OXIESEC PANEL

Name	Size	Modified	Perms	Actions
📁 ..	-	07/08/2025 06:19:09 PM	rwxr-xr-x
📄 base64.h	1.57 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 basic_functions.h	7.32 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 crc32.h	4.78 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 credits.h	1.7 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 credits_ext.h	5.51 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 credits_sapi.h	1.57 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 crypt_blowfish.h	1.05 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 crypt_freesec.h	949 bytes	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 css.h	1.21 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 cyr_convert.h	1.24 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 datetime.h	1.37 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 dl.h	1.57 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 exec.h	1.69 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 file.h	4.58 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 flock_compat.h	2.07 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 fsock.h	1.57 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 head.h	1.62 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 html.h	2.71 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 html_tables.h	471.57 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 info.h	17.05 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 md5.h	2.12 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 microtime.h	1.33 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 pack.h	1.25 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 pageinfo.h	1.44 KB	07/08/2025 06:19:05 PM	rw-r--r--	Delete
📄 php_array.h	4.38 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_assert.h	1.4 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_browscap.h	1.3 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_crypt.h	1.63 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_crypt_r.h	2 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_dir.h	1.67 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_dns.h	2.82 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_ext_syslog.h	1.47 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_filestat.h	3.28 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_fopen_wrappers.h	1.9 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_ftok.h	1.23 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_http.h	1.76 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_image.h	2.37 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_incomplete_class.h	2.47 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_iptc.h	1.24 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_lcg.h	1.5 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_link.h	1.34 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_mail.h	1.37 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_math.h	4.61 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_metaphone.h	1.21 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_password.h	1.58 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_rand.h	2.56 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_smart_str.h	6.51 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_smart_str_public.h	1.29 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_standard.h	2.21 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_string.h	6.23 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_type.h	1.58 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_uuencode.h	1.46 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_var.h	7.33 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 php_versioning.h	1.37 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 proc_open.h	1.81 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 quot_print.h	1.51 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 scanf.h	2.27 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 sha1.h	1.71 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 streamsfuncs.h	2.78 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 uniqid.h	1.24 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 url.h	2.28 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 url_scanner_ex.h	2.09 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete
📄 winver.h	6.58 KB	07/08/2025 06:19:06 PM	rw-r--r--	Delete

Editing: php_var.h

/* 
   +----------------------------------------------------------------------+
   | PHP Version 5                                                        |
   +----------------------------------------------------------------------+
   | Copyright (c) 1997-2015 The PHP Group                                |
   +----------------------------------------------------------------------+
   | This source file is subject to version 3.01 of the PHP license,      |
   | that is bundled with this package in the file LICENSE, and is        |
   | available through the world-wide-web at the following url:           |
   | http://www.php.net/license/3_01.txt                                  |
   | If you did not receive a copy of the PHP license and are unable to   |
   | obtain it through the world-wide-web, please send a note to          |
   | license@php.net so we can mail you a copy immediately.               |
   +----------------------------------------------------------------------+
   | Author: Jani Lehtimäki <jkl@njet.net>                                |
   +----------------------------------------------------------------------+
*/

/* $Id$ */

#ifndef PHP_VAR_H
#define PHP_VAR_H

#include "ext/standard/basic_functions.h"
#include "ext/standard/php_smart_str_public.h"

PHP_FUNCTION(var_dump);
PHP_FUNCTION(var_export);
PHP_FUNCTION(debug_zval_dump);
PHP_FUNCTION(serialize);
PHP_FUNCTION(unserialize);
PHP_FUNCTION(memory_get_usage);
PHP_FUNCTION(memory_get_peak_usage);

PHPAPI void php_var_dump(zval **struc, int level TSRMLS_DC);
PHPAPI void php_var_export(zval **struc, int level TSRMLS_DC);
PHPAPI void php_var_export_ex(zval **struc, int level, smart_str *buf TSRMLS_DC);

PHPAPI void php_debug_zval_dump(zval **struc, int level TSRMLS_DC);

typedef HashTable* php_serialize_data_t;

struct php_unserialize_data {
	void *first;
	void *last;
	void *first_dtor;
	void *last_dtor;
};

typedef struct php_unserialize_data* php_unserialize_data_t;

PHPAPI void php_var_serialize(smart_str *buf, zval **struc, php_serialize_data_t *var_hash TSRMLS_DC);
PHPAPI int php_var_unserialize(zval **rval, const unsigned char **p, const unsigned char *max, php_unserialize_data_t *var_hash TSRMLS_DC);

#define PHP_VAR_SERIALIZE_INIT(var_hash_ptr) \
do  { \
	/* fprintf(stderr, "SERIALIZE_INIT      == lock: %u, level: %u\n", BG(serialize_lock), BG(serialize).level); */ \
	if (BG(serialize_lock) || !BG(serialize).level) { \
		ALLOC_HASHTABLE(var_hash_ptr); \
		zend_hash_init((var_hash_ptr), 10, NULL, NULL, 0); \
		if (!BG(serialize_lock)) { \
			BG(serialize).var_hash = (void *)(var_hash_ptr); \
			BG(serialize).level = 1; \
		} \
	} else { \
		(var_hash_ptr) = (php_serialize_data_t)BG(serialize).var_hash; \
		++BG(serialize).level; \
	} \
} while(0)

#define PHP_VAR_SERIALIZE_DESTROY(var_hash_ptr) \
do { \
	/* fprintf(stderr, "SERIALIZE_DESTROY   == lock: %u, level: %u\n", BG(serialize_lock), BG(serialize).level); */ \
	if (BG(serialize_lock) || !BG(serialize).level) { \
		zend_hash_destroy((var_hash_ptr)); \
		FREE_HASHTABLE(var_hash_ptr); \
	} else { \
		if (!--BG(serialize).level) { \
			zend_hash_destroy((php_serialize_data_t)BG(serialize).var_hash); \
			FREE_HASHTABLE((php_serialize_data_t)BG(serialize).var_hash); \
			BG(serialize).var_hash = NULL; \
		} \
	} \
} while (0)

#define PHP_VAR_UNSERIALIZE_INIT(var_hash_ptr) \
do { \
	/* fprintf(stderr, "UNSERIALIZE_INIT    == lock: %u, level: %u\n", BG(serialize_lock), BG(unserialize).level); */ \
	if (BG(serialize_lock) || !BG(unserialize).level) { \
		(var_hash_ptr) = (php_unserialize_data_t)ecalloc(1, sizeof(struct php_unserialize_data)); \
		if (!BG(serialize_lock)) { \
			BG(unserialize).var_hash = (void *)(var_hash_ptr); \
			BG(unserialize).level = 1; \
		} \
	} else { \
		(var_hash_ptr) = (php_unserialize_data_t)BG(unserialize).var_hash; \
		++BG(unserialize).level; \
	} \
} while (0)

#define PHP_VAR_UNSERIALIZE_DESTROY(var_hash_ptr) \
do { \
	/* fprintf(stderr, "UNSERIALIZE_DESTROY == lock: %u, level: %u\n", BG(serialize_lock), BG(unserialize).level); */ \
	if (BG(serialize_lock) || !BG(unserialize).level) { \
		var_destroy(&(var_hash_ptr)); \
		efree(var_hash_ptr); \
	} else { \
		if (!--BG(unserialize).level) { \
			var_destroy(&(var_hash_ptr)); \
			efree((var_hash_ptr)); \
			BG(unserialize).var_hash = NULL; \
		} \
	} \
} while (0)

PHPAPI void var_replace(php_unserialize_data_t *var_hash, zval *ozval, zval **nzval);
PHPAPI void var_push_dtor(php_unserialize_data_t *var_hash, zval **val);
PHPAPI void var_push_dtor_no_addref(php_unserialize_data_t *var_hashx, zval **rval);
PHPAPI void var_destroy(php_unserialize_data_t *var_hash);

#define PHP_VAR_UNSERIALIZE_ZVAL_CHANGED(var_hash, ozval, nzval) \
	var_replace((var_hash), (ozval), &(nzval))
	
PHPAPI zend_class_entry *php_create_empty_class(char *class_name, int len);

static inline int php_varname_check(char *name, int name_len, zend_bool silent TSRMLS_DC) /* {{{ */
{
    if (name_len == sizeof("GLOBALS") - 1 && !memcmp(name, "GLOBALS", sizeof("GLOBALS") - 1)) {
		if (!silent) {
			php_error_docref(NULL TSRMLS_CC, E_WARNING, "Attempted GLOBALS variable overwrite");
		}
        return FAILURE;
    } else if (name[0] == '_' &&
            (
             (name_len == sizeof("_GET") - 1 && !memcmp(name, "_GET", sizeof("_GET") - 1)) ||
             (name_len == sizeof("_POST") - 1 && !memcmp(name, "_POST", sizeof("_POST") - 1)) ||
             (name_len == sizeof("_COOKIE") - 1 && !memcmp(name, "_COOKIE", sizeof("_COOKIE") - 1)) ||
             (name_len == sizeof("_ENV") - 1 && !memcmp(name, "_ENV", sizeof("_ENV") - 1)) ||
             (name_len == sizeof("_SERVER") - 1 && !memcmp(name, "_SERVER", sizeof("_SERVER") - 1)) ||
             (name_len == sizeof("_SESSION") - 1 && !memcmp(name, "_SESSION", sizeof("_SESSION") - 1)) ||
             (name_len == sizeof("_FILES") - 1  && !memcmp(name, "_FILES", sizeof("_FILES") - 1)) ||
             (name_len == sizeof("_REQUEST") -1 && !memcmp(name, "_REQUEST", sizeof("_REQUEST") - 1))
            )
            ) {
		if (!silent) {
			php_error_docref(NULL TSRMLS_CC, E_WARNING, "Attempted super-global (%s) variable overwrite", name);
		}
        return FAILURE;
    } else if (name[0] == 'H' &&
            (
             (name_len == sizeof("HTTP_POST_VARS") - 1 && !memcmp(name, "HTTP_POST_VARS", sizeof("HTTP_POST_VARS") - 1)) ||
             (name_len == sizeof("HTTP_GET_VARS") - 1 && !memcmp(name, "HTTP_GET_VARS", sizeof("HTTP_GET_VARS") - 1)) ||
             (name_len == sizeof("HTTP_COOKIE_VARS") - 1 && !memcmp(name, "HTTP_COOKIE_VARS", sizeof("HTTP_COOKIE_VARS") - 1)) ||
             (name_len == sizeof("HTTP_ENV_VARS") - 1 && !memcmp(name, "HTTP_ENV_VARS", sizeof("HTTP_ENV_VARS") - 1)) ||
             (name_len == sizeof("HTTP_SERVER_VARS") - 1 && !memcmp(name, "HTTP_SERVER_VARS", sizeof("HTTP_SERVER_VARS") - 1)) ||
             (name_len == sizeof("HTTP_SESSION_VARS") - 1 && !memcmp(name, "HTTP_SESSION_VARS", sizeof("HTTP_SESSION_VARS") - 1)) ||
             (name_len == sizeof("HTTP_RAW_POST_DATA") - 1 && !memcmp(name, "HTTP_RAW_POST_DATA", sizeof("HTTP_RAW_POST_DATA") - 1)) ||
             (name_len == sizeof("HTTP_POST_FILES") - 1 && !memcmp(name, "HTTP_POST_FILES", sizeof("HTTP_POST_FILES") - 1))
            )
            ) {
		if (!silent) {
			php_error_docref(NULL TSRMLS_CC, E_WARNING, "Attempted long input array (%s) overwrite", name);
		}
        return FAILURE;
    }
	return SUCCESS;
}
/* }}} */

#endif /* PHP_VAR_H */