139 lines
6.0 KiB
PHP
139 lines
6.0 KiB
PHP
<?php
|
||
//本文件未鉴权,安全起见默认禁用此php文件,需要时自行注释exit()
|
||
exit();
|
||
|
||
|
||
/*
|
||
* 当修改config.php里的加密方式或者加密密码时,可用此文件来重新加密xss记录,js的描述,ip封禁列表
|
||
* 请在修改加密方式或者加密密码后执行此文件（如果选择不加密,加密密码写任意值）
|
||
* 用法：
|
||
* php change_encrypt_pass.php (以前是否加密true/false) (旧加密密码) (旧加密方法AES/RC4) (现在是否加密) (新加密密码) (新加密方法)
|
||
* 举例
|
||
* php change_encrypt_pass.php true bluelotus AES true bluelotus RC4
|
||
* php change_encrypt_pass.php true bluelotus AES false xxxx(任意值) AES
|
||
*/
|
||
|
||
/*
|
||
* 从旧版本升级的方法
|
||
* 1. php change_encrypt_pass.php update (以前是否加密true/false) (旧加密密码)
|
||
* 此时所有xss记录转化为加密开启，密码bluelotus，加密方法RC4
|
||
* 2. 修改config.php，修改加密开关，新密码，加密方式
|
||
* 3. php change_encrypt_pass.php true bluelotus rc4 (现在是否加密) (新加密密码) (新加密方法)
|
||
* 4. 升级完成
|
||
*/
|
||
define('IN_XSS_PLATFORM', true);
|
||
require_once('config.php');
|
||
|
||
if( isset( $argv[1] ) ) {
|
||
if ($argv[1] === 'update')
|
||
update_from_old_version($argv[2], $argv[3]);
|
||
else
|
||
change_pass($argv[1], $argv[2], $argv[3], $argv[4], $argv[5], $argv[6]);
|
||
}
|
||
|
||
function update_from_old_version($old_encrypt_enable, $old_encrypt_pass) {
|
||
//如果从旧版本升级，就统一先切换为RC4，密码bluelotus
|
||
modify_ForbiddenIPList($old_encrypt_enable, $old_encrypt_pass, 'AES', 'true', 'bluelotus', 'RC4');
|
||
modify_xss_record($old_encrypt_enable, $old_encrypt_pass, 'AES', 'true', 'bluelotus', 'RC4');
|
||
}
|
||
|
||
function change_pass($old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type) {
|
||
modify_ForbiddenIPList($old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
modify_xss_record($old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
modify_js_desc(MY_JS_PATH, $old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
modify_js_desc(JS_TEMPLATE_PATH, $old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
}
|
||
|
||
function modify_ForbiddenIPList($old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type) {
|
||
$logfile = DATA_PATH . '/forbiddenIPList.dat';
|
||
|
||
$str = @file_get_contents($logfile);
|
||
if ($str === false)
|
||
return;
|
||
|
||
$str = decrypt($str, $old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type);
|
||
$str = encrypt($str, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
|
||
if (@file_put_contents($logfile, $str))
|
||
echo "修改封禁ip成功\n";
|
||
else
|
||
echo "修改封禁ip失败，可能是没有权限，chmod 777！\n";
|
||
}
|
||
|
||
function modify_xss_record($old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type) {
|
||
$files = glob(DATA_PATH . '/*.php');
|
||
|
||
foreach ($files as $file) {
|
||
$filename = basename($file, ".php");
|
||
if (preg_match('/^[0-9]{10}$/', $filename)) {
|
||
$logFile = dirname(__FILE__) . '/' . DATA_PATH . '/' . $filename . '.php';
|
||
$info = @file_get_contents($logFile);
|
||
|
||
if ($info !== false && strncmp($info, '<?php exit();?>', 15) === 0) {
|
||
$info = substr($info, 15);
|
||
$info = decrypt($info, $old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type);
|
||
} else
|
||
$info = "";
|
||
$info = encrypt($info, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
|
||
if (@file_put_contents($logFile, '<?php exit();?>' . $info))
|
||
echo "修改一条xss记录成功\n";
|
||
else
|
||
echo "修改一条xss记录失败，可能是没有权限，chmod 777！\n";
|
||
|
||
}
|
||
}
|
||
}
|
||
|
||
function modify_js_desc($path, $old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type) {
|
||
$files = glob($path . '/*.js');
|
||
foreach ($files as $file) {
|
||
//由于可能有中文名,故使用正则来提取文件名
|
||
$filename = preg_replace('/^.+[\\\\\\/]/', '', $file);
|
||
$filename = substr($filename, 0, strlen($filename) - 3);
|
||
|
||
$desc = @file_get_contents(dirname(__FILE__) . '/' . $path . '/' . $filename . '.desc');
|
||
|
||
if ($desc !== false)
|
||
$desc = decrypt($desc, $old_encrypt_enable, $old_encrypt_pass, $old_encrypt_type);
|
||
else
|
||
$desc = "";
|
||
|
||
$desc = encrypt($desc, $new_encrypt_enable, $new_encrypt_pass, $new_encrypt_type);
|
||
|
||
if (@file_put_contents(dirname(__FILE__) . '/' . $path . '/' . $filename . '.desc', $desc))
|
||
echo "修改一条js描述成功\n";
|
||
else
|
||
echo "修改一条js描述失败，可能是没有权限，chmod 777！\n";
|
||
}
|
||
}
|
||
|
||
function encrypt($info, $encrypt_enable, $encrypt_pass, $encrypt_type) {
|
||
if ($encrypt_enable) {
|
||
if ($encrypt_type === 'AES') {
|
||
require_once('aes.php');
|
||
$info = AESEncryptCtr($info, $encrypt_pass);
|
||
} else {
|
||
require_once('rc4.php');
|
||
$info = base64_encode(rc4($info, $encrypt_pass));
|
||
}
|
||
} else
|
||
$info = base64_encode($info);
|
||
|
||
return $info;
|
||
}
|
||
|
||
function decrypt($info, $encrypt_enable, $encrypt_pass, $encrypt_type) {
|
||
if ($encrypt_enable) {
|
||
if ($encrypt_type === 'AES') {
|
||
require_once('aes.php');
|
||
$info = AESDecryptCtr($info, $encrypt_pass);
|
||
|
||
} else {
|
||
require_once('rc4.php');
|
||
$info = rc4(base64_decode($info), $encrypt_pass);
|
||
}
|
||
} else
|
||
$info = base64_decode($info);
|
||
return $info;
|
||
} |