T.ME/BIBIL_0DAY
CasperSecurity


Server : Apache/2
System : Linux server-15-235-50-60 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64
User : gositeme ( 1004)
PHP Version : 8.2.29
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Directory :  /home/gositeme/.cursor-server/data/User/History/-29a769b/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/gositeme/.cursor-server/data/User/History/-29a769b/41w6.php
<?php
require_once '../config/database.php';
session_start();

header('Content-Type: application/json');

// Only allow POST requests
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'error' => 'Method not allowed']);
    exit;
}

// Get JSON input
$input = json_decode(file_get_contents('php://input'), true);
$track_id = $input['track_id'] ?? null;
$play_duration = isset($input['play_duration']) ? (float)$input['play_duration'] : 0; // Minimum seconds played

if (!$track_id) {
    http_response_code(400);
    echo json_encode(['success' => false, 'error' => 'Track ID is required']);
    exit;
}

// Require minimum play duration of 3 seconds to count as a valid play (reduced from 10)
$MIN_PLAY_DURATION = 3;
if ($play_duration < $MIN_PLAY_DURATION) {
    echo json_encode(['success' => false, 'error' => 'Play duration too short', 'skipped' => true]);
    exit;
}

try {
    $pdo = getDBConnection();
    
    // Verify track exists and is public
    $stmt = $pdo->prepare("SELECT id FROM music_tracks WHERE id = ? AND is_public = 1");
    $stmt->execute([$track_id]);
    if (!$stmt->fetch()) {
        echo json_encode(['success' => false, 'error' => 'Track not found or not public']);
        exit;
    }
    
    // Add play (with user ID if logged in, or anonymous if not)
    $user_id = $_SESSION['user_id'] ?? null;
    
    if ($user_id) {
        // Check if user already played this track recently (within 1 hour)
        $stmt = $pdo->prepare("SELECT id FROM track_plays WHERE track_id = ? AND user_id = ? AND created_at > DATE_SUB(NOW(), INTERVAL 1 HOUR)");
        $stmt->execute([$track_id, $user_id]);
        if ($stmt->fetch()) {
            // Already played recently, skip
            echo json_encode(['success' => false, 'error' => 'Already played recently', 'skipped' => true]);
            exit;
        }
        // Add new play
        $stmt = $pdo->prepare("INSERT INTO track_plays (track_id, user_id, created_at) VALUES (?, ?, NOW())");
        $stmt->execute([$track_id, $user_id]);
    } else {
        // Anonymous play (track by IP to prevent spam)
        $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
        $stmt = $pdo->prepare("SELECT id FROM track_plays WHERE track_id = ? AND ip_address = ? AND created_at > DATE_SUB(NOW(), INTERVAL 1 HOUR)");
        $stmt->execute([$track_id, $ip]);
        if ($stmt->fetch()) {
            // Already played recently, skip
            echo json_encode(['success' => false, 'error' => 'Already played recently', 'skipped' => true]);
            exit;
        }
        // Add new anonymous play
        $stmt = $pdo->prepare("INSERT INTO track_plays (track_id, ip_address, created_at) VALUES (?, ?, NOW())");
        $stmt->execute([$track_id, $ip]);
    }
    
    echo json_encode(['success' => true]);
    
} catch (Exception $e) {
    error_log("Error recording play: " . $e->getMessage());
    http_response_code(500);
    echo json_encode(['success' => false, 'error' => 'Internal server error']);
}
?> 

CasperSecurity Mini