<?php header('P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"'); header("Cache-Control: no-cache, must-revalidate"); header("Expires: Sat, 6 May 1998 03:10:00 GMT"); header("Access-Control-Allow-Origin: ".$_SERVER['HTTP_ORIGIN']); header('Access-Control-Allow-Credentials: true'); /*===============================================*\ || ############################################# || || # JAKWEB.CH / Version 2.0.2 # || || # ----------------------------------------- # || || # Copyright 2022 JAKWEB All Rights Reserved # || || ############################################# || \*===============================================*/ // filter url inputs function jak_valid_get_cross($value) { $value = html_entity_decode($value); $value = preg_replace('/[^\w-.]/', '', $value); return trim(filter_var($value, FILTER_SANITIZE_FULL_SPECIAL_CHARS)); } // Check with callback function is_valid_callback($input) { $identifier_syntax = '/^[$_\p{L}][$_\p{L}\p{Mn}\p{Mc}\p{Nd}\p{Pc}\x{200C}\x{200D}]*+$/u'; $reserved_words = array('break', 'do', 'instanceof', 'typeof', 'case', 'else', 'new', 'var', 'catch', 'finally', 'return', 'void', 'continue', 'for', 'switch', 'while', 'debugger', 'function', 'this', 'with', 'default', 'if', 'throw', 'delete', 'in', 'try', 'class', 'enum', 'extends', 'super', 'const', 'export', 'import', 'implements', 'let', 'private', 'public', 'yield', 'interface', 'package', 'protected', 'static', 'null', 'true', 'false'); return preg_match($identifier_syntax, $input) && ! in_array(mb_strtolower($input, 'UTF-8'), $reserved_words); } // Check with callback 2 function is_valid_callback2($input) { return !preg_match( '/[^0-9a-zA-Z\$_]|^(abstract|boolean|break|byte|case|catch|char|class|const|continue|debugger|default|delete|do|double|else|enum|export|extends|false|final|finally|float|for|function|goto|if|implements|import|in|instanceof|int|interface|long|native|new|null|package|private|protected|public|return|short|static|super|switch|synchronized|this|throw|throws|transient|true|try|typeof|var|volatile|void|while|with|NaN|Infinity|undefined)$/', $input); } $callback = false; $callback = jak_valid_get_cross($_GET['callback']); if (!isset($callback) || !is_valid_callback($callback) || !is_valid_callback2($callback)) { header('status: 400 Bad Request', true, 400); } else { header('content-type: application/javascript; charset=utf-8'); } if (!isset($_SERVER['HTTP_X_REQUESTED_WITH']) && isset($_GET['id']) && !is_numeric($_GET['id'])) die(json_encode(array('status' => false, 'error' => "No valid ID."))); if (!file_exists('../config.php')) die('include/[clientchat_cross.php] config.php not exist'); require_once '../config.php'; // We do not load any widget code if we are on hosted and expiring date is true. if ((isset($jakosub['groupchats']) && $jakosub['groupchats'] == 0) || (isset($jakosub['active']) && $jakosub['active'] == 0)) die(json_encode(array('status' => false, 'error' => "Account expired or no access to group chats."))); // Some reset $widgethtml = $floatstyle = ''; // Get the client browser $ua = new Browser(); // Is a robot just die if ($ua->isRobot()) die(json_encode(array('status' => false, 'error' => "Robots do not need a live chat."))); // Now check the button id if (file_exists($cacheopid)) { // Group Chat is online show it if (isset($groupchat[$_GET['id']]["active"]) && $groupchat[$_GET['id']]["active"] == 1) { // Float button? Position $floatstyle = ''; if ($groupchat[$_GET['id']]['floatpopup'] && !empty($groupchat[$_GET['id']]['floatcss'])) $floatstyle = ' style="position:fixed;z-index:9999;'.$groupchat[$_GET['id']]['floatcss'].'"'; $widgethtml = '<a href="'.str_replace('include/', '', JAK_rewrite::jakParseurl('groupchat', $groupchat["id"], $groupchat[$_GET['id']]['lang'])).'" target="_blank"'.$floatstyle.'><img src="'.str_replace('include/', '', BASE_URL).JAK_FILES_DIRECTORY.'/buttons/'.$groupchat[$_GET['id']]['buttonimg'].'"></a>'; die(json_encode(array('status' => true, 'title' => $jakwidget[$_GET['id']]['title'], 'widgethtml' => $widgethtml))); // Chat is offline show nothing } else { die(json_encode(array('status' => false, 'error' => "Group Chat is offline"))); } } else { die(json_encode(array('status' => false, 'error' => "No Group Chat available with this ID."))); } ?>