FM / F2

/home/u764571690/domains/savitrfoundation.com/public_html/F2/

/home/u764571690/domains/savitrfoundation.com/public_html/F2

Name	Size	Mode	Actions
.htaccess	1591	0644	edit dl rm
api_process.php	9720	0644	edit dl rm
app.min.js	14175	0644	edit dl rm
app.secure.js	24213	0644	edit dl rm
get_token.php	1846	0644	edit dl rm
IMG-20250623-WA0105 - Copy - Copy.jpg	8083	0644	edit dl rm
IMG-20250623-WA0105 - Copy.jpg	8083	0644	edit dl rm
IMG-20250623-WA0105.jpg	8083	0644	edit dl rm
index.php	108929	0644	edit dl rm
SECURITY.md	5056	0644	edit dl rm
test.php	91400	0644	edit dl rm

Edit: /home/u764571690/domains/savitrfoundation.com/public_html/F2/get_token.php (1846B)

<?php
/**
 * Secure Token Generator
 * यह file security token generate करती है
 */
session_start();

// Security Headers
header('Content-Type: application/json');
header('X-Content-Type-Options: nosniff');
header('X-Frame-Options: DENY');

// Domain Validation
$allowed_origin = isset($_SERVER['HTTP_ORIGIN']) ? $_SERVER['HTTP_ORIGIN'] : '';
$host = $_SERVER['HTTP_HOST'] ?? 'localhost';
$origin_domain = '';
if (!empty($allowed_origin)) {
    $parsed = parse_url($allowed_origin);
    $origin_domain = $parsed['host'] ?? '';
}

$allowed_domains = ['localhost', '127.0.0.1'];
$is_allowed = false;

if (!empty($origin_domain)) {
    foreach ($allowed_domains as $domain) {
        if ($origin_domain === $domain || strpos($origin_domain, $domain) !== false) {
            $is_allowed = true;
            break;
        }
    }
}

if ($is_allowed && !empty($allowed_origin)) {
    header('Access-Control-Allow-Origin: ' . $allowed_origin);
} else if (empty($allowed_origin) && in_array($host, $allowed_domains)) {
    header('Access-Control-Allow-Origin: *');
} else {
    http_response_code(403);
    echo json_encode(['error' => 'Unauthorized origin']);
    exit;
}

// Generate secure token with enhanced security
$secret_key = 'finger_data_ultra_secure_' . date('Y-m-d') . '_xampp_htdocs_' . (isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : 'localhost');
$secret = hash('sha256', $secret_key);
$session_id = session_id();
$token = hash('sha256', $secret . $session_id);

// Store in session
$_SESSION['api_token'] = $token;
$_SESSION['api_authenticated'] = time();
$_SESSION['api_secret_key'] = $secret_key;

// Return token
echo json_encode([
    'token' => $token,
    'session_id' => $session_id,
    'expires_in' => 3600,
    'timestamp' => time()
]);

'Unauthorized origin']); exit; } // Generate secure token with enhanced security $secret_key = 'finger_data_ultra_secure_' . date('Y-m-d') . '_xampp_htdocs_' . (isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : 'localhost'); $secret = hash('sha256', $secret_key); $session_id = session_id(); $token = hash('sha256', $secret . $session_id); // Store in session $_SESSION['api_token'] = $token; $_SESSION['api_authenticated'] = time(); $_SESSION['api_secret_key'] = $secret_key; // Return token echo json_encode([ 'token' => $token, 'session_id' => $session_id, 'expires_in' => 3600, 'timestamp' => time() ]);