Official Joomla_3.8.11-Stable-Full_Package (downloads.joomla.org), installer dir removed. This is the clean deployed core; it byte-matches the live core for the legit files and provides clean versions of the 3 files the attacker trojanized (auth/joomla.php credential-stealer, session/storage.php, event/event.php). Signed-off-by: LÁZÁR Imre <imre@illusion.hu> Assisted-by: claude-code@claude-opus-4-8
57 lines
1.2 KiB
PHP
57 lines
1.2 KiB
PHP
<?php
|
|
/**
|
|
* @package Joomla.Cli
|
|
*
|
|
* @copyright Copyright (C) 2005 - 2018 Open Source Matters, Inc. All rights reserved.
|
|
* @license GNU General Public License version 2 or later; see LICENSE.txt
|
|
*/
|
|
|
|
/**
|
|
* This is a CRON script to delete expired session data which should be called from the command-line, not the
|
|
* web. For example something like:
|
|
* /usr/bin/php /path/to/site/cli/sessionGc.php
|
|
*/
|
|
|
|
// Initialize Joomla framework
|
|
const _JEXEC = 1;
|
|
|
|
// Load system defines
|
|
if (file_exists(dirname(__DIR__) . '/defines.php'))
|
|
{
|
|
require_once dirname(__DIR__) . '/defines.php';
|
|
}
|
|
|
|
if (!defined('_JDEFINES'))
|
|
{
|
|
define('JPATH_BASE', dirname(__DIR__));
|
|
require_once JPATH_BASE . '/includes/defines.php';
|
|
}
|
|
|
|
// Get the framework.
|
|
require_once JPATH_LIBRARIES . '/import.legacy.php';
|
|
|
|
// Bootstrap the CMS libraries.
|
|
require_once JPATH_LIBRARIES . '/cms.php';
|
|
|
|
/**
|
|
* Cron job to trash expired session data.
|
|
*
|
|
* @since 3.8.6
|
|
*/
|
|
class SessionGc extends JApplicationCli
|
|
{
|
|
/**
|
|
* Entry point for the script
|
|
*
|
|
* @return void
|
|
*
|
|
* @since 3.8.6
|
|
*/
|
|
public function doExecute()
|
|
{
|
|
JFactory::getSession()->gc();
|
|
}
|
|
}
|
|
|
|
JApplicationCli::getInstance('SessionGc')->execute();
|