Graybyt3 Was Here

Linux webm002.cluster105.gra.hosting.ovh.net 5.15.206-ovh-vps-grsec-zfs-classid #1 SMP Fri May 15 02:41:25 UTC 2026 x86_64
Apache
10.105.20.2

token.php

<?php

/**
 * @package   	JCE
 * @copyright 	Copyright (c) 2009-2014 Ryan Demmer. All rights reserved.
 * @license   	GNU/GPL 2 or later - http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
 * JCE is free software. This version may have been modified pursuant
 * to the GNU General Public License, and as distributed it includes or
 * is derivative of works licensed under the GNU General Public License or
 * other free or open source software licenses.
 */
defined('_JEXEC') or die('RESTRICTED');

abstract class WFToken {

/**
     * Create a token-string
     * From JSession::_createToken
     * @copyright Copyright (C) 2005 - 2010 Open Source Matters. All rights reserved.
     * @license   GNU/GPL, see LICENSE.php
     * @access protected
     * @param int $length lenght of string
     * @return string $id generated token
     */
    private static function _createToken($length = 32) {
        static $chars = '0123456789abcdef';
        $max = strlen($chars) - 1;
        $token = '';
        $name = session_name();
        for ($i = 0; $i < $length; ++$i) {
            $token .= $chars[(rand(0, $max))];
        }

return md5($token . $name);
    }

public static function getToken() {
        $session = JFactory::getSession();
        $user = JFactory::getUser();
        $token = $session->get('session.token', null, 'wf');

//create a token
        if ($token === null) {
            $token = self::_createToken(12);
            $session->set('session.token', $token, 'wf');
        }

if (method_exists('JApplication', 'getHash')) {
            return 'wf' . JApplication::getHash($user->get('id', 0) . $token);
        } else {
            return 'wf' . JUtility::getHash($user->get('id', 0) . $token);
        }
    }

/**
     * Check the received token
     */
    public static function checkToken($method = 'POST') {
        $token = self::getToken();
        // check POST and GET for token		
        return JRequest::getVar($token, JRequest::getVar($token, '', 'GET', 'alnum'), 'POST', 'alnum');
    }

}

System Information
*ReClick For Close
File : BlackDragon /wp-includes/js/tinymce/skins/wordpress/images/index.php

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	exploitczk/users	0705	2016-10-07 11:46:18
..	dir	-	exploitczk/users	0705	2016-10-07 11:45:02
extensions	dir	-	exploitczk/users	0705	2016-10-07 11:46:22
browser.php	text/x-php	45.24 KB	exploitczk/users	0604	2016-10-07 11:44:17
document.php	text/x-php	19.39 KB	exploitczk/users	0604	2016-10-07 11:44:17
editor.php	text/x-php	10.15 KB	exploitczk/users	0604	2016-10-07 11:44:17
extensions.php	text/x-php	6.1 KB	exploitczk/users	0604	2016-10-07 11:44:18
index.html	text/html	44 B	exploitczk/users	0604	2016-10-07 11:44:18
language.php	text/x-php	2.55 KB	exploitczk/users	0604	2016-10-07 11:44:19
manager.php	text/x-php	5.42 KB	exploitczk/users	0604	2016-10-07 11:44:19
mime.php	text/x-php	32.06 KB	exploitczk/users	0604	2016-10-07 11:44:19
mobile.php	text/x-php	32.35 KB	exploitczk/users	0604	2016-10-07 11:44:20
plugin.php	text/x-php	13.76 KB	exploitczk/users	0604	2016-10-07 11:44:20
request.php	text/x-php	7.09 KB	exploitczk/users	0604	2016-10-07 11:44:21
tabs.php	text/x-php	5.68 KB	exploitczk/users	0604	2016-10-07 11:44:21
token.php	text/x-php	2.02 KB	exploitczk/users	0604	2016-10-07 11:44:21
utility.php	text/x-php	11 KB	exploitczk/users	0604	2016-10-07 11:44:21
view.php	text/x-php	5.71 KB	exploitczk/users	0604	2016-10-07 11:44:22