From a3f65eb51664ab24fab0b310636ebd2c3edbfa83 Mon Sep 17 00:00:00 2001
From: jiangsir <1463310682@qq.com>
Date: Thu, 12 Sep 2024 17:54:00 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20src/index.php?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/index.php | 35 ++++++++++++++++++++++++++++++++---
 1 file changed, 32 insertions(+), 3 deletions(-)
diff --git a/src/index.php b/src/index.php
index 9356689..4ecf9cf 100644
--- a/src/index.php
+++ b/src/index.php
@@ -4,9 +4,9 @@
 
     <head>
         <meta charset="UTF-8">
-        <title>登录</title>
+        <title>??</title>
     </head>
-    <p>这里是管理员登录入口</p>
+    <p>??????????</p>
     <form method="POST" action="">
         Username: <input type="text" name="username"> <br>
         Password: <input type="password" name="password"> <br>
@@ -14,4 +14,33 @@
     </form>
     <!-- /source.txt -->
 </body>
- setcookie("ahash", md5($secret . urldecode("admin" . "admin")), time() + (60 * 60 * 24 * 7));
\ No newline at end of file
+
+</html <?php
+
+
+$flag = "flag{G_du93ksy639_sjd}";
+$secret = "sGucne9iD0"; // 10 characters long
+setcookie("ahash", md5($secret . urldecode("admin" . "admin")), time() + (60 * 60 * 24 * 7));
+if(!isset($_POST["username"]) || !isset($_POST["password"])){
+	exit();
+}
+$username = $_POST["username"];
+$password = $_POST["password"];
+ 
+if (!empty($_COOKIE["check"])) {
+
+
+    if (urldecode($username) === "admin" && urldecode($password) != "admin") {
+        if ($_COOKIE["check"] === md5($secret . urldecode($username . $password))) {
+            echo "Login successful.\n";
+            die ("The flag is ". $flag);
+        }
+        else {
+            die ("Wrong Cookies. Get out!");
+        }
+    }
+    else {
+        die ("Admins only");
+    }
+}
+ 
