WooYun.org

if ($allow_webadmin == false)


	die('You must provide web administration service');





if (!preg_match('/^[0-9a-z]{32}$/i', $sessid))


	die('the system occurs error, please login it');





define('WM_ADMIN_LOGINED', true);





$retid = (double)microtime()*100000000;





$sesshandle = New Session();


$sesshandle->temp_folder = $temporary_directory;


$sesshandle->sessid = $sessid;


$sesshandle->timeout = $session_timeout;


$sesshandle->enable_cookies = true;


$sesshandle->sesstype = SESSION_ADMIN;


$session_value = $sesshandle->Load();


if ($session_value === false){


	Header('Location: index.php?err=sess_load&retid='.$retid); 


	exit; 


}


if ($session_value['auth']) {


	$nowstamp = time();


	$start = ($session_value['start'] == '') ? $nowstamp : $session_value['start'];





	if (intval($nowstamp - $start) > $session_timeout) {


		Header('Location: badlogin.php?sessid='.$sessid.'&err=100&retid='.$retid);


 


		exit; 


	}


	


	$session_value['start'] = $nowstamp;


	$sesshandle->Save($session_value);


}


else{


	Header('Location: badlogin.php?sessid='.$sessid.'&retid='.$retid);


	exit;


}