• XSS.stack #1 – первый литературный журнал от юзеров форума

luxchecker api в чем проблема

expo2020

RAM
Пользователь
Регистрация
28.06.2022
Сообщения
111
Реакции
17
Код:
public function checkcc(){
        $modal = new Modals();
        $reponse = array();
        $id = $this->input->post('id');
        if(is_numeric($id) && !empty($id)){

            if(is_numeric($this->session->userdata('id'))){
                $this->load->helper('settings_helper');
                $setSettings = new theSettings();
                $data = $setSettings->fetchSettings();
                $checkprice = $data["settings_cccheckprice"];
                $this->load->model('balance_model');

                $Results = $this->cards_model->SpecificGetBoobByIdTocheck('cards',$id);
                if($Results == true){
                    foreach ($Results as $row) {
                        $ccnumber = $row->card_number;
                        $cvv = $row->card_cvv;
                        $exp = $row->card_expdate;
                        $selledon = $row->card_selledon;
                        $selledon = $row->card_selledon;
                        $cardPrices = $row->card_price;
                        $cardseller = $row->card_seller;
                    }

                    $nowdate = date('Y-m-d h:i:s');

                    $purshaseDate = date_create($selledon);
                    $nowdates = date_create($nowdate);

                    $diffs = date_diff($purshaseDate,$nowdates);
                    $diff = $diffs->format("%i");

                    if($diff <= $data['settings_ccchecktime']){
                        $userActualBalancer = $this->balance_model->VerifyBalance();

                        foreach ($userActualBalancer as $row) {
                            $userBalances = $row->balance;
                        }

                        if($userBalances >= $checkprice){
                            $updatedBalnce = (float)$userBalances - (float)$checkprice;

                            $Resupdatebalance = $this->balance_model->updatebalance($this->session->userdata('id'), $updatedBalnce);

                            $this->session->set_userdata( 'balance', $updatedBalnce );

                            if($Resupdatebalance == true){
                                $expdate = explode('/', $exp);

                                $expm = $expdate[0];
                                $expy = $expdate[1];
                                $lenth = strlen($expy);
                                if($lenth == 4){
                                    $expy = substr($expy, 2,3);
                                }                               

                                $apikey = $data["settings_authstuff"];
                                
                                $acct_Username = $data["settings_authstuffuser"];
                                
                                $apiurl = 'https://mirror1.luxchecker.vc/apiv2/ck.php?cardnum='.$ccnumber.'&expm='.$expm.'&expy='.$expy.'&cvv='.$cvv.'&key='.$apikey.'&username='.$acct_Username;
                                
                                $request = file_get_contents($apiurl);

                                $request = json_decode($request, true);
                                
                                $cardresult = $request["auth_message"];
                                if ($cardresult != "Declined") {
                                    $alert = '<b>This card is working.</b><br/> <br/>';
                                    $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                                    $reponse['nboob'] = $this->security->get_csrf_token_name();
                                    $reponse['tboob'] = $this->security->get_csrf_hash();
                                    $reponse['alert'] = $modal->CreateModal('bg-green', 'Success !', $alert);
                                    $Results = $this->cards_model->Updatechecked('cards',array(
                                        'card_checked'=>'1'
                                    ));
                                    echo json_encode($reponse);
                                    exit();
                                }
                                else if ($cardresult =="Declined") {
                                    $userActualBalancer = $this->balance_model->VerifyBalance();

                                    foreach ($userActualBalancer as $row) {
                                        $userBalances = $row->balance;
                                    }

                                    $Refundedbalance = (float)$userBalances + (float)$cardPrices;

                                    $Resupdatebalance = $this->balance_model->updatebalance($this->session->userdata('id'), $Refundedbalance);

                                    $this->session->set_userdata( 'balance', $Refundedbalance );

                                    if($Resupdatebalance == true){
                                        $Results = $this->cards_model->updaterefundauto($id);
                                        if($Results !== false){

                                            $Results = $this->cards_model->getselleractualbalance($cardseller);

                                            if($Results !== false ){
                                                foreach ($Results as $row) {
                                                    $sellernowbalance = $row->sellerbalance;
                                                }
                                            }

                                            $finalsellerbalance = (float)$sellernowbalance - (float)$cardPrices;

                                            $Results = $this->cards_model->updatesellerbalance($cardseller, $finalsellerbalance);
                                            $alert = '<b>Card not working, Object refunded.</b><br/> <br/>';
                                            $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                                            $reponse['nboob'] = $this->security->get_csrf_token_name();
                                            $reponse['tboob'] = $this->security->get_csrf_hash();
                                            $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !', $alert);
                                            $Results = $this->cards_model->Updatechecked('cards',array(
                                                'card_checked'=>'1'
                                            ));
                                            echo json_encode($reponse);
                                            exit();
                                        }
                                        else {
                                            $alert = '<b>An eroor hase been detected.</b><br/> <br/>';
                                            $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                                            $reponse['nboob'] = $this->security->get_csrf_token_name();
                                            $reponse['tboob'] = $this->security->get_csrf_hash();
                                            $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !', $alert);
                                            echo json_encode($reponse);
                                            exit();
                                        }
                                        
                                    }
                                    else {
                                        $alert = '<b>An eroor hase been detected. ER001</b><br/> <br/>';
                                        $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                                        $reponse['nboob'] = $this->security->get_csrf_token_name();
                                        $reponse['tboob'] = $this->security->get_csrf_hash();
                                        $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !', $alert);
                                        echo json_encode($reponse);
                                        exit();
                                    }
                                }
                            }
                            else {
                                $alert = '<b>An eroor hase been detected. ER002</b><br/> <br/>';
                                $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                                $reponse['nboob'] = $this->security->get_csrf_token_name();
                                $reponse['tboob'] = $this->security->get_csrf_hash();
                                $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !', $alert);
                                echo json_encode($reponse);
                                exit();
                            }

                        }
                        else {
                            $alert = '<b>Your balance have no money to cover the check costs</b><br/> <br/>';
                            $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                            $reponse['nboob'] = $this->security->get_csrf_token_name();
                            $reponse['tboob'] = $this->security->get_csrf_hash();
                            $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !', $alert);
                            echo json_encode($reponse);
                            exit();
                        }
                    }
                    else {
                        $alert = '<b>Check Time Out.</b><br/> <br/>';
                        $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                        $reponse['nboob'] = $this->security->get_csrf_token_name();
                        $reponse['tboob'] = $this->security->get_csrf_hash();
                        $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !', $alert);
                        echo json_encode($reponse);
                        exit();
                    }


В чем косяк? При проверке карты, происходит бесконечная загрузка
 
Код:
$alert = '';
                                $alert .= '<div class="card"><h4 class="card-title">'. ucfirst($row->card_contry) .' Card  </h4>';                   
                                $alert .= '<p class="card-text"><b>Card number : </b>'.$row->card_number.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Exp Date : </b>'.$row->card_expdate.'<br/></p>';
                                $alert .= '<p class="card-text"><b>CVV : </b>'.$row->card_cvv.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Holder : </b>'.$row->card_holder.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Billing Address : </b>'.$row->card_billing_address.'<br/></p>';
                                $alert .= '<p class="card-text"><b>City : </b>'.$row->card_city.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Zip : </b>'.$row->card_zip.'<br/></p>';
                                $alert .= '<p class="card-text"><b>VBV : </b>'.$row->card_vbv.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Sold In : </b>'.$row->card_soldin.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Contry : </b>'.$row->card_contry.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Bank : </b>'.$row->card_bank.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Card type : </b>'.$row->card_type.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Card Plan : </b>'.$row->card_plan.'<br/></p>';
                                $alert .= '<p class="card-text"><b>Additionals Info : </b>'.nl2br(htmlspecialchars($row->card_additionals)).'<br/></p>';
                                $alert .= '</div>';
                                $alert .= '<div class="d-flex justify-content-center">';
                                $alert .= '<button type="button" class="btn btn-light" style="margin-right:15px;" data-id="'.$row->card_id.'" onclick="checkthiscchk('.$row->card_id.');">Chk.cards</button>';
                                $alert .= '<button type="button" class="btn btn-light" style="margin-right:15px;" data-id="'.$row->card_id.'" onclick="checkthiscc('.$row->card_id.');">luxchecker</button>';
                                $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                                $alert .= '</div>';
                                
                                $reponse['alert'] = $modal->CreateModal(NULL, '', $alert);
                                $reponse['nboob'] = $this->security->get_csrf_token_name();
                                $reponse['tboob'] = $this->security->get_csrf_hash();
                                echo json_encode($reponse);   
                                exit();
                                
                            }

                        }
                        else {
                            $alert = '<b>An error was detected, Please try again.</b><br/> <br/>';
                               $alert .= '<button type="reset" class="btn btn-light" style="margin-right:15px;" data-dismiss="modal">Close</button>';
                            $reponse['alert'] = $modal->CreateModal('bg-red', 'Error !.', $alert);
                            $reponse['nboob'] = $this->security->get_csrf_token_name();
                            $reponse['tboob'] = $this->security->get_csrf_hash();
                            echo json_encode($reponse);   
                            exit();

код кнопки через какую жмется luxchecker
 
/reportdetails/3/getsmessages/3 403 (Forbidden) - админка

сама ошибка:

{"hml":[],"html":["
\r\n\t\t\t\t\t\t\t\t\t
\r\n\t\t\t\t\t\t\t\t\t\t
test\r\n\t\t\t\t\t\t\t\t\t\t<\/i>User3044 <\/i>2022-12-15 21:23:40 <\/span><\/small> <\/p>\r\n\t\t\t\t\t\t\t\t\t<\/div>\r\n\t\t\t\t\t\t\t\t<\/div>"],"alert":true,"nboob":"tboob","tboob":"72e2a1cf5be75285db9e67336a483bff"}

/dumps/checkthiscc/ - юзер

вот какую ошибку выдает когда кликаешь
 
Код:
function checkthiscc(a) {
    var tboob = $('input[name="tboob"]').val();
    $.ajax({
        url: "cards/checkthiscc/",
        type: "POST",
        data:"id="+a+"&tboob="+tboob,
        dataType: "json",
        success: function(a) {
            $(".page-loader").remove(), $("#Modal").modal("hide"), $("#ModalContiner").html(a.alert), $("#Modal").modal({
                backdrop: "static",
                keyboard: !1
            })
            $('input[name="tboob"]').val(a.tboob);
        }
    })
}

function checkthiscc(a) {
    var tboob = $('input[name="tboob"]').val();
    $.ajax({
        url: "dumps/checkthiscc/",
        type: "POST",
        data:"id="+a+"&tboob="+tboob,
        dataType: "json",
        success: function(a) {
            $(".page-loader").remove(), $("#Modal").modal("hide"), $("#ModalContiner").html(a.alert), $("#Modal").modal({
                backdrop: "static",
                keyboard: !1
            })
            $('input[name="tboob"]').val(a.tboob);
        }
    })
}
 
С самим чекером не помогу, но
403 (Forbidden)
Обычно возникает при проблемах с headers. Или уточните какой там запрос POST\GET.
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх