Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified	Actions
📁 ..	-	2025-05-25 12:49
📄 auth.php <?php require_once('global.php'); $client = CLIENT::singleton(); if ( !$client->isValid() \|\| (isset($_SERVER['HTTP_REFERER']) && strpos($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST']) === FALSE)) { $client->clear(); header('location:/login.php'); die(); }	269 B	2021-12-15 13:42
📄 global.php <?php ob_start(); // just in case header("Expires: -1"); //ie busting header("Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0"); header("Pragma: no-cache"); header("X-Frame-Options: SAMEORIGIN"); header("X-XSS-Protection: 1;mode=block"); header("Referrer-Policy: same-origin"); header("X-Content-Type-Options: nosniff"); //set auto include path...get rid of all path headaches ini_set('include_path', $_SERVER['LS_SERVER_ROOT'] . 'admin/html/classes/:' . $_SERVER['LS_SERVER_ROOT'] . 'admin/html/classes/ws/:' . $_SERVER['LS_SERVER_ROOT'] . 'admin/html/includes/:.'); // PREVENTING SESSION HIJACKING // Prevents javascript XSS attacks aimed to steal the session ID ini_set('session.cookie_httponly', 1); // PREVENTING SESSION FIXATION // Session ID cannot be passed through URLs ini_set('session.use_only_cookies', 1); // Uses a secure connection (HTTPS) if possible if (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == 'on')) { ini_set('session.cookie_secure', 1); } date_default_timezone_set('America/New_York'); spl_autoload_register( function ($class) { include $class . '.php'; });	1.11 KB	2021-12-15 13:42

Terminal