shell bypass 403
<?php /** * BigBlueButton open source conferencing system - https://www.bigbluebutton.org/. * * Copyright (c) 2016-2018 BigBlueButton Inc. and by respective authors (see below). * * This program is free software; you can redistribute it and/or modify it under the * terms of the GNU Lesser General Public License as published by the Free Software * Foundation; either version 3.0 of the License, or (at your option) any later * version. * * BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License along * with BigBlueButton; if not, see <http://www.gnu.org/licenses/>. */ namespace BigBlueButton\Util; /** * Class UrlBuilder * @package BigBlueButton\Util */ class UrlBuilder { /** * @var string */ private $securitySalt; /** * @var string */ private $bbbServerBaseUrl; /** * UrlBuilder constructor. * * @param $secret * @param $serverBaseUrl */ public function __construct($secret, $serverBaseUrl) { $this->securitySalt = $secret; $this->bbbServerBaseUrl = $serverBaseUrl; } /** * Builds an API method URL that includes the url + params + its generated checksum. * * @param string $method * @param string $params * @param boolean $append * * @return string */ public function buildUrl($method = '', $params = '', $append = true) { return $this->bbbServerBaseUrl . 'api/' . $method . ($append ? '?' . $this->buildQs($method, $params) : ''); } /** * Builds a query string for an API method URL that includes the params + its generated checksum. * * @param string $method * @param string $params * * @return string */ public function buildQs($method = '', $params = '') { return $params . '&checksum=' . sha1($method . $params . $this->securitySalt); } }