Shell Bypass Mr.7Mind

View file

File name : Minify_Core.php
Content :
<?php
namespace W3TC;

/**
 * component of shared code used by minify
 */
class Minify_Core {
	/**
	 * Encode an array of files into a filename containing all files.
	 */
	static public function urls_for_minification_to_minify_filename( $files, $type ) {
		$v = get_option( 'w3tc_minify' );
		$minify_filenames = @json_decode( $v, true );
		if ( !is_array( $minify_filenames ) )
			$minify_filenames = array();

		$files_string = json_encode( $files );
		$key = substr( md5( $files_string ), 0, 5 );

		// collision protection
		if ( isset( $minify_filenames[$key] ) ) {
			$files_stored = $minify_filenames[$key];
			if ( json_encode( $files_stored ) != $files_string ) {
				$key = md5( $files_string );
			}
		}

		$minify_filename = $key . '.' . $type;
		$minify_filename = apply_filters(
			'w3tc_minify_urls_for_minification_to_minify_filename',
			$minify_filename, $files, $type );

		$minify_filenames[$minify_filename] = $files;
		update_option( 'w3tc_minify', json_encode( $minify_filenames ), false );

		return $minify_filename;
	}



	/**
	 * Decode a minify auto filename into an array of files.
	 *
	 * @param unknown $compressed
	 * @param unknown $type
	 * @return array
	 */
	static public function minify_filename_to_urls_for_minification( $filename, $type ) {
		$v = get_option( 'w3tc_minify' );
		$minify_filenames = @json_decode( $v, true );
		if ( !is_array( $minify_filenames ) )
			$minify_filenames = array();

		$minify_filename = $filename . '.' . $type;
		if ( !isset( $minify_filenames[$minify_filename] ) )
			return array();

		$urls_unverified = $minify_filenames[$minify_filename];
		$urls = array();

		foreach ( $urls_unverified as $file ) {
			$verified = false;
			if ( Util_Environment::is_url( $file ) ) {
				$c = Dispatcher::config();
				$external = $c->get_array( 'minify.cache.files' );
				$external_regexp = $c->get_boolean( 'minify.cache.files_regexp' );

				foreach ( $external as $ext ) {
					if ( empty( $ext ) )
						continue;

					if ( !$external_regexp &&
						preg_match( '~^' . Util_Environment::get_url_regexp( $ext ) . '~', $file ) && 
						!$verified ) {
						$verified = true;
					}
					if ( $external_regexp && 
						preg_match( '~' . $ext . '~', $file ) && !$verified ) {
						$verified = true;
					}
				}
				if ( !$verified ) {
					Minify_Core::debug_error( sprintf( 'Remote file not in external files/libraries list: "%s"', $file ) );
				}
			} elseif (  /* no .. */  strpos( $file, '..' ) != false
				// no "//"
				|| strpos( $file, '//' ) !== false
				// no "\"
				|| ( strpos( $file, '\\' ) !== false && strtoupper( substr( PHP_OS, 0, 3 ) ) != 'WIN' )
				// no "./"
				|| preg_match( '/(?:^|[^\\.])\\.\\//', $file )
				/* no unwanted chars */ ||
				!preg_match( '/^[a-zA-Z0-9_.\\/-]|[\\\\]+$/', $file ) ) {
				$verified = false;
				Minify_Core::debug_error( sprintf( 'File path invalid: "%s"', $file ) );
			} else {
				$verified = true;
			}

			if ( $verified )
				$urls[] = $file;
		}

		return $urls;
	}



	static public function minified_url( $minify_filename ) {
		$path = Util_Environment::cache_blog_minify_dir();
		$filename = $path . '/' . $minify_filename;

		$c = Dispatcher::config();
		if ( Util_Rule::can_check_rules() && $c->get_boolean( 'minify.rewrite' ) ) {
			return Util_Environment::filename_to_url( $filename );
		}

		return network_site_url( '?w3tc_minify=' . $minify_filename );
	}



	/**
	 * Sends error response
	 *
	 * @param string  $error
	 * @param boolean $handle
	 * @param integer $status
	 * @return void
	 */
	static public function debug_error( $error ) {
		$c = Dispatcher::config();
		$debug = $c->get_boolean( 'minify.debug' );

		if ( $debug ) {
			Minify_Core::log( $error );
			echo "\r\n/* " . htmlspecialchars( $error ) . " */\r\n";
		}
	}



	/**
	 * Log
	 *
	 * @param string  $msg
	 * @return bool
	 */
	static public function log( $msg ) {
		$data = sprintf( "[%s] [%s] [%s] %s\n", date( 'r' ), $_SERVER['REQUEST_URI'], ( !empty( $_SERVER['HTTP_REFERER'] ) ? $_SERVER['HTTP_REFERER'] : '-' ), $msg );
		$data = strtr( $data, '<>', '..' );

		$filename = Util_Debug::log_filename( 'minify' );
		return @file_put_contents( $filename, $data, FILE_APPEND );
	}



	public function get_usage_statistics_cache_config() {
		$c = Dispatcher::config();
		$engine = $c->get_string( 'minify.engine' );

		switch ( $engine ) {
		case 'memcached':
			$engineConfig = array(
				'servers' => $c->get_array( 'minify.memcached.servers' ),
				'persistent' => $c->get_boolean( 'minify.memcached.persistent' ),
				'aws_autodiscovery' =>
				$c->get_boolean( 'minify.memcached.aws_autodiscovery' ),
				'username' => $c->get_string( 'minify.memcached.username' ),
				'password' => $c->get_string( 'minify.memcached.password' )
			);
			break;

		case 'redis':
			$engineConfig = array(
				'servers' => $c->get_array( 'minify.redis.servers' ),
				'persistent' => $c->get_boolean( 'minify.redis.persistent' ),
				'dbid' => $c->get_integer( 'minify.redis.dbid' ),
				'password' => $c->get_string( 'minify.redis.password' )
			);
			break;

		default:
			$engineConfig = array();
		}

		$engineConfig['engine'] = $engine;
		return $engineConfig;
	}
}
Mini Shell By Mr.7Mind -+- RibelCyberTeam

View file
