Error connecting to server ";
    if(substr(_DB_SERVER_,(strlen(_DB_SERVER_)-5)) == ".sock") echo "with socket ".$parts[1];
    else if((sizeof($parts)>1) && is_numeric($parts[1])) echo $server." with port ".$port;
	else echo $server;
	die("<br>Error: " . mysqli_connect_errno().": " . mysqli_connect_error());
  }

$headermsgs = ""; /* will be printed together with menu */
  // mysqli_select_db($conn, _DB_NAME_) or die ("Error selecting database");
  //$res1 = mysqli_query($conn, "SET NAMES 'utf8'");
  $res = mysqli_set_charset($conn, "utf8");
  if(!$res) $headermsgs .= "Error setting charset...";
  /* the following line should prevent MySQL 5.7.5 (and higher) 'ONLY_FULL_GROUP_BY' errors */
  // See http://johnemb.blogspot.nl/2014/09/adding-or-removing-individual-sql-modes.html
//  $res4 = mysqli_query($conn, "SET SESSION sql_mode=(SELECT REPLACE(@@sql_mode,'ONLY_FULL_GROUP_BY',''))"); 
//  
  /* the following line should prevent MySQL 5.7.5 (and higher) 'STRICT_TRANS_TABLES' errors */
  // dbquery("SET SESSION sql_mode=(SELECT REPLACE(@@sql_mode,'STRICT_TRANS_TABLES',''))");
  $res4 = mysqli_query($conn, 'SET SESSION sql_mode = \'\'');  
  if(!$res4) $headermsgs .= "Error setting session mode";
  $res5 = mysqli_query($conn, "select * from ". _DB_PREFIX_."configuration WHERE name='PS_ALLOW_ACCENTED_CHARS_URL'");
  if(mysqli_num_rows($res5) == 0)
    $allow_accented_chars = 0;
  else
  { $row = mysqli_fetch_assoc($res5);
    $allow_accented_chars = $row["value"];
  }
}