PHP WebShell

• .. (вверх)
• [DIR] ..
• [FILE] dismiss_trust_banner.php
• [FILE] revoke_device.php
• [FILE] revoke_session.php
• [FILE] sessions.php
• [FILE] trust_device.php

Просмотр файла: revoke_session.php

<?php
require_once __DIR__ . '/../../config/bootstrap.php';
require_once __DIR__ . '/../../lib/csrf.php';
if (empty($_SESSION['user_id'])) { header('Location:/auth/login.php'); exit; }
csrf_verify_or_fail($_POST['csrf'] ?? null, '/auth/login.php');

$userId = (int)$_SESSION['user_id'];
$usessId = (int)($_POST['id'] ?? 0);

if ($usessId > 0) {
  $u = $conn->prepare("UPDATE user_sessions SET revoked_at=NOW() WHERE usess_id=? AND user_id=?");
  $u->bind_param('ii', $usessId, $userId);
  $u->execute(); $u->close();
}
header('Location: /user/security/sessions.php'); exit;

Выполнить команду