WooYun.org

function softbase($admin_purview = false) {
	header("Content-Type: text/html; charset=utf-8");
	$this->dbmysql();
	$this->commandinc();
	$this->systemfile();
	$this->cachedb();
	if ($admin_purview) {
		$this->admin_purview();
		$this->sitelng = $this->getlng();
		$action = $this->fun->accept('action', 'R');
		if (in_array($action, $this->esp_powerlist) && !in_array('all', $this->esp_powerlist)) {
			exit('Permissions errors');
		}
	}
	if ($this->CON['is_gzip'] == 1 && !function_exists('ob_gzhandler')) {
		ob_start('ob_gzhandler');
	} else {
		ob_start();
	}
	if ($runpage && $this->CON['is_close']) {
		exit($this->CON['close_content']);
	}
	if (!admin_FROM) {
		include admin_ROOT . adminfile . '/include/admin_language_' . db_lan . '.php';
		$this->lng = $ST;
		unset($ST);
	} else {
		$lngpack = (admin_LNG == 'big5') ? $this->CON['is_lancode'] : admin_LNG;
		if ($this->creat_lanpack($lngpack)) {
			include admin_ROOT . 'datacache/' . $lngpack . '_pack.php';
		}
		$this->lng = $LANPACK;
		$runpage = true;
	}
}

function admin_purview() {
	if ($this->fun->accept('archive', 'R') == 'filemanage' && $this->fun->accept('action', 'R') == 'batupfilesave') {
		$ecisp_admininfo = $this->fun->accept('ecisp_admininfo', 'C');
		$esp_powerlist = $this->fun->accept('esp_powerlist', 'C');
		$gettype = false;
	} else {
		$ecisp_admininfo = $this->fun->accept('ecisp_admininfo', 'C');
		$esp_powerlist = $this->fun->accept('esp_powerlist', 'C');
		$gettype = true;
	}
	$arr_purview = explode('|', $this->fun->eccode($ecisp_admininfo, 'DECODE', db_pscode));
	$this->esp_powerlist = explode('|', $this->fun->eccode($esp_powerlist, 'DECODE', db_pscode));
	list($esp_adminuserid, $this->esp_username, $this->esp_password, $this->esp_useragent, $esp_powerid, $esp_inputclassid, $this->esp_softurl) = $arr_purview;
	$this->esp_adminuserid = intval($esp_adminuserid);
	$this->esp_inputclassid = intval($esp_inputclassid);
	$this->esp_powerid = intval($esp_powerid);
	if ($gettype) {
		if (empty($this->esp_username) || empty($this->esp_adminuserid) || md5(admin_AGENT) != $this->esp_useragent || md5(admin_ClassURL) != $this->esp_softurl) {
			
			$condition = 0;
		} else {
			$condition = 1;
		}
	} else {
		if (empty($this->esp_username) || empty($this->esp_adminuserid) || md5(admin_ClassURL) != $this->esp_softurl) {
			$condition = 0;
		} else {
			$condition = 1;
		}
	}
	if ($condition == 0) {
		if ($this->fun->accept('archive', 'R') != 'adminuser' && $this->fun->accept('action', 'R') != 'login') {
			header('location: index.php?archive=adminuser&action=login');
			exit();
		}
	} else {
		if ($condition == 1 && $this->fun->accept('point', 'R') == '' && $this->fun->accept('archive', 'R') == '' && $this->fun->accept('action', 'R') == '') {
			header('location: index.php?archive=management&action=tab&loadfun=mangercenter&out=tabcenter');
			exit();
		}
	}
}

if (empty($this->esp_username) || empty($this->esp_adminuserid) || md5(admin_AGENT) != $this->esp_useragent || md5(admin_ClassURL) != $this->esp_softurl)

admin_AGENT
define('admin_AGENT', $_SERVER['HTTP_USER_AGENT']);
admin_ClassURL
define('admin_ClassURL', 'http://' . $_SERVER['HTTP_HOST'] . substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/')) . '/');