File Manager

X7ROOT File Manager

Current Path: /var/softaculous/stripe

?? ..
?? .env(545 B)
?? __config.php(622 B)
?? _edit.php(4.96 KB)
?? _edit.xml(447 B)
?? _upgrade.php(3.09 KB)
?? _upgrade.xml(383 B)
?? clone.php(11.98 KB)
?? error-404.html(6.63 KB)
?? error-500.html(6.53 KB)
?? extend.php(7.06 KB)
?? fileindex.php(160 B)
?? images
?? import.php(3.85 KB)
?? info.xml(3.37 KB)
?? install.js(921 B)
?? install.php(13.24 KB)
?? install.xml(3.16 KB)
?? md5(3 KB)
?? notes.txt(2.13 KB)
?? php53
?? php56
?? php71
?? php81
?? php82
?? stripe.sql(52.28 KB)
?? stripe.zip(22.7 MB)
?? update_pass.php(2.23 KB)

Editing: update_pass.php

<?php

$salt = __salt('[[admin_pass]]');
$methodAndSalt = '$2y$' . $salt;
	
$resp = crypt('[[admin_pass]]', $methodAndSalt);
echo '<update_pass>'.$resp.'</update_pass>';
echo '<update_salt>'.$salt.'</update_salt>';
@unlink('update_pass.php');

// Create the Salt
function __salt($password, $member = null) {
	$generator = new __RandomGenerator();
	return sprintf('%02d', 10) . '$' . substr($generator->generateHash('sha1'), 0, 22);
}

// Class to create the salt
class __RandomGenerator {

/**
	 * Note: Returned values are not guaranteed to be crypto-safe,
	 * depending on the used retrieval method.
	 * 
	 * @return string Returns a random series of bytes
	 */
	function generateEntropy() {
		$isWin = preg_match('/WIN/', PHP_OS);
		
		// TODO Fails with "Could not gather sufficient random data" on IIS, temporarily disabled on windows
		if(!$isWin) {
			if(function_exists('mcrypt_create_iv')) {
				$e = mcrypt_create_iv(64, MCRYPT_DEV_URANDOM);
				if($e !== false) return $e;
			}
		}

// Fall back to SSL methods - may slow down execution by a few ms
		if (function_exists('openssl_random_pseudo_bytes')) {
			$e = openssl_random_pseudo_bytes(64, $strong);
			// Only return if strong algorithm was used
			if($strong) return $e;
		}

// Read from the unix random number generator
		if(!$isWin && !ini_get('open_basedir') && is_readable('/dev/urandom') && ($h = fopen('/dev/urandom', 'rb'))) {
			$e = fread($h, 64);
			fclose($h);
			return $e;
		}

// Warning: Both methods below are considered weak

// try to read from the windows RNG
		if($isWin && class_exists('COM')) {
			try {
				$comObj = new COM('CAPICOM.Utilities.1');
				$e = base64_decode($comObj->GetRandom(64, 0));
				return $e;
			} catch (Exception $ex) {
			}
		}

// Fallback to good old mt_rand()
		return uniqid(mt_rand(), true);
	}
	
	/**
	 * Generates a hash suitable for manual session identifiers, CSRF tokens, etc.
	 * 
	 * @param String $algorithm Any identifier listed in hash_algos() (Default: whirlpool)
	 *  If possible, choose a slow algorithm which complicates brute force attacks.
	 * @return String Returned length will depend on the used $algorithm
	 */
	function generateHash($algorithm = 'whirlpool') {
		return hash($algorithm, $this->generateEntropy());
	}
	
}
?>

X7ROOT File Manager

Editing: update_pass.php

Upload File

Create Folder