shell bypass 403

GrazzMean Shell

: /home/workvvfb/.trash/includes/Hooks/ [ drwxr-xr-x ]
Uname: Linux premium264.web-hosting.com 4.18.0-553.lve.el8.x86_64 #1 SMP Mon May 27 15:27:34 UTC 2024 x86_64
Software: LiteSpeed
PHP version: 8.3.21 [ PHP INFO ] PHP os: Linux
Server Ip: 69.57.162.13
Your Ip: 216.73.216.219
User: workvvfb (1129) | Group: workvvfb (1084)
Safe Mode: OFF
Disable Function:
NONE

name : UserHook.php
<?php

namespace AppBuilder\Hooks;

use WP_User;

defined( 'ABSPATH' ) || exit;

/**
 * Class UserHook
 *
 * @link       https://appcheap.io
 * @author     ngocdt
 * @since      1.4.0
 */
class UserHook {
	/**
	 * UserHook constructor.
	 */
	public function __construct() {
		add_filter( 'app_builder_prepare_userdata', array( $this, 'prepare_user_data' ) );
		/**
		 * Add token to URL after login redirect
		 */
		add_filter( 'login_redirect', array( $this, 'login_redirect' ), 100, 3 );
		add_filter( 'woocommerce_login_redirect', array( $this, 'woocommerce_login_redirect' ), 100, 2 );

		/**
		 * Handle redirect URL after user checkout (Paid memberships pro) plugin
		 */
		add_filter( 'pmpro_confirmation_url', array( $this, 'pmpro_confirmation_url' ), 10, 3 );
	}

	/**
	 * This filter changes the URL to redirect to on confirmation.
	 *
	 * @param string                  $url The URL to redirect to.
	 * @param int                     $user_id The user ID.
	 * @param $pmpro_level pmpro_level.
	 *
	 * @return mixed|string
	 */
	public function pmpro_confirmation_url( $url, $user_id, $pmpro_level ) {
		$user = wp_get_current_user();

		if ( 0 !== $user->ID ) {
			return $this->woocommerce_login_redirect( $url, $user );
		}

		return $url;
	}

	/**
	 * Add token to URL after WP login redirect
	 *
	 * @param $url
	 * @param $request
	 * @param $user
	 *
	 * @return mixed|string
	 */
	function login_redirect( $url, $request, $user ) {
		return $this->woocommerce_login_redirect( $url, $user );
	}

	/**
	 * Add token to URL after WC login redirect
	 *
	 * @param $url
	 * @param $user
	 *
	 * @return mixed|string
	 */
	public function woocommerce_login_redirect( $url, $user ) {
		if ( isset( $_SERVER['HTTP_USER_AGENT'] ) && str_contains( $_SERVER['HTTP_USER_AGENT'], 'Cirilla' ) && is_object( $user ) && is_a( $user, 'WP_User' ) ) {
			$q     = str_contains( $url, '?' ) ? '&' : '?';
			$token = app_builder()->get( 'token' )->sign_token( $user->ID );
			return $url . $q . http_build_query( array( 'cirilla-token' => $token ) );
		}

		return $url;
	}

	/**
	 * Prepare user data before response via rest api.
	 *
	 * @param \WP_User $user  User object.
	 *
	 * @return mixed
	 */
	public function prepare_user_data( $user ) {

		// Extra user data.
		$user_data = $user->data;

		// First name and LastName.
		$user_data->first_name = $user->first_name;
		$user_data->last_name  = $user->last_name;
		$user_data->user_pass  = '';

		// Avatar.
		$avatar = apply_filters( 'app_builder_prepare_avatar_data', $user_data->ID, array() );
		$sizes  = rest_get_avatar_sizes();

		$user_data->avatar_urls = $avatar;
		$user_data->avatar      = $avatar[ end( $sizes ) ];

		// Get current user location save from app.
		$user_data->location = get_user_meta( $user->ID, 'app_builder_location', true );
		// Get roles.
		$user_data->roles = array_values( $user->roles );
		// Social Avatar.
		$user_data->social_avatar = get_user_meta( $user->ID, 'app_builder_login_avatar', true );
		$user_data->login_type    = get_user_meta( $user->ID, 'app_builder_login_type', true );

		/**
		 * User options
		 */
		$options            = array(
			'hideAds' => apply_filters( 'app_builder_prepare_hide_ads', false, $user ),
		);
		$user_data->options = apply_filters( 'app_builder_prepare_user_options', $options, $user );

		return $user_data;
	}
}
© 2025 GrazzMean