WooYun.org

if ($allow_webadmin == false)
	die('You must provide web administration service');
if (!preg_match('/^[0-9a-z]{32}$/i', $sessid))
	die('the system occurs error, please login it');
define('WM_ADMIN_LOGINED', true);
$retid = (double)microtime()*100000000;
$sesshandle = New Session();
$sesshandle->temp_folder = $temporary_directory;
$sesshandle->sessid = $sessid;
$sesshandle->timeout = $session_timeout;
$sesshandle->enable_cookies = true;
$sesshandle->sesstype = SESSION_ADMIN;
$session_value = $sesshandle->Load();
if ($session_value === false){
	Header('Location: index.php?err=sess_load&retid='.$retid); 
	exit; 
}
if ($session_value['auth']) {
	$nowstamp = time();
	$start = ($session_value['start'] == '') ? $nowstamp : $session_value['start'];
	if (intval($nowstamp - $start) > $session_timeout) {
		Header('Location: badlogin.php?sessid='.$sessid.'&err=100&retid='.$retid);
 
		exit; 
	}
	
	$session_value['start'] = $nowstamp;
	$sesshandle->Save($session_value);
}
else{
	Header('Location: badlogin.php?sessid='.$sessid.'&retid='.$retid);
	exit;
}