WooYun.org

public function sendsmsAction(){
            $this->_helper->viewRenderer->setNoRender();
            $userip = $_SERVER["REMOTE_ADDR"];
            $pid = $_REQUEST['pid'];
            $phone = $_REQUEST['phone'];
            $lan = $_REQUEST['lan'];
            $curtime = $_REQUEST['curtime'];
            $passport = $_REQUEST['passport'];
            $password = "auto!^**wwkeypss";
	    $json = array(array('code'=>'1', 'msg'=>'申请成功,直接发送短信'),array('code'=>'2', 'msg'=>'申请成功,返回帐号'),array('code'=>'3', 'msg'=>'申请成功,返回帐号和密码'),array('code'=>'-1', 'msg'=>'登陆失败'),array('code'=>'-2', 'msg'=>'非法的手机号'),array('code'=>'-3', 'msg'=>'非法的mac地址'),array('code'=>'-4', 'msg'=>'非法>的校验位'));
            $value = md5($pid.$phone.$curtime.$password);
            if($passport!=$value){
                $rt = json_encode($json[6]);
                echo $rt ;
                die;
            }
            $getsmsurl = "http://106.120.238.122/portal/regbycustomer?idtype=1&idnum=$phone";
            $f = fopen($getsmsurl, "r");
            if($f){
                    $smscode=fread($f,60);
                    $result = substr($smscode,10,1);
//                      var_dump($smscode);echo "</br>";
//                  var_dump($result);
                    if($result == 1){
                        $rt = json_encode($json[0]);
                        echo $rt;
                    }
            }
    }

public function ajaxloginAction()
    {
        $this->_helper->viewRenderer->setNoRender();
        $user=trim($_POST['user']);
        $password=trim($_POST['password']);
	$mac=$_SESSION["usermac"];
	$userIp = $_SERVER['REMOTE_ADDR'];
	$userip = $_SERVER["REMOTE_ADDR"];
        if ('' == $user) {
            echo -4;//账号不能为空
            return;
        }
        if ('' == $password) {
            echo -5;//密码不能为空
            return;
        }
        //require_once '../application/models/Login/Standard.php';
        require_once '../application/models/Remote/DataValidation.php';
        $login=new Models_Remote_DataValidation();
        $rs=$login->checkLogin($user, $password);
        //echo $rs;// -1:用户名，密码不对,-2:用户帐号使用时间已到期,正值：剩余上网时间
	$len=strlen($rs);
	if($len > 10)
	{
		echo 0;
		fopen("http://".REMOTE_ADDRESS."/portal/macinsacct?mac=$mac&user=$user&pass=$password", "r");
		
		error_log("user==================================".$user);
		$i=0;
		for($i=0;$i<3;$i++)
		{
			$rt=$this->test();
			error_log("bras rt=$rt");
			
			if(0==$rt)
			{
				$sendurlcn = "http://106.120.238.123/portal/sendloginauth?ip=$userip&username=$user&msgtype=2";
                        try{
                                fopen ( $sendurlcn, "r" );
                        }catch(Exception $e){
			}
			break;
			}
			
			break;
		}
		if(0==$rt)
		{
			
			$cookiewu=$_COOKIE['loginwu'];
			$cookiewp=$_COOKIE['loginwp'];
			if ($cookiewu && $cookiewp){
				
			}else{
				$loginuser = $user;
				$loginpass = $password;
				$sendurlcn = "http://106.120.238.123/portal/getregtime?username=$user";
				$f = fopen ( $sendurlcn, "r" );
				if($f){
					$name=fread($f,80);
					$logintimescj = $name;
				}else{
// 					$username = $user;
				}
				setcookie("loginwu","$loginuser",time()+3600*4);
				setcookie("loginwp","$loginpass",time()+3600*4);
				setcookie("loginwt","$logintimescj",time()+3600*4);
			}
			error_log("user=================loginsuccess============".$user);
			echo  $rt;
		}
		elseif(2==$rt)
		{
			echo "1";
			error_log("重复登陆，直接跳转!");
		}
		else
		{
			echo "-3";
			error_log("login fail !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!");
		}
		
	}else
	{
		echo $rs;
		error_log("login failed rt=$rt\n");
	}
    }

function updateConf($username, $pass, $server){
		if(!file_exists("api/config.inc.php")) return "文件smsdemo/api/config.inc.php 不存在！";
		if(!is_writable("api/config.inc.php")) return "文件smsdemo/api/config.inc.php 不可写！请检查文件属性！";
		$fd = fopen("api/config.inc.php","w");
		if(!$fd) return "文件smsdemo/api/config.inc.php 打不开, 请检查文件属性！";
		$line = '<? '."\n".
				'/** '."\n".
				' * 这是配置文件 '.
				' * $'."vcpserver		SCP服务器地址，测试服务器为testxml.todaynic.com，正式服务器为xml.todaynic.com "."\n".
				' * $'."vcpserverport	SCP服务器，在测试环境和真实环境，使用的接口均为20001 "."\n".
				' * $'."vcpsuser		时代互联提供的真实短信用户或测试用户 "."\n".
				' * $'."vcppassword		 时代互联提供的真实短信用户密码或测试用户密码 "."\n".
				' * '."\n".
				' * www.now.com,Inc. http://www.now.com '."\n".
				'**/ '."\n".
				'$'.'vcpserver="'.$server.'"; '."\n".
				'$'.'vcpserverport="20001"; '."\n".
				'$'.'vcpuser="'.$username.'"; '."\n".
				'$'.'vcppassword="'.$pass.'"; '."\n".
				'?> '."\n";
		if(fwrite($fd, $line)===FALSE) return "文件smsdemo/api/config.inc.php 写入失败！请检查文件属性！";
		fclose($fd);
		return "1";
	}