解密非https会话cookie错误

时间:2019-03-14 15:06:58

标签: php encryption base64 session-cookies

我正在尝试按照本文发布,以作为学习练习从“捕获国旗”事件中解密会话cookie

Wix API

这是我一生中第一次用php编写的php脚本

#!/usr/bin/php
<?php

    echo 'Hello World!';
    $cookie = 'eyJpdiI6ImFUQ0FvMWFSVlNvTmhlQjdLWGw1Z1E9PSIsInZhbHVlIjoicFh6Q09iTDl0K0huWU1Nc1NYVmxSY2hPRGU5Vk85dDJyYUpRbUVjRWg5R0JxYkVobkF3YkZVcVQrakFFUmxaVnZrTjFST3F3RTZ4akpDZEpvUFJiQXc9PSIsIm1hYyI6IjlhYmJhMTY3MWMxYWI3YjJmNmFjMmNkZWE0MWZmMmVhNTNiMjI5ZWY3NzUwNzQ0ZjAzMGQ1ZGU0YzVhNjJmZGYifQ==';
    $cookie_contents = json_decode( base64_decode( $cookie, true ));
    print_r($cookie_contents);
    $value = base64_decode( $cookie_contents->value );
    var_dump($value);
    $iv = base64_decode( $cookie_contents->iv );
    var_dump($iv);
    $clear = unserialize(openssl_decrypt($value, \Config::get( 'app.cipher' ), \Config::get( 'app.key' ), OPENSSL_RAW_DATA, $iv));
    var_dump($clear);
    echo "Cookie contents (Session ID): $clearn";

    ?>

这是带有一些错误的输出

Hello World!stdClass Object
(
    [iv] => aTCAo1aRVSoNheB7KXl5gQ==
    [value] => pXzCObL9t+HnYMMsSXVlRchODe9VO9t2raJQmEcEh9GBqbEhnAwbFUqT+jAERlZVvkN1ROqwE6xjJCdJoPRbAw==
    [mac] => 9abba1671c1ab7b2f6ac2cdea41ff2ea53b229ef7750744f030d5de4c5a62fdf
)
ڶ­¢PGс©±! "¥|9²,IueEǎ
          U¾CuDꮓ¬c$'I 
yy"ng(16) "i0£VU*
PHP Fatal error:  Class 'Config' not found in /home/code/php/test.php on line 12

我无法修复致命错误,我需要有关如何解密cookie中隐藏的标志的指导。

0 个答案:

没有答案
相关问题