WooYun.org

<?


$finalfilename="/usr/local/etc/ht-users";


$filename="definition/temp/user.txt";


$b=finaltotmp($finalfilename,$filename);





function finaltotmp($finalfilename,$tmpfilename)


{


	$datas1=file($finalfilename);


	$fp=fopen($tmpfilename,"w+");


	for ($i=0;$i<count($datas1);$i++ )


	{


		$datas1[$i]=($i+1).";".$datas1[$i];


		fputs($fp,$datas1[$i]);


	}


	fclose($fp);


	return 1;


}





/*for ($i=0;$i<count($filename);$i++)


	{


		$a=explode(";",$filename[$i]);


$pri=array("$a[3]","$a[4]");


if($a[3]==0&&$a[4]==0)


//$s=session_register($pri);*/


session_register("sortt");


global  $username;











$sortt=check_passwd($username,$password,$filename,$REMOTE_ADDR);


`logger "fwserver: $username;$REMOTE_ADDR;注册信息(ssl)"`;











function dectobin($str){


  $data=explode(".",$str);


  for($i=0;$i<count($data);$i++){


    $temp=DecBin($data[$i]); //十进制变二进制


    $long=8-strlen($temp);  


    for($j=0;$j<$long;$j++){  //二进制数不足8位补0


      $temp="0".$temp;   


    }


    $new.=$temp;  //二进制


  }


  return $new;


}





function check_passwd($user,$pass,$filename,$client_ip)


{





	$users=file($filename);


	if($user=="")


	{


		echo "<script language=javascript>  


				window.location='index.html';</script>";


		exit();			


	}


	$j=0;


	for ($i=0;$i<count($users);$i++)


	{


		$lines=explode(";",$users[$i]);


		if($user==$lines[1])


		{


			$user_s=$lines[1];


			$pass_s=$lines[2];


			$sortt=trim($lines[3]);


			$group=trim($lines[4]);


			$pri=array($sortt,$user_s);


			$ip = trim($lines[5]);


			$mask = trim($lines[6]);


			$j++;


				


		}


	}


    $a="er.txt";


    $fp=fopen($a,"w+");


    fputs($fp,$user);


    fclose($fp);


	if($j==0)


	{


		`logger "fwserver: $user;$client_ip;注册失败(ssl)"`;


		


		echo "<script language=javascript> window.alert('没有这个用户');


				window.location='index.html';</script>";


		exit();					


	}


	if($pass<>$pass_s)


	{   `logger "fwserver: $user;$client_ip;注册失败(ssl)"`;





		echo "<script language=javascript> window.alert('密码输入错误');


				history.go(-1);</script>";


		exit()	;			


			


	}


//	echo "$ip $mask $client_ip";


	$ip_b = dectobin($ip);


	$mask_b = dectobin($mask);


	$client_ip_b = dectobin($client_ip);


//	echo "$ip_b $mask_b $client_ip_b";





	$resulte1 = $ip_b & $mask_b;


	$resulte2 = $client_ip_b & $mask_b;


	if (strcmp($resulte1,$resulte2) != 0){


		`logger "fwserver: $user;$client_ip;注册失败(ssl)"`;





		echo "<script language=javascript> window.alert('您没有权限从 $client_ip 登录'); history.go(-1);</script>";


		exit()	;			


	}


	if($sortt==0)


	{ `logger "fwserver: $user;$client_ip;注册成功(ssl)"`;





	  echo "<script language=javascript>window.location='index.php';</script>";


	exit()	;				


	}	


	return $sortt;


		





}


?>