WooYun.org

<?php
	require 'common.inc.php';
	$club_post = (substr($action, 0, 4) == 'post' && isset($MODULE[18])) ? 1 : 0;
	if(isset($_POST['ok']) && isset($wd) && $wd) {
		if(in_array($action, array('message'))) {
			$url = $action.'.php?';
		} else if($club_post) {
			$catid = intval(substr($action, 4));
			$url = 'index.php?moduleid=18&catid='.$catid.'&';
		} else {
			$moduleid = intval(str_replace('mod', '', $action));
			$url = 'index.php?moduleid='.$moduleid.'&';
		}
		$wd = input_trim($wd);
		$wd = convert($wd, 'UTF-8', DT_CHARSET);
		dheader($url.'kw='.encrypt($wd));
	}
	$head_title = $L['search_title'].$DT['seo_delimiter'].$head_title;
	$foot = 'channel';
	include template('search', 'mobile');
	if(DT_CHARSET != 'UTF-8') toutf8();
	?>

HTTP/1.1 302 Found
	Date: Fri, 30 Oct 2015 03:06:05 GMT
	Server: Apache/2.4.12
	X-Powered-By: PHP/5.6.6
	location: index.php?moduleid=16&kw=1d81E9mw4aiA5dXHvhHh-S-7pzTBTdgq9DDoVGjw-P-P3CT5EW7k6ToojgtYFPI2PCmEIbo1P3BHjCWDwaGD
	Vary: User-Agent
	Content-Length: 0
	Content-Type: text/html;charset=UTF-8

if(strpos($DT_URL, 'action=sync&auth=') !== false && strpos($DT_URL, 'goto=') !== false) {
		if($DT_MOB['os'] == 'ios'||1) {
			isset($auth) or $auth = '';
			$auth = decrypt($auth);
			if($auth) {
				$arr = explode('|', $auth);
				if(check_name($arr[0]) && $_username != $arr[0] && $DT_IP == $arr[1] && $DT_TIME - $arr[2] < 600) {
					include load('member.lang');
					$MOD = cache_read('module-2.php');
					include DT_ROOT.'/module/member/member.class.php';
					$do = new member;
					$user = $do->login($arr[0], '', 0, true);
				}
			}
			$tmp = explode('goto=', $DT_URL);
			$goto = $tmp[1];
			if(preg_match("/^[a-z0-9_\.\?\&\=\-]{5,}$/", $goto)) {
				if(strpos($goto, '://') === false) $goto = $MODULE[2]['linkurl'].$goto;
				$url = $goto;
			}
		}
		dheader($url);
	}

function login($login_username, $login_password, $login_cookietime = 0, $admin = false) {
		global $DT_TIME, $DT_IP, $MOD, $MODULE, $L;
		if(!check_name($login_username)) return $this->_($L['member_login_username_bad']);
		if(!$MOD || !isset($MOD['login_times'])) $MOD = cache_read('module-2.php');
		$login_lock = ($MOD['login_times'] && $MOD['lock_hour']) ? true : false;
		$LOCK = array();
		if($login_lock) {
			$LOCK = cache_read($DT_IP.'.php', 'ban');
			if($LOCK) {
				if($DT_TIME - $LOCK['time'] < $MOD['lock_hour']*3600) {
					if($LOCK['times'] >= $MOD['login_times']) return $this->_(lang($L['member_login_ban'], array($MOD['login_times'], $MOD['lock_hour'])));
				} else {
					$LOCK = array();
					cache_delete($DT_IP.'.php', 'ban');
				}
			}
		}
		$user = userinfo($login_username, 0);
		if(!$user) {
			$this->lock($login_lock, $LOCK, $DT_IP, $DT_TIME);
			return $this->_($L['member_login_not_member']);
		}
		if(!$admin) {
			if($user['password'] != dpassword($login_password, $user['passsalt'])) {
				$this->lock($login_lock, $LOCK, $DT_IP, $DT_TIME);
				return $this->_($L['member_login_password_bad']);
			}
		}
		if($user['groupid'] == 2) return $this->_($L['member_login_member_ban']);
		$userid = $user['userid'];
		if(isset($MODULE[16])) $this->cart($userid);
		if($MOD['credit_login'] > 0 && timetodate($DT_TIME, 3) != timetodate($user['logintime'], 3)) {
			credit_add($login_username, $MOD['credit_login']);
			credit_record($login_username, $MOD['credit_login'], 'system', $L['member_record_login'], $DT_IP);
		}
		$cookietime = $DT_TIME + ($login_cookietime ? intval($login_cookietime) : 86400*7);
		$auth = encrypt($user['userid'].'|'.$user['password']);
		set_cookie('auth', $auth, $cookietime);
		set_cookie('username', $user['username'], $DT_TIME + 30*86400);
		$this->db->query("UPDATE {$this->table_member} SET loginip='$DT_IP',logintime=$DT_TIME,logintimes=logintimes+1 WHERE userid=$userid");
		return $user;
	}