HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/PvdBoogaard/indoorski.nl/backup/oude-site/cms/admin/remote.php
<?php

define('IN_CONTROL_PANEL', true);

require_once(dirname(dirname(__FILE__)) . '/api/iwp.php');

IWP::Set('DebugMode', false);

// A white list of available sections/classes to be called
$whitelist_section = array(
	'categories',
	'content',
	'contenttypes',
	'modules',
	'module',
	'user',
	'settings',
	'tools',
	'auth',
	'groups',
	'lists',
	'layout',
	'importer',
	'imagemanager',
	'maintenance',
	'upgrade'
);

if (isset($_GET['section']) && in_array($_GET['section'], $whitelist_section, true)) {
	IWP::Set('LangFile', 'admin.common,'.'admin.'.$_GET['section']);
}else{
	IWP::Set('LangFile', 'admin.common');
}

IWP::Init('basic,functions,outputbuffer,language,whitelabel,session');

$auth = iwp_admin_auth::getInstance();
if(!$auth->IsLoggedIn()) {
	if(isset($_POST['submit_login'])){
		$auth->RemoteLogin();
	}else{
		if(sizeof($_POST) > 1){
			iwp_session::Set('__postData', serialize($_POST));
		}

		if(sizeof($_GET) > 1){
			iwp_session::Set('__getData', serialize($_GET));
		}
		$auth->SendAjaxLoginForm();
	}
	die();
}else{
	$auth->LoadUserData();
}


if(isset($_GET[stricmp('module', '')])){

	$module = iwp_validation::FilterAlpha($_GET['module']);
	$action = iwp_validation::FilterAlphaNumeric($_GET['action']);
	$action = 'Remote'.$action;

	iwp_template::getInstance()->Assign('module', $module);
	iwp_template::getInstance()->Assign('action', $action);

	$modules = iwp_modules::getInstance();
	$modules->GetModule($module)->$action();

}elseif(isset($_GET['section'])){
	$section = iwp_validation::FilterAlpha($_GET['section']);
	$action = iwp_validation::FilterAlphaNumeric($_GET['action']);
	$classname = 'iwp_admin_'.$section;

	$class = call_user_func(array($classname, 'getInstance'));

	iwp_template::getInstance()->Assign('section', $section);
	iwp_template::getInstance()->Assign('action', $action);

	$action = 'Remote'.$action;
	$class->$action();

}else{
	die('No Access');
}