WooYun.org

<?php
/**
 * set & get cookie for sina.com.cn
 * cookie format:  [ uniqueid:userid:appgroup:displayname:gender:paysign ]
 */
class SSOCookie {
    const COOKIE_SUE = 'SUE';   //sina user encrypt info
    const COOKIE_SUP = 'SUP';   //sina user plain info
	const COOKIE_KEY_FILE = '/data0/web_root/client.show.sina.com.cn/www/inc/cookie.conf';
	private $_arrConf; // the infomation in cookie.conf
	public function __construct($config = self::COOKIE_KEY_FILE) {
		if(!$this->_parseConfigFile($config)){
			throw new Exception("parse config file failed");
		}else{
			echo 14314;
		}
	}
    public function getCookie(&$arrUserInfo) {
        // 不存在密文cookie或明文cookie视为无效
        if( !isset($_COOKIE[self::COOKIE_SUE]) ||
            !isset($_COOKIE[self::COOKIE_SUP])) {
                return false;
			}

/**
	 * SSO登录接口调用函数
	 * 
	 * @param  $ip        客户端IP地址
	 * @param  $pin       SSO接口调用PIN码
	 * @param  $entry     项目代码
	 * @param  $ag        用户类型
	 * @param  $userId    用户ID
	 * @param  $pwd       用户密码
	 * @param  $url       SSO接口调用地址
	 * @param  $succ      SSO接口调用结果集
	 * @return $resultArr 返回结果(数组类型)
	 */
	public static function ssoLogin($userId, $pwd){
	    $ip = $_SERVER['REMOTE_ADDR'];              // 客户端IP地址
	    $pin = '70269226506e773f52a5ed9471f1691c';  // PIN码
	    $entry = 'desktop';                         // 项目代码
	    $ag = '';                                   // 用户类型	
	    $mchk = md5($userId.$ag.$pwd.$ip.$pin);       // 加密串
		$userId = rawurlencode($userId);
	    $pwd = rawurlencode($pwd);                  // 转换为统一字符编码
	    $url = ("http://ilogin.sina.com.cn/api/chksso.php?entry={$entry}&user={$userId}&ag={$ag}&pw={$pwd}&ip={$ip}&m={$mchk}"); // 接口调用地址
	    //Zend_Debug::dump($url);
	    $succ = file_get_contents($url);  // 接口调用结果
		// var_dump($succ);
	    //echo "succ={$succ}<br>";
	    $result = '';
	    parse_str($succ,$result);	
	    foreach ($result as $key =>$value){
	    	$result[$key] = urldecode($value);
	    }	    
	    //Zend_Debug::dump($succ);
	    //print_r($result);    
	    return $result;
	}
	
	/**
	 * 注入COOKIE
	 * 
	 * @param  $str      SSO接口返回值
	 * @param  $strOne   拆分字符串1
	 * @param  $strTwo   拆分字符串2
	 * @param  $strThree 拆分字符串3
	 * @param  $delArray 删除数组内第1个元素
	 */
	public static function setCookieStr($str) {
		$strOne = explode('Set-Cookie:',$str['cookies']);
		$delArray = array_shift($strOne);
		$cookie = array();
		foreach ($strOne as $key => $value) {
			$strTwo = explode('=',$value,2);
			$strThree = explode(';',$strTwo['1']);
            //echo $strTwo['1'],"<br>";
			$cookieName = trim($strTwo['0']);
			$cookieValue = trim($strThree['0']);
			$cookie[$cookieName] = $cookieValue;
            if (stripos($strTwo['1'],'httponly')){
            	$httponly = 1;
                //echo $strTwo['0'];
                //print_r($strThree);
                //echo "<br>";
            }else{            	
                $httponly = 0;
            }
            //echo "cookieName=$cookieName,cookieValue=$cookieValue,$httponly<br>";
			setcookie($cookieName, $cookieValue, 0, "/", "sina.com.cn",0,$httponly);
		}
		//print_r($cookie);
		return $cookie;
	}
}

<?php
define("AG",1);
define("AG_PIN",'e22760687e1ad7132a84ebf21fc18490');
define("AG_ENTRY",'sinashow');
define("AG_DOMAIN",'.show.sina.com.cn');
$cookie_key = array(
'v0'=>'v030f6b787dd6f37157e6a2493e83714a63f1438fc30217955ca3f8f952cdef4',
'v1'=>'v130f6b787dd6f37157e6a2493e83714a63f1438fc30217955ca3f8f952cdef4'
);
class ShowSSO{
	public $_url = "";
	public $_host = "http://login.show.sina.com.cn/";
	public $_format = 'json';
	public $_Encrypt;
	public $_uid;
	public $_pwd;
	public $_ip;
	public $_ag;
	public $_ag_pin;
	public $_ag_entry;
	public $_request='cURL';
	public $_method='POST';
	public $_result='';
	function __construct($ag,$ag_pin,$entry,$uid,$pwd){//echo $pwd;
	
		if(!empty($ag))$this->_ag=$ag;
		if(!empty($ag_pin))$this->_ag_pin=$ag_pin;
		if(!empty($entry))$this->_ag_entry=$entry;
		if(!empty($uid))$this->_uid=$uid;
		if(!empty($pwd))$this->_pwd=$pwd;