HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.30
System: Linux iZj6c1151k3ad370bosnmsZ 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
User: root (0)
PHP: 7.4.30
Disabled: NONE
Upload Files
File: /var/www/html/breadsecret.com/wp-content/plugins/wordpress-social-login/hybridauth/index.php
<?php
/*!
* WordPress Social Login
*
* https://miled.github.io/wordpress-social-login/ | https://github.com/miled/wordpress-social-login
*   (c) 2011-2020 Mohamed Mrassi and contributors | https://wordpress.org/plugins/wordpress-social-login/
*/

// ------------------------------------------------------------------------
//	Handles (or rather attemps to handdle) LEGACY WSL End Points (of v2)
// ------------------------------------------------------------------------
// This is supposedly a temporary measure until users could migrate their 
// existing callbacks, and it's to be removed in a subsequent release.
// ------------------------------------------------------------------------

if ( headers_sent() ) {
    die("HTTP headers already sent to browser and WSL won't be able to start/resume PHP session.");
}

if ( ! session_start() ) {
    die("WSL couldn't start new PHP session.");
}

$ha_abspath = __DIR__ . '/../';

if( ! file_exists( $ha_abspath . 'library/src/autoload.php' ) ){
    die("WSL couldn't find required files.");
}

require_once $ha_abspath . 'library/src/autoload.php';

$hauth_done = filter_input(INPUT_GET, 'hauth_done', FILTER_SANITIZE_SPECIAL_CHARS);

if ( ! empty( $hauth_done ) ) {
	$url = Hybridauth\HttpClient\Util::getCurrentUrl(false);

	$url = str_ireplace( '/hybridauth/index.php', '/hybridauth/callbacks/', $url );

	$url .= strtolower( $hauth_done ) .  '.php?';

	unset( $_GET['hauth_done'] );

	foreach ($_GET as $key => $value) {
		$url .= $key . '=' . urlencode( $value ) . '&';
	}

	Hybridauth\HttpClient\Util::redirect($url);
}

$end_points_test = filter_input(INPUT_GET, 'end_points_test', FILTER_SANITIZE_SPECIAL_CHARS);

if ( empty( $end_points_test ) ) {
	header("HTTP/1.0 403 Forbidden");
	die;
}