From c75cfa07c9f1e83d5284a13a66bc52d70c03879d Mon Sep 17 00:00:00 2001
From: jiangsir <1463310682@qq.com>
Date: Tue, 10 Sep 2024 21:17:59 +0800
Subject: [PATCH] =?UTF-8?q?=E4=B8=8A=E4=BC=A0=E6=96=87=E4=BB=B6=E8=87=B3?=
 =?UTF-8?q?=20src?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/index.php  | 47 +++++++++++++++++++++++++++++++++++++++++++++++
 src/source.txt | 28 ++++++++++++++++++++++++++++
 2 files changed, 75 insertions(+)
 create mode 100644 src/index.php
 create mode 100644 src/source.txt
diff --git a/src/index.php b/src/index.php
new file mode 100644
index 0000000..ac76c4c
--- /dev/null
+++ b/src/index.php
@@ -0,0 +1,47 @@
+<html>
+
+<body>
+
+    <head>
+        <meta charset="UTF-8">
+        <title>登录</title>
+    </head>
+    <p>这里�?管理员登录入�?</p>
+    <form method="POST" action="">
+        Username: <input type="text" name="username"> <br>
+        Password: <input type="password" name="password"> <br>
+        <button type="submit">Submit</button>
+    </form>
+    <!-- /source.txt -->
+</body>
+
+</html <?php
+
+
+$flag = "FLAGFLAGFLAG";
+$secret = "sGucne9iD0"; // 10 characters long
+
+if(!isset($_POST["username"]) || !isset($_POST["password"])){
+	exit();
+}
+$username = $_POST["username"];
+$password = $_POST["password"];
+ 
+if (!empty($_COOKIE["check"])) {
+
+
+    if (urldecode($username) === "admin" && urldecode($password) != "admin") {
+        if ($_COOKIE["check"] === md5($secret . urldecode($username . $password))) {
+            echo "Login successful.\n";
+            die ("The flag is ". $flag);
+        }
+        else {
+            die ("Wrong Cookies. Get out!");
+        }
+    }
+    else {
+        die ("Admins only");
+    }
+}
+ 
+setcookie("ahash", md5($secret . urldecode("admin" . "admin")), time() + (60 * 60 * 24 * 7));
\ No newline at end of file
diff --git a/src/source.txt b/src/source.txt
new file mode 100644
index 0000000..c63f35f
--- /dev/null
+++ b/src/source.txt
@@ -0,0 +1,28 @@
+<?php
+$secret = "XXXXXXXXXX";
+
+if(!isset($_POST["username"]) || !isset($_POST["password"])){
+    exit();
+}
+$username = $_POST["username"];
+$password = $_POST["password"];
+ 
+if (!empty($_COOKIE["check"])) {
+
+
+    if (urldecode($username) === "admin" && urldecode($password) != "admin") {
+        if ($_COOKIE["check"] === md5($secret . urldecode($username . $password))) {
+            echo "Login successful.\n";
+            die ("The flag is ". $flag);
+        }
+        else {
+            die ("Wrong Cookies. Get out!");
+        }
+    }
+    else {
+        die ("Admins only");
+    }
+}
+ 
+setcookie("ahash", md5($secret . urldecode("admin" . "admin")), time() + (60 * 60 * 24 * 7));
+?>
\ No newline at end of file
