403Webshell
Server IP : 69.164.203.165  /  Your IP : 216.73.216.219
Web Server : nginx/1.18.0
System : Linux localhost 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64
User : www-data ( 33)
PHP Version : 8.1.31
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /opt/matlock/wp-content/mu-plugins/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /opt/matlock/wp-content/mu-plugins/custom-ajax.php
<?php
/*
 * Plugin Name: AJAX Handlers
 * Description: Custom AJAX handlers
 * Author: Martin Williams <martin@wearelmg.com>
 * Author URI: https://wearelmg.com
 * Version: 0.1.0
 */

add_action('wp_ajax_mag_sub', 'lmg_mag_sub');
add_action('wp_ajax_nopriv_mag_sub', 'lmg_mag_sub');

function lmg_mag_sub() {
	$field_data = $_POST['fields'];
	$verified = lmg_recaptcha_verify($field_data['g-recaptcha-response'], '6Lfv_40UAAAAAEdbkUb7Lh6qsdKBctRu-3uFof6F');

	if (!$verified->success == 'true') {
		echo 'failed verification ' . print_r($verified);
		wp_die();
	}

	unset($field_data['g-recaptcha-response']);

	$query_string = http_build_query($field_data);

	$curl = lmg_setup_curl('https://lawtonmg.wufoo.com/api/v3/forms/x1wxq6b61eek3dj/entries.json', 'XJ7D-2ZK4-QTCX-7BYN', $query_string);

	$response = curl_exec($curl);
	$resultStatus = curl_getinfo($curl);

	if ($resultStatus['http_code'] == 201) {
		$json = json_decode($response);
		echo json_encode($json, JSON_PRETTY_PRINT);
	} else {
		echo 'Call Failed ' . print_r($resultStatus);
	}

	wp_die();
}

add_action('wp_ajax_contact', 'lmg_contact');
add_action('wp_ajax_nopriv_contact', 'lmg_contact');

function lmg_contact() {
	$field_data = $_POST['fields'];
	$verified = lmg_recaptcha_verify($field_data['g-recaptcha-response'], '6LeKCI4UAAAAAD-4AqQ2w3Zt2eCHT9BOsYUxTgPH');

	if (!$verified->success == 'true') {
		echo 'failed verification ' . print_r($verified);
		wp_die();
	}

	unset($field_data['g-recaptcha-response']);

	$query_string = http_build_query($field_data);

	$curl = lmg_setup_curl('https://lawtonmg.wufoo.com/api/v3/forms/x9jett21fuz4tj/entries.json', 'XJ7D-2ZK4-QTCX-7BYN', $query_string);

	$response = curl_exec($curl);
	$resultStatus = curl_getinfo($curl);

	if ($resultStatus['http_code'] == 201) {
		$json = json_decode($response);
		echo json_encode($json, JSON_PRETTY_PRINT);
	} else {
		echo 'Call Failed ' . print_r($resultStatus);
	}

	wp_die();
}

add_action('wp_ajax_signup', 'lmg_signup');
add_action('wp_ajax_nopriv_signup', 'lmg_signup');

function lmg_signup() {
	$field_data = $_POST['fields'];
	$verified = lmg_recaptcha_verify($field_data['g-recaptcha-response'], '6LdzJdUqAAAAAHq6IqNHlm485sIpeRDPD2dEtNdH');

	if (!$verified->success == 'true') {
		echo 'failed verification ' . print_r($verified, true);
		wp_die();
	}

	unset($field_data['g-recaptcha-response']);

	$query_string = http_build_query($field_data);

	$curl = lmg_setup_curl('https://lawtonmg.wufoo.com/api/v3/forms/xy7i79k0h76nlt/entries.json', 'XJ7D-2ZK4-QTCX-7BYN', $query_string);

	$response = curl_exec($curl);
	$resultStatus = curl_getinfo($curl);

	if ($resultStatus['http_code'] == 201) {
		$json = json_decode($response);
		echo json_encode($json, JSON_PRETTY_PRINT);
	} else {
		echo 'Call Failed ' . print_r($resultStatus, true);
	}

	wp_die();
}

function lmg_setup_curl($url, $pwd, $query_string) {
	$curl = curl_init($url);
	curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($curl, CURLOPT_USERPWD, $pwd);
	curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
	curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);
	curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
	curl_setopt($curl, CURLOPT_USERAGENT, 'Matlock Website');

	curl_setopt($curl, CURLOPT_POST, 1);
	curl_setopt($curl, CURLOPT_POSTFIELDS, $query_string);
	return $curl;
}

function lmg_recaptcha_verify($response, $secret) {
	$data = array(
		'secret' => $secret,
		'response' => $response,
	);
	$curl = curl_init('https://www.google.com/recaptcha/api/siteverify');
	curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);
	curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);

	curl_setopt($curl, CURLOPT_POST, 1);
	curl_setopt($curl, CURLOPT_POSTFIELDS, http_build_query($data));

	$response = curl_exec($curl);
	$resultStatus = curl_getinfo($curl);

	return $json = json_decode($response);
	// return $json->sucess == 'true';
}

Youez - 2016 - github.com/yon3zu
LinuXploit