Few more snippets

-


1. Base64 Encode and Decode String in PHP

function base64url_encode($plainText) {
	$base64 = base64_encode($plainText);
	$base64url = strtr($base64, '+/=', '-_,');
	return $base64url;
}

function base64url_decode($plainText) {
	$base64url = strtr($plainText, '-_,', '+/=');
	$base64 = base64_decode($base64url);
	return $base64;
} 

Code language: PHP (php)

2. Get Remote IP Address in PHP

function getRemoteIPAddress() {
	$ip = $_SERVER['REMOTE_ADDR'];
	return $ip;
}

Code language: PHP (php)
The above code will not work in case your client is behind proxy server. In that case use below function to get real IP address of client.
function getRealIPAddr()
{
	if (!empty($_SERVER['HTTP_CLIENT_IP']))   //check ip from share internet
	{
		$ip=$_SERVER['HTTP_CLIENT_IP'];
	}
	elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))   //to check ip is pass from proxy
	{
		$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
	}
	else
	{
		$ip=$_SERVER['REMOTE_ADDR'];
	}
	return $ip;
}

Code language: PHP (php)

3. Seconds to String

This function will return the duration of the given time period in days, hours, minutes and seconds. e.g. secsToStr(1234567) would return “14 days, 6 hours, 56 minutes, 7 seconds”
function secsToStr($secs) {
	if($secs>=86400){$days=floor($secs/86400);$secs=$secs%86400;$r=$days.' day';if($days<>1){$r.='s';}if($secs>0){$r.=', ';}}
	if($secs>=3600){$hours=floor($secs/3600);$secs=$secs%3600;$r.=$hours.' hour';if($hours<>1){$r.='s';}if($secs>0){$r.=', ';}}
	if($secs>=60){$minutes=floor($secs/60);$secs=$secs%60;$r.=$minutes.' minute';if($minutes<>1){$r.='s';}if($secs>0){$r.=', ';}}
	$r.=$secs.' second';if($secs<>1){$r.='s';}
	return $r;
}

Code language: PHP (php)

4. Email validation snippet in PHP

$email = $_POST['email'];
if(preg_match("~([a-zA-Z0-9!#$%&amp;'*+-/=?^_`{|}~])@([a-zA-Z0-9-]).([a-zA-Z0-9]{2,4})~",$email)) {
	echo 'This is a valid email.';
} else{
	echo 'This is an invalid email.';
} 

Code language: PHP (php)

5. Parsing XML in easy way using PHP

Required Extension: SimpleXML
//this is a sample xml string
$xml_string="<?xml version='1.0'?>
<moleculedb>
    <molecule name='Benzine'>
        <symbol>ben</symbol>
        <code>A</code>
    </molecule>
    <molecule name='Water'>
        <symbol>h2o</symbol>
        <code>K</code>
    </molecule>
</moleculedb>";

//load the xml string using simplexml function
$xml = simplexml_load_string($xml_string);

//loop through the each node of molecule
foreach ($xml->molecule as $record)
{
   //attribute are accessted by
   echo $record['name'], '  ';
   //node are accessted by -> operator
   echo $record->symbol, '  ';
   echo $record->code, '<br />';
}

Code language: PHP (php)

6. Database Connection in PHP

<?php
if(basename(__FILE__) == basename($_SERVER['PHP_SELF'])) send_404();
$dbHost = "localhost";        
//Location Of Database usually its localhost
$dbUser = "xxxx";            
//Database User Name
$dbPass = "xxxx";            
//Database Password
$dbDatabase = "xxxx";      
 //Database Name

$db = mysql_connect("$dbHost", "$dbUser", "$dbPass") or die ("Error connecting to database.");
mysql_select_db("$dbDatabase", $db) or die ("Couldn't select the database.");

# This function will send an imitation 404 page if the user
# types in this files filename into the address bar.
# only files connecting with in the same directory as this
# file will be able to use it as well.
function send_404()
{
    header('HTTP/1.x 404 Not Found');
    print '<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">'."n".
    '<html><head>'."n".
    '<title>404 Not Found</title>'."n".
    '</head><body>'."n".
    '<h1>Not Found</h1>'."n".
    '<p>The requested URL '.
    str_replace(strstr($_SERVER['REQUEST_URI'], '?'), '', $_SERVER['REQUEST_URI']).
    ' was not found on this server.</p>'."n".
    '</body></html>'."n";
    exit;
}

# In any file you want to connect to the database, 
# and in this case we will name this file db.php 
# just add this line of php code (without the pound sign):
# include"db.php";
?>

Code language: PHP (php)

7. Creating and Parsing JSON data in PHP

Following is the PHP code to create the JSON data format of above example using array of PHP.
$json_data = array ('id'=>1,'name'=>"rolf",'country'=>'russia',"office"=>array("google","oracle"));
echo json_encode($json_data);

Code language: PHP (php)
Following code will parse the JSON data into PHP arrays.
$json_string='{"id":1,"name":"rolf","country":"russia","office":["google","oracle"]} ';
$obj=json_decode($json_string);
//print the parsed data
echo $obj->name; //displays rolf
echo $obj->office[0]; //displays google

Code language: PHP (php)

8. Process MySQL Timestamp in PHP

$query = "select UNIX_TIMESTAMP(date_field) as mydate from mytable where 1=1";
$records = mysql_query($query) or die(mysql_error());
while($row = mysql_fetch_array($records))
{
	echo $row;
} 

Code language: PHP (php)

9. Generate An Authentication Code in PHP

This basic snippet will create a random authentication code, or just a random string.
<?php
# This particular code will generate a random string
# that is 25 charicters long 25 comes from the number
# that is in the for loop
$string = "abcdefghijklmnopqrstuvwxyz0123456789";
for($i=0;$i<25;$i++){
    $pos = rand(0,36);
    $str .= $string{$pos};
}
echo $str;
# If you have a database you can save the string in 
# there, and send the user an email with the code in
# it they then can click a link or copy the code
# and you can then verify that that is the correct email
# or verify what ever you want to verify
?> 

Code language: PHP (php)

10. Date format validation in PHP

Validate a date in “YYYY-MM-DD” format.
function checkDateFormat($date)
{
	//match the format of the date
	if (preg_match ("/^([0-9]{4})-([0-9]{2})-([0-9]{2})$/", $date, $parts))
	{
		//check weather the date is valid of not
		if(checkdate($parts[2],$parts[3],$parts[1]))
			return true;
		else
		return false;
	}
	else
		return false;
}

Code language: PHP (php)

11. HTTP Redirection in PHP

<?php
	header('Location: http://you_stuff/url.php'); // stick your url here
?>

Code language: PHP (php)

12. Directory Listing in PHP

<?php
 
function list_files($dir)
{
	if(is_dir($dir))
  	{
  		if($handle = opendir($dir))
  		{
  			while(($file = readdir($handle)) !== false)
  			{
  				if($file != "." &amp;&amp; $file != ".." &amp;&amp; $file != "Thumbs.db"/*pesky windows, images..*/)
  				{
  					echo '<a target="_blank" href="'.$dir.$file.'">'.$file.'</a><br>'."\n";
  				}
  			}
  			closedir($handle);
  		}
	}
}

/*
To use:
 
<?php
	list_files("images/");
?>
*/
?>

Code language: PHP (php)

13. Browser Detection script in PHP

<?php
	$useragent = $_SERVER ['HTTP_USER_AGENT'];
	echo "<b>Your User Agent is</b>: " . $useragent; 
?>

Code language: PHP (php)

14. Unzip a Zip File

<?php
    function unzip($location,$newLocation){
        if(exec("unzip $location",$arr)){
            mkdir($newLocation);
            for($i = 1;$i< count($arr);$i++){
                $file = trim(preg_replace("~inflating: ~","",$arr[$i]));
                copy($location.'/'.$file,$newLocation.'/'.$file);
                unlink($location.'/'.$file);
            }
            return TRUE;
        }else{
            return FALSE;
        }
    }
?>

Comments

Post a Comment

Popular posts from this blog

Mobexler: Os built for Pentesting

-
Image
  Mobexler Mobexler is a customized virtual machine, based on Elementary OS, designed to help in penetration testing of Android & iOS applications. Mobexler comes preinstalled with various open-source tools, scripts, prerequisites, etc. which are needed for security testing Android & iOS application. Mobexler is  unique  for several reasons: O ne platform capable of managing Android Device/emulator and iOS devices, both at the same time. Comes preinstalled with various updated tools that are needed for security testing. Tools like MobSF are run inside a docker container, which ensures that it is easier to download the newer versions. Running MobSF in the container also gives the capability to perform static analysis on IPA, which otherwise requires Xcode tools. iOS devices can easily be connected through USB and various tools can be used to perform the testing, like Frida, Objection, Hopper, etc. Free for everyone to use. Default Configuration OVA file size: ~16GB...
Read more

Frida: Hook methods

-
Image
  💉 Frida's Gadget Injection on Android: No Root, 2 Methods You will learn  Method 1 :  If targeted APK contains any native library ( <apk>/lib/arm64-v8a/libfromapk.so ), then you can inject  libfrida-gadget.so  as a dependency into the native library. Method 2 :  If APK doesn't contain a native library, then you can inject  System.loadLibrary  bytecode. Basic use case:  you've got a third-party APK (Android application package), and you want to debug/trace/explore/reverse-engineer it, and you have your personal Android phone which you don't want to root. It means you need Frida's Gadget. How it basically works Note: where to get an APK Google Play doesn't allow you to download APK directly. If you decide to analyze some APK, but you haven't got one yet, you have a bunch of options then:  https://www.google.com/search?q=download+apk . https://apkpure.com https://apkmirror.com https://apkcombo.com etc. Method 1: Inject a libfrida-...
Read more

Charles: http/https proxy

-
Image
  Chalres Proxy: Able to interpret , Interrupt both http/https and websocket all Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between their machine and the Internet. This includes requests, responses and the HTTP headers (which contain the cookies and caching information). What Is Charles Proxy? Charles Proxy is a web debugging tool that monitors the network calls and decrypts the web traffic. It helps in understanding the content in your network call. E.g. Requests sent to the server and data fetched from the server etc. This network debugging tool can read the web traffic of Windows, Android and IOS devic es. Configuration Of Charles Proxy On Windows / Mac OS Charles Proxy sits between you & the server and monitors all network calls.  For example,  if you are searching for something on Google, then your machine should make a call to the Google server with the search query. Charles ac...
Read more