From d2cee79266fa82b48a2db679b2aee8cdfb8fa03e Mon Sep 17 00:00:00 2001
From: loviuz <loviuz@gmail.com>
Date: Sat, 23 Jan 2021 15:27:12 +0100
Subject: [PATCH] Added example website for PoC

---
 example_website/index.php   | 25 +++++++++++++++++++++++++
 example_website/welcome.php | 29 +++++++++++++++++++++++++++++
 2 files changed, 54 insertions(+)
 create mode 100644 example_website/index.php
 create mode 100644 example_website/welcome.php
diff --git a/example_website/index.php b/example_website/index.php
new file mode 100644
index 0000000..1b95c49
--- /dev/null
+++ b/example_website/index.php
@@ -0,0 +1,25 @@
+<?php
+session_start();
+unset( $_SESSION['logged_in'] );
+
+// Login check and redirect to welcome page
+if( $_POST['username'] == 'admin' && $_POST['password'] == 's3cr3t' ){
+    $_SESSION['logged_in'] = true;
+    header("Location: /mysite/welcome.php");
+    exit();
+}
+?>
+
+<html>
+    <head>
+        <title>Login</title>
+    </head>
+
+    <body>
+        <form method="post">
+            <input type="username" name="username">
+            <input type="password" name="password">
+            <button type="submit">LOGIN</button>
+        </form>
+    </body>
+</html>
\ No newline at end of file
diff --git a/example_website/welcome.php b/example_website/welcome.php
new file mode 100644
index 0000000..c4e0769
--- /dev/null
+++ b/example_website/welcome.php
@@ -0,0 +1,29 @@
+<?php
+session_start();
+
+$your_email = "dude@dudelang.com";
+
+// Redirect to login if not logged in
+if( !$_SESSION['logged_in'] ){
+    header("Location: /mysite");
+    exit();
+}
+
+// Set a cookie if email passed via GET are your
+if( $_GET['email'] == $your_email ){
+    setcookie("flag2", 'wow_second_flag', time()+3600);
+}
+
+?>
+<html>
+    <head>
+        <title>Welcome dude!</title>
+    </head>
+
+    <body>
+        <p>Hi dude!</p>
+        <p>Your email is <?php echo $your_email; ?>!</p>
+        <p>Congratulations, the flag is: Sup3rS3cr3tFl4g</p>
+        <p>The second flag is in the cookies :-)</p>
+    </body>
+</html>
\ No newline at end of file
