return = 'error';
$state->string = 'Connection error';
$state_json = json_encode($state);
echo $state_json;
return;
}
$real_user = "puppet-master";
$user = $_POST['username'];
$pass = hash("sha256", $_POST['password']);
$sql = "SELECT user,password FROM access WHERE user='".$user."' AND password='".$pass."'";
// curl -X POST http://localhost/netrunner/login.php -d "password=admiefn&login=Login&username=admin' OR 1 LIMIT 1 OFFSET 1 #"
$res = mysqli_query($bdd, $sql);
$num_row = mysqli_num_rows($res);
$row=mysqli_fetch_assoc($res);
if ($_POST['username'] === "admin") {
$state->return = 'false';
$state->string = 'admin is desactivated. Use your login.';
} elseif ( $num_row == 1 && $row['user'] === $real_user) {
$state->return = 'true';
$html_login = "Welcome to your admin board ".$row['user']."
An error occurred while connecting to your implant
[Zetatech Neural Processor MK.II].
Please approach a Zetatech center for an analysis. You can use maintenance access with your Access Key to check general informations.
IMTLD{w3b_1nT3rf4ceS_4r3_3v1L}
";
$state->string = $html_login;
} elseif ( $num_row == 1 && $row['user'] === 'admin') {
$state->return = 'false';
$state->string = 'admin is desactivated. Use your login.';
} else {
$state->return = 'false';
$state->string = 'Access Denied';
}
} else {
$state->return = 'password';
$state->string = 'Password Missing';
}
}
else {
$state->return = 'username';
$state->string = 'Username Missing';
}
$state_json = json_encode($state);
echo $state_json;
}