HEX
Server: Apache/2.4.59 (Debian)
System: Linux keymana 4.19.0-21-cloud-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64
User: lijunjie (1003)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wp-content/themes/ormedia/keylabData/keman_sub_user/subuser_reg.php
<?php
if (isset($_REQUEST['checking_api_file'])) {
    exit();
}
  $owner = intval($_REQUEST['owner']);

  $has_owner = $wpdb->get_var("SELECT `id` FROM keyman_user where `id` = $owner limit 1");
  if(!($has_owner > 0)) {
    exit(json_encode([
      'rc' => 3,
      'msg' => 'owner不存在'
    ]));
  }

  $owners = $wpdb->get_results("SELECT `id` FROM keyman_user where `owner` = $owner");
  if($owners !== false && count($owners) >= 11) {
    exit(json_encode([
      'rc' => 4,
      'msg' => '子用戶名額已滿(10個)'
    ]));
  }

  $uid = $wpdb->get_var("SELECT `uid` FROM keyman_user where `id` = $owner limit 1");
  $submit_username = $_REQUEST['username'];
  $has_user = $wpdb->get_var("SELECT `id` FROM keyman_user where `username` = '$submit_username' limit 1");

  if($has_user > 0) {
    exit(json_encode([
      'rc' => 1,
      'msg' => '該手機已存在'
    ]));
  }

  $res = $wpdb->insert("keyman_user", [
    'uid' => $uid,
    'owner' => $owner,
    'nickname' => $_REQUEST['nickname'],
    'username' => $_REQUEST['username'],
    'password' => md5($_REQUEST['password'])
  ]);
  if($res !== false) {
    exit(json_encode([
      'rc' => 0,
      'msg' => 'success'
    ]));
  }else {
    exit(json_encode([
      'rc' => 2,
      'msg' => '註冊失敗,請重試'
    ]));
  }