403Webshell
Server IP : 104.21.74.147  /  Your IP : 216.73.217.154
Web Server : nginx/1.24.0
System : Linux wordpress-sites 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/rebeccaone.com/wp-content/plugins/apoyl-weixinshare/public/weixinapi/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/rebeccaone.com/wp-content/plugins/apoyl-weixinshare/public/weixinapi/ApoylJSSDK.php
<?php
/*
 * @link http://www.girltm.com/
 * @since 1.0.0
 * @package Apoyl_Weixinshare
 * @subpackage Apoyl_Weixinshare/public/weixinapi
 * @author 凹凸曼 <[email protected]>
 *
 */
class ApoylJSSDK {
	private $appId;
	private $appSecret;
	private $openbs;
    private $debug;
	public function __construct($appId, $appSecret,$debug) {
		$this->openbs = false;
		$this->appId = $appId;
		$this->appSecret = $appSecret;
        $this->debug=$debug;

	}
	public function getSignPackage() {
		$jsapiTicket = $this->getJsApiTicket ();
		
		// 注意 URL 一定要动态获取,不能 hardcode.
		$protocol = (! empty ( $_SERVER ['HTTPS'] ) && $_SERVER ['HTTPS'] !== 'off' || $_SERVER ['SERVER_PORT'] == 443) ? "https://" : "http://";
		$url = "$protocol$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
		
		$timestamp = time ();
		$nonceStr = $this->createNonceStr ();
		
		// 这里参数的顺序要按照 key 值 ASCII 码升序排序
		$string = "jsapi_ticket=$jsapiTicket&noncestr=$nonceStr&timestamp=$timestamp&url=$url";
		
		$signature = sha1 ( $string );
		
		$signPackage = array (
				"appId" => $this->appId,
				"nonceStr" => $nonceStr,
				"timestamp" => $timestamp,
				"url" => $url,
				"signature" => $signature,
				"rawString" => $string 
		);
		return $signPackage;
	}
	private function createNonceStr($length = 16) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
		$str = "";
		for($i = 0; $i < $length; $i ++) {
			$str .= substr ( $chars, mt_rand ( 0, strlen ( $chars ) - 1 ), 1 );
		}
		return $str;
	}
	private function getJsApiTicket() {
		$data = json_decode ( $this->get_php_file ( "jsapi_ticket" ) );
		$ticket='';
		if (! isset ( $data->expire_time ) || $data->expire_time < time ()) {
			$accessToken = $this->getAccessToken ();
			// 如果是企业号用以下 URL 获取 ticket
			if ($this->openbs)
				$url = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=$accessToken";
			else
				$url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
            if($this->debug){
                $this->set_log_file("debug", $this->httpGet($url));
            }

			$res = json_decode ( $this->httpGet ( $url ) );
			if(isset($res->ticket))
				$ticket = $res->ticket;
			if ($ticket) {
				$data = new stdClass ();
				$data->expire_time = time () + 7000;
				$data->jsapi_ticket = $ticket;
				$this->set_php_file ( "jsapi_ticket", json_encode ( $data ) );
			}
		} else {
			isset ( $data->jsapi_ticket ) ? $ticket = $data->jsapi_ticket : $ticket = null;
		}
		
		return $ticket;
	}
	private function getAccessToken() {
		$data = json_decode ( $this->get_php_file ( "access_token" ) );
		$access_token='';
		if (! isset ( $data->expire_time ) || $data->expire_time < time ()) {
			// 如果是企业号用以下URL获取access_token
			if ($this->openbs)
				$url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=$this->appId&corpsecret=$this->appSecret";
			else
				$url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
			$res = json_decode ( $this->httpGet ( $url ) );
			if(isset($res->access_token))
				$access_token = $res->access_token;
			if ($access_token) {
				$data = new stdClass ();
				$data->expire_time = time () + 7000;
				$data->access_token = $access_token;
				$this->set_php_file ( "access_token", json_encode ( $data ) );
			}
		} else {
			$access_token = $data->access_token;
		}
		return $access_token;
	}
	private function httpGet($url) {
		$res = wp_remote_retrieve_body ( wp_remote_get ( $url, array (
				'timeout' => 120 
		) ) );
		return $res;
	}
	private function get_php_file($filename) {
		$filefull = APOYL_WEIXINSHARE_DIR . 'public/cache/' . $filename . '.php';
		if (! file_exists ( $filefull ))
			return '';
		$fp = fopen ( $filefull, 'r' );
		$re = fread ( $fp, filesize ( $filefull ) );
		return trim ( substr ( $re, 15 ) );
	}
	private function set_php_file($filename, $content) {
		$filefull = APOYL_WEIXINSHARE_DIR . 'public/cache/' . $filename . '.php';
		
		$fp = fopen ( $filefull, "w" );
		fwrite ( $fp, "<?php exit();?>" . $content );
		fclose ( $fp );
	}
    private function set_log_file($filename, $content) {
        $filefull = APOYL_WEIXINSHARE_DIR . 'public/cache/' . $filename . '.log';

        $fp = fopen ( $filefull, "a");
        fwrite ( $fp,  $content.chr(13).chr(10) );
        fclose ( $fp );
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit