shell bypass 403
<?php
// +----------------------------------------------------------------------
// | Copyright (c) 2020-08-10 http://myucms.com All rights reserved.
// +----------------------------------------------------------------------
// | Author: 梦雨 <50361804@qq.com>
// +----------------------------------------------------------------------
namespace app\index\controller;
use think\Controller;
use think\Db;
open_ts();
class Code extends Controller
{
//html代码运行
public function code()
{
$c = Db::name('code')->find(get('id'));
if (get('id')) {
$this->assign('c',$c);
}
return view(PATH.'/index/'.set('tpl').'/code/code.html');
}
//html代码运行a页面
public function code_a()
{
$c = Db::name('code')->find(get('id'),0);
if ($c['id']) {
$this->assign('c', $c);
} else {
$code = set('title');
$this->assign('content', $code);
}
return view(PATH.'/index/'.set('tpl').'/code/code_a.html');
}
//html代码运行b页面
public function code_b()
{
$c = Db::name('code')->find(get('id'));
if ($c['id']) {
$this->assign('c', $c);
$code = stripslashes(seo($c['content']));
} else {
$code = set('title');
}
if (_post()) {
//去掉php运行代码
$code = stripslashes(preg_replace("/<\?php(.*?)?>/is", "", $_POST['content']));
}
file_put_contents(md5('run') . '.html', $code);
header("Location:./" . md5('run') . ".html");
}
}